worldleaks
Active since 2022-06-23
Unverified threat-actor claim — not a regulatory filing
Attribution, victim identity, and counts shown here derive from worldleaks's public extortion-blog claims, aggregated by ransomware.live. They have not been validated by the victim or any regulator. Treat them as the threat actor's assertion until a regulatory filing or victim disclosure corroborates them.
According to ransomware.live, the group claims:
World Leaks emerged in January 2025 as a rebrand of the Hunters International ransomware operation, shifting its focus from file encryption to solely stealing sensitive data and threatening to leak it unless a ransom is paid
Source: Ransomware.live