Threat Group Profile
worldleaks
Dormant / historical
Victim claims
33
First seen
Mar 2026
Last activity
21 Jul 2026
Tracked since
May 2025
Group overview
World Leaks emerged in January 2025 as a rebrand of the Hunters International ransomware operation, shifting its focus from file encryption to solely stealing sensitive data and threatening to leak it unless a ransom is paid
Preferred targets
Manufacturing · 9
Business Services · 7
Healthcare · 3
Education · 2
Agriculture and Food Production · 2
Technology · 2
Most targeted countries
US · 12
IN · 4
BR · 3
ID · 2
TW · 2
DE · 1