Threat Group Profile
worldleaks
● Active — last 30 days
Victim claims
31
First seen
Mar 2026
Last activity
02 Jul 2026
Tracked since
May 2025
Group overview
World Leaks emerged in January 2025 as a rebrand of the Hunters International ransomware operation, shifting its focus from file encryption to solely stealing sensitive data and threatening to leak it unless a ransom is paid
Preferred targets
Manufacturing · 8
Business Services · 7
Healthcare · 3
Agriculture and Food Production · 2
Technology · 2
Transportation/Logistics · 2
Most targeted countries
US · 10
IN · 4
BR · 3
ID · 2
TW · 2
DE · 1
