Neubox

About the organisation

the following websites is down, their data will be leaked, source codes, docs, databases, phpmyadmin and more 511producciones.com acerosbeta.com advancedaestheticcare.com advancedfootcarergv.com advancedwoundcarergv.com dreduardoalvarez.com echoview.com.mx ellugarcitogastronomico.com empresadelimpiezaencdmx.com empresadelimpiezaenguadalajara.com inventario.ellugarcitogastronomico.com korticalx.com laamatistaeventos.com lascruceseventos.com lumabusiness.com persapartesmetalicas.com pos.ellugarcitogastronomico.com prestaeventos.com.mx puertasparavivienda.com rensomexico.com arkinmexico.com.mx empresadelimpiezaenleon.com misiondefundadores.com riggingmexico.com cacexconsultores.com.mx empresadelimpiezaenmerida.com mynewschoolmexico.com.mx samtrabusiness.com casasyterrenosirem.com empresadelimpiezaenmexico.com opiniones.dreduardoalvarez.com sheigarcia.com cincoonce.com.mx empresadelimpiezaenpuebla.com perforacionesloga.com sistema.vattacademy.com condesareal.com empresadelimpiezaentijuana.com persacontainersdallas.com sistem.mynewschoolmexico.com.mx conexionesymanguerasmonterrey.com empresasloga.com persacontainershouston.com survey.ellugarcitogastronomico.com covasal.com.mx endoscopios.com.mx persacontenedoresjuarez.com tacoselcoreano.com delivery.ellugarcitogastronomico.com eni360.com.mx persacontenedoresqueretaro.com taqueriafundadores.com demmiasocialvenue.com footandanklespecialistrgv.com persacontenedoresramosarizpe.com vattacademy.com destapededrenajeflag.com grupoperforacioneshd.com persacontenedoressanluispotosi.com dicsamonterrey.net igidiamonds.mx persacontenedoressilao.com We ask kind from company to contact for negotiations.

What the listing means

Neubox appeared on the nova leak site on 21 May 2026. Groups publish a victim once negotiations stall or as pressure during them, so a listing usually means data was already exfiltrated. This group has published 21 claims in the last 30 days and remains active.

Recommended actions

• Treat any unsolicited message referencing Neubox as suspicious — leaked data gets weaponised for phishing within days.
• If you hold an account on neubox.com, change that password now, update it anywhere you reused it, and enable two-factor authentication.
• Other Technology organisations should review this group's known TTPs and validate detection coverage against them.
• Watch for follow-on extortion: stolen data is often re-leaked or resold after the initial listing.
• A leak-site listing is a claim made by the attacker, not a confirmed breach — check the organisation's own disclosures before acting on it.

Leak-site evidence

Listing URL https://www.ransomware.live/id/TmV1Ym94QG5vdmE=

Show leak-site screenshot

Captured from the group's extortion site. It may contain the victim's data or the attacker's messaging.