worldleaks
Known ransomware group ACTIVEAlso known as: Hunters International
Currently active
World Leaks is a data-extortion operation launched in 2025 by operators connected to the Hunters International ransomware brand, pivoting from encryption toward pure data-theft extortion. It publishes victim data on a dedicated leak site.
5
Total Claims
3
Critical
—
Records Claimed
4
Industries Hit
Active span: Apr 22, 2026 – Jun 10, 2026 · 5 organizations targeted
Currently active
Actor Threat Profile
Activity Timeline
Peak: Apr 2026 (2)Apr 2026
LessMore
Jun 2026Top Targeted Industries
Healthcare 2
Financial Services 1
Manufacturing 1
Agriculture and Food Production 1
Tradecraft & Infrastructure
0
Documented tools
0 / 0
MITRE tactics / techniques
1
Known leak sites
Targeted Organizations
Claims by worldleaks
Critical
Ransomware Claim: First Federal Savings & Loan
First Federal Savings & Loan
worldleaks
Ransomware Financial Services
Jun 10, 2026 Critical
Ransomware Claim: Access Dental
Access Dental
worldleaks
Ransomware Healthcare
Jun 6, 2026 Critical
Ransomware Claim: Bestat Pharmaservices Corp.
Bestat Pharmaservices Corp.
worldleaks
Ransomware Healthcare
May 13, 2026 High
Ransomware Claim: Birtcher Anderson & Davis
Birtcher Anderson & Davis
worldleaks
Ransomware Manufacturing
Apr 28, 2026 High
Ransomware Claim: Equatorial Coca-Cola Bottling
Equatorial Coca-Cola Bottling
worldleaks
Ransomware Agriculture and Food Production
Apr 23, 2026