Skip to content
Leak site of underground, captured by ThreatCluster

underground

Active

25 tracked victims · First seen May 30, 2023 · Last seen Aug 15, 2025

About

Summarised by ThreatCluster from the group's own leak site

Leak site homepage for Underground store showing a data dump with a list of countries and categories, a data/ALL DATA section, and indicators like NEW data entries and large data sizes; it advertises data publication and data dumps from various entities.

Sectors: Manufacturing, Healthcare, Business Services · Countries: US, KR, CA

Recent victims

View all →
VictimSectorCountryFilesPostedStatus
SFA EngineeringTechnologyKR—Aug 15, 2025
GMORS Co., LtdManufacturingTaiwan—Jun 25, 2025published
Afa Systems Ltd.IndustryCanada20Apr 16, 2025published
shengyusteel.com
shengyusteel.com
ManufacturingTaiwan—Apr 16, 2025published
semex.com
semex.com
ResearchCanada—Apr 16, 2025published
Simmtech Co., Ltd.
simmtech.com
ElectronicsSouth Korea—Dec 16, 2024published
hcsgcorp.comHealthcareUS—Oct 25, 2024
Casio Computer Co., Ltd
www.world.casio.com
Industry, Electr...Japan—Oct 10, 2024published
ramservices.comBusiness Services—Jul 3, 2024
EthypharmPharmaceuticalsFrance—Jul 1, 2024published
A-Line Staffing SolutionsHealthcare—Jun 17, 2024
belcherpharma.comHealthcareUS—Jun 12, 2024
CentralSecurities.comFinancial—Jun 11, 2024
www.belcherpharma.comHealthcareUS—May 17, 2024
kc.co.kr
kc.co.kr
Manufacturing, I...South Korea—May 3, 2024published
bulldogbag.com
bulldogbag.com
ManufacturingCanada—May 1, 2024published
frenckengroup.com
frenckengroup.com
ManufacturingSingapore—May 1, 2024published
synology.com
synology.com
Industry, Manufa...Taiwan, Germany—May 1, 2024published
tpa-group.sk
tpa-group.sk
Business Service...Slovakia—May 1, 2024published
Triathlon.groupTransportation/LogisticsDE—May 1, 2024
awwg.com
awwg.com
ManufacturingSpain, France, U...—May 1, 2024published
KyungChangManufacturing—May 1, 2024
Y. Hata & Co., Ltd.Agriculture and Food ProductionUS—May 1, 2024
Skender ConstructionBusiness ServicesUS—May 1, 2024
Creative Business InteriorsBusiness ServicesUS—May 1, 2024

All ransomware groups · Dark web intelligence