Skip to content
Leak-site post naming Agora coopérative agricole, captured by ThreatCluster

Agora coopérative agricole

qilin

Ransomware leak-site victim intelligence · FR

Files
16
Views
7,090
Posted
Sep 24, 2026
Countdown
Time till publication: 4h : 28m
Country
FR
Industry
Agriculture

Summary

Written by ThreatClusterfrom victim profile, leak post, screenshot

Qilin claims to have leaked data from Agora coopérative agricole; the leak page identifies the victim as coopagora.fr in the Agriculture sector. The publication status is countdown, with 165 hours and 41 minutes remaining, and ThreatCluster captured a screenshot. No data volume or specific content types are disclosed in the leak description.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Domains
coopagora.fr
Platforms
TOX Tor hidden service (onion)

What was taken

Agora coopérative agricole

File types seen
jpg × 16
Sample files (16)
987d13a6160176b35d8a01926c80f0ac.jpg
a3249a0fd5b84454025bb5216b04ab48.jpg
9d628a44bd55547b47c37a19a217caa9.jpg
7ccf0f6803bbc66b307643f3b183fee7.jpg
714cb78e6e891b12f3d40394b581027b.jpg
4812ae9fc97b56f53f28b3e32911cf4d.jpg
835ae2d2679877dd985c319f2c95f1c7.jpg
6d69550acdd26d5958c4bd8225518168.jpg
60a3b67718df0e470cb922ff2447dc48.jpg
c09cf7a074b1ce65f7aa59fb9b0bb7fb.jpg
b13fb1de15411af74af3161559e64214.jpg
592e81bd5ba71522c9e0627454b4f640.jpg
5689d7a8bcfed5b4849120001c424e5d.jpg
4f2a2ae1c96ee89e561ed76bb5c31840.jpg
53e6f5c81fae6cdee73d405152c3e8ce.jpg
95f1d53b77c312c260d30d2f2aa993fc.jpg

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

TOX
7C35408411AEEBD53CDBCEBAB167D7B22F1E66614E89DFCB62EE835416F60E1BCD6995152B68
tox
TOX: 7C35408411AEEBD53CDBCEBAB167D7B22F1E66614E89DFCB62EE835416F60E1BCD6995152B68
onion
http://pandora42btuwlldza4uthk4bssbtsv47y4t5at5mo4ke3h4nqveobyd.onion
onion_link
http://pandora42btuwlldza4uthk4bssbtsv47y4t5at5mo4ke3h4nqveobyd.onion
Company url
http://coopagora.fr
WikileaksV2
https://wikileaks2.com/
wikileaksV2
https://wikileaks2.com/
Time till publication
133h : 40m

Leak-site images (11)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
Screenshot of an Excel spreadsheet displaying data on clients, tonnage, and campaign years, with some cells highlighted in green.
onion leak page57 KB
Document labeled "STRICTEMENT CONFIDENTIEL" with a letter format, including sender and recipient details, dated November 18, 2010.
onion leak page31 KB
Document titled "ACCORD DE CONFIDENTIALITÉ" outlining a confidentiality agreement, including sections on definitions and interpretations.
onion leak page36 KB
Screenshot of a spreadsheet containing various entries with names, email addresses, and URLs.
onion leak page75 KB
Document titled "ACCORD DE CONFIDENTIALITÉ" with sections outlining confidentiality agreements and parties involved, including company names and addresses.
onion leak page32 KB
Screenshot of a spreadsheet with columns including Supplier, Reference, Designation, and various pricing details.
onion leak page93 KB
Screenshot of an Excel spreadsheet displaying salary data with columns for various categories and totals.
onion leak page99 KB
Screenshot of a spreadsheet containing salary information, including columns for names, job titles, and various salary details.
onion leak page102 KB
Scan of a French passport with personal details, including a photograph and identification information.
onion leak page36 KB
Scan of a French passport displaying personal information and a photograph of the passport holder.
onion leak page66 KB

Negotiation

Tox 7C35408411AEEBD53CDBCEBAB167D7B22F1E66614E89DFCB62EE835416F60E1BCD6995152B68
Onion pandora42btuwlldza4uthk4bssbtsv47y4t5at5mo4ke3h4nqveobyd.onion