Skip to content
Leak-site post naming Albania's Official National Teacher Training Portal, captured by ThreatCluster

Albania's Official National Teacher Training Portal

emperador

Ransomware leak-site victim intelligence

Data size
5.9 GB
Views
14,794
Posted
Aug 17, 2026
Country
Albania
Industry
Education

Summary

Written by ThreatClusterfrom site fields, file listing, victim profile, leak post, screenshot

Emperador states that 5.9 GB of data was taken from Albania's official national teacher training portal (domain trajnime.arsimi.rash.al), including roughly 100,000 national ID numbers, full names and teacher certificates in PDF; sample filename published is trajnime.arsimi.rash.al.zip. The leak post is published and identifies the victim as Albania's official national teacher training portal. Data categories cited include national ID numbers, full names and teacher certificates in PDF.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

What was taken

Albania’s official national teacher training portal provides centralized professional development resources and accredited programs for educators nationwide. This leak include data such as; Roughly ~100k Full national ID numbers, full names and teacher certificates in PDF.

Data categories
National ID numbersFull namesTeacher certificates (PDF)
File types seen
zip × 1
Sample files (1)
trajnime.arsimi.rash.al.zip

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

archive_name
trajnime.arsimi.rash.al.zip
data_excerpt
Roughly ~100k Full national ID numbers, full names and teacher certificates in PDF.

Leak-site images (1)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture