Skip to content
Leak-site post naming ARDA, captured by ThreatCluster

ARDA

arcusmedia

Ransomware leak-site victim intelligence

Posted
Sep 16, 2026
Countdown
EST SELL : 5 Days; EST LEAK : 7 Days
Country
Thailand
Industry
Agricultural Research

Summary

Written by ThreatClusterfrom site fields, victim profile, leak post, screenshot, our reporting

ARDA—the Agricultural Research Development Agency (Public Organization) of Thailand—is listed by the WALLSTREET ransomware group on its leak site; the posting is published and shows an EST LEAK countdown of 7 days. The page provides a victim profile including legal name, arda.or.th, sector Agriculture, country Thailand, and a named individual Fyodor Dostoevsky, with a Facebook page also listed. There are no details on data encryption or exfiltration in the leak post; reporting notes ARDA was listed on 2026-09-16.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

People named
Fyodor Dostoevsky

What was taken

The Agricultural Research Development Agency (Public Organization) serves as a …

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

EST LEAK
7 Days
EST SELL
5 Days
Facebook
http://www.facebook.com/ardathai

Leak-site images (1)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture