Skip to content
Leak-site post naming Arkın Group, captured by ThreatCluster

Arkın Group

blacknevas

Ransomware leak-site victim intelligence

Posted
Jul 14, 2026
Country
TR
Industry
Construction

Victim profile

Revenue
$25 M
Employees
3,000
People named
[object Object]

What was taken

Turkish Cypriot group operating in hospitality, hotels, casinos, yachting, and education with international offices.

Leak-site images (8)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
The image shows a group of individuals in hooded sweatshirts working at computer stations, with a large display featuring various project names and data related to locations in Cyprus.
onion leak page84 KB
The image shows a group of individuals in hooded sweatshirts working at computer stations, with a large display featuring logos and data related to various locations.
onion leak page84 KB
Directory listing of files with .pdf and .jpg extensions, alongside a photograph of a person.
onion leak page291 KB
The image contains a directory listing of files with various names and a photograph of a passport.
onion leak page282 KB
Directory listing of image files with .jpg extensions, including names and file sizes, alongside a small photograph of a person holding a device.
onion leak page245 KB
Scan of a United Arab Emirates passport with handwritten notes and a signature.
onion leak page873 KB
The image depicts a dark, high-tech environment with multiple screens showing a cyber attack in progress, including a world map and code.
onion leak page776 KB