Skip to content
Leak-site post naming Birmingham Museum of Art, captured by ThreatCluster

Birmingham Museum of Art

termite

Ransomware leak-site victim intelligence

Views
7,732
Posted
Feb 25, 2026
Country
US
Industry
Not Found

Summary

Written by ThreatClusterfrom site fields, victim profile, leak post, screenshot

Termite group claims to have exfiltrated data from the Birmingham Museum of Art; the leak post does not disclose any quantities or data types. The leak lists the victim's domain as artsbma.org and includes an onion link for additional information. The leak post is published.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

What was taken

The Birmingham Museum of Art in Alabama features a vast collection of over 27,000 artworks and offers free admission to visitors. The museum is open from Tuesday to Sunday and hosts various exhibitions and events throughout the year. It serves a diverse audience, including families, students, and art enthusiasts, providing educational resources and opportunities for engagement.

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

Extra info
http://y4bdg56uaznmbptf7dgp5xn3sjyyh4qodqjrsbziqatnyapmiqqctgid.onion/artsbma/

Leak-site images (1)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture