Skip to content
Leak-site post naming Blenheim, captured by ThreatCluster

Blenheim

spacebears

Ransomware leak-site victim intelligence · EN

Data size
500 GB
Views
24,717
Posted
Jul 6, 2026
Countdown
0 day 0 hour 0 minute
Country
United Kingdom
Industry
Luxury property

Summary

Written by ThreatClusterfrom victim profile, leak post

The group spacebears claims it has exfiltrated over 500 GB of data from Blenheim and published it for sale on their leak site. The material described includes a CRM database, financial records, architectural drawings, CAD/BIM models, planning documentation, and complete buyer details including home layouts. The leak post identifies the victim as Blenheim, a UK-based luxury property company (domain blenheim.co.uk); the publication status is published.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Domains
blenheim.co.uk
Platforms
gofile.io

What was taken

Blenheim is a UK-based luxury property company specializing in high-end residential real estate, architecture, bespoke home design, and property development. With more than 20 years of experience, the company provides an end-to-end service covering property sales, acquisitions, architectural design, construction, and interior design. Operating across Sheffield, Yorkshire, Derbyshire, and the Peak District, Blenheim focuses on creating and marketing distinctive luxury homes tailored to each client's vision. Its multidisciplinary team combines expertise in real estate, architecture, and construction to deliver premium property solutions. Sell over 500 GB of data: - CRM database - Financial records - Architectural drawings, CAD/BIM models, and planning documentation. - Complete buyer details, including the home layout.

Data categories
CRM databaseFinancial recordsArchitectural drawingsCAD/BIM modelsplanning documentationComplete buyer details

Leak-site images (2)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
The image features a stylized illustration of a large building with the word "BLENHEIM" prominently displayed below it.
onion leak page31 KB