Skip to content
Leak-site post naming Bosnia and Herzegovina Mine Action Center, captured by ThreatCluster

Bosnia and Herzegovina Mine Action Center

emperador

Ransomware leak-site victim intelligence · EN

Data size
1.7 GB
Files
1
Views
21,508
Posted
Sep 9, 2026
Country
Bosnia and Herzegovina
Industry
Public sector

Summary

Written by ThreatClusterfrom file listing, victim profile, leak post, screenshot

Emperador claims to have stolen 1.7 GB of data from the Bosnia and Herzegovina Mine Action Center (BHMAC), with a sample file named BHMAC.data.rar. The leak page identifies the victim domain as www.bhmac.org and states the data was released as a RAR archive. The leak post is published.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Domains
bhmac.org

What was taken

important documents

Data categories
important documents
Leak site tags
BHMACProof ImageGalleryTo Publish
File types seen
rar × 1
Sample files (1)
BHMAC.data.rar

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

Gallery
Proof Image
To Publish
BHMAC.data.rar (1.7 GB)

Leak-site images (3)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
The image features a stylized red logo with angular shapes, resembling a figure with a pointed head and a symmetrical design.
onion leak page1.2 MB
Screenshot of a table listing data related to demining activities, including dates and locations.
onion leak page26 KB