Skip to content
Leak-site post naming Bosnia and Herzegovina Mine Action Center, captured by ThreatCluster

Bosnia and Herzegovina Mine Action Center

emperador

Ransomware leak-site victim intelligence · EN

Data size
1.7 GB
Files
1
Views
2,191
Posted
Sep 9, 2026
Country
Bosnia and Herzegovina
Industry
Government & Defense

Summary

Written by ThreatClusterfrom file listing, victim profile, leak post, screenshot

Emperador claims to have stolen 1.7 GB of data from the Bosnia and Herzegovina Mine Action Center (BHMAC), with a sample file named BHMAC.data.rar. The leak page identifies the victim domain as www.bhmac.org and states the data was released as a RAR archive. The leak post is published.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Domains
bhmac.org

What was taken

Loading...

Data categories
DocumentsImportant documents
Leak site tags
BHMACProof ImageGalleryTo Publish
File types seen
rar × 1
Sample files (1)
BHMAC.data.rar

Leak-site images (3)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
The image features a stylized red logo with angular shapes, resembling a figure with a pointed head and a symmetrical design.
onion leak page1.2 MB
Screenshot of a table listing data related to demining activities, including dates and locations.
onion leak page26 KB