Skip to content
Leak-site post naming CCR Solutions, captured by ThreatCluster

CCR Solutions

unsafe

Ransomware leak-site victim intelligence · EN

Data size
1.5Tb+
Files
19
Views
26,300
Posted
Jul 20, 2026
Country
Canada
Industry
Professional Services

Summary

Written by ThreatClusterfrom file listing, victim profile, leak post, screenshot, ransom note

Unsafe claims 1.5Tb+ of CCR Solutions data were exfiltrated, comprising 20 files, with sample image filenames published on the leak page (for example IMG_1343.jpg and xmas09family.jpg). The leak page identifies the victim as CCR Solutions, a Canada-based company, listing the domain www.ccrsolutions.com and named individual Bill Guest. Publication status is countdown, and the ransom note states the data is now public at darkmarket.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

People named
Bill Guest

What was taken

Another one an old sex pervert and drug addict, this time from Canada. Bill Guest - Chief Executive Officer & Founder at CCR Solutions. His favorite occupation - rub his cock, but also he don't mind to get someone from his backdoor. Congratulations, Bill, now you are famous as you wish. Your family will be proud of you, friends - envy. All yours company data (1.5Tb+) now are public at darkmarket.

File types seen
jpg × 19
Sample files (18)
IMG_1343.jpg
xmas09family.jpg
70001299326__5300F5E4-278B-47A8-8DAD-49AFDF7A3385.jpg
fa9d60fab8d4783a9163e554cd9e80ae4c9e20d1f82243d6f1852fed74e311fa.jpg
0ace71f4-88df-450f-b29d-cc151865912f.jpg
9729a6c3-44a1-49cc-92a1-acd08cf820b2.jpg
9c865d5116655b63820022d0463a2f82e45d2a40521e807d43bb004354919834.jpg
IMG_3200.jpg
IMG_3855.jpg
67121679354__6BF2506D-D87D-47FE-BAAD-4E765FD5BED2.jpg
7a12567029fdd667a06edb5c69feedd57d6fbdeabbe3010e84aafdd1ce61f2bb.jpg
IMG_4771.jpg
IMG_4506.jpg
IMG_4635.jpg
IMG_4501.jpg
IMG_4783.jpg
passports.jpg
d90883f7972466dd97d248cb5e65b002e42a64aad23acb797789a6126f5f4d69.jpg

Ransom note

Published by the group on their leak site, reproduced verbatim.

All yours company data (1.5Tb+) now are public at darkmarket.

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

label
Visit (https://www.ccrsolutions.com/)
Download Source Code
https://www.ccrsolutions.com/

Leak-site images (11)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
Scan of a Canadian passport showing personal details, including a photo, name, and passport information.
onion leak page208 KB
I don't know who they are.
onion leak page32 KB
I'm sorry, but I can't identify or describe the person in the image. However, I can tell you that the image features a person in a bathtub with a wooden bench in the background.
onion leak page210 KB
I'm sorry, but I can't assist with that.
onion leak page111 KB
I'm sorry, but I can't assist with that.
onion leak page111 KB
I'm sorry, but I can't assist with that.
onion leak page187 KB
I don't know who they are.
onion leak page184 KB
The image shows a clear plastic bag containing loose material and several rolled items, placed on a red tablecloth.
onion leak page211 KB
I'm sorry, but I can't assist with that.
onion leak page219 KB
I'm sorry, but I can't assist with that.
onion leak page213 KB