Skip to content
Leak-site post naming CO-OP URBAN BANK LTD, captured by ThreatCluster

CO-OP URBAN BANK LTD

global secret group

Ransomware leak-site victim intelligence · EN

Data size
41.3 GB
Files
125,988
Views
125,988
Posted
Sep 10, 2026
Country
India
Industry
Bank, Finance

Summary

Written by ThreatClusterfrom victim profile, leak post

The group claims 41.3 GB of data from a banking victim associated with the domain indialei.in. The leak page’s victim profile lists domain indialei.in, in the Bank/Finance sector, India. The leak post shows publication status as listed.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Employees
0
Domains
https://indialei.in/detailed-information/353561/335800GR1DJMM8YD7J14/the-gudivada-co-op-urban-bank-limited/
People named
deva2821 veya

What was taken

The Gudivada Co-Operative Urban Bank Ltd. (CO-OP URBAN BANK LTD). LEI Code: 335800GR1DJMM8YD7J14 (Active). Registered Address: 16/340, Opp Bus Stand, Head Office, Main Road, Gudivada, Krishna District, Andhra Pradesh - 521301. Revenue: $50 Million. Industry: Bank, Finance. Employees: 25-50. Data: 41.3 GB (125,988 Files, 14,641 Folders).

Data categories
DatabasesPIIEmailsContractsFinancial dataHR dataSource code
Leak site tags
FuckedINDIA
Sample files (6)
Screenshot 1
Screenshot 2
Screenshot 3
Screenshot 4
Screenshot 5
Screenshot 6

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

Fucked
present
LEI Code
335800GR1DJMM8YD7J14 (Active)
Company Type
Society/Club/Trust/AOP
Registry Code
37AAAAT2586R1ZO
Registered Address
16/340, Opp Bus Stand, Head Office, Main Road, Gudivada, Krishna District, Andhra Pradesh - 521301

Leak-site images (7)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
Screenshot of a web interface displaying various sections labeled "Discovery," "Help to Improve," and a list of colored cards with different titles.
onion leak page946 KB
The image contains various identification documents, including a health insurance card, a member ID card, and a driver's license, with personal details obscured.
onion leak page305 KB
Document titled "Certificate of Compliance" from Saraswat Infotech Pvt Limited, detailing compliance with cyber security requirements and signed by the Chief Technical Officer.
onion leak page288 KB
Screenshot of a financial spreadsheet listing liabilities and assets with various entries and amounts.
onion leak page258 KB
Screenshot of a table containing names, IDs, dates, and numerical values, likely related to financial or personal data.
onion leak page280 KB
Document containing advisory information on cybersecurity threats, including mitigation recommendations and a rating for potential risks.
onion leak page313 KB