Skip to content
Leak-site post naming Colonial Hyundai, captured by ThreatCluster

Colonial Hyundai

qilin

Ransomware leak-site victim intelligence

Views
9,134
Posted
Sep 5, 2026
Country
US
Industry
Automotive Parts

Summary

Written by ThreatClusterfrom site fields, victim profile, leak post, screenshot

The group qilin claims Colonial Hyundai is the victim in a leak posted on their site; the post is currently listed. Victim profile on the leak page shows the domain www.colonialhyundai.com and places the company in the Automotive Parts sector. The leak page includes a TOX hash value and ThreatCluster captured a screenshot; the post has 6,331 views. No explicit data categories or volumes are disclosed in the material.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Domains
http://www.colonialhyundai.com

What was taken

Colonial Hyundai Automotive Parts

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

TOX
7C35408411AEEBD53CDBCEBAB167D7B22F1E66614E89DFCB62EE835416F60E1BCD6995152B68
onion_link
http://pandora42btuwlldza4uthk4bssbtsv47y4t5at5mo4ke3h4nqveobyd.onion
Company url
http://www.colonialhyundai.com
WikileaksV2
https://wikileaks2.com/

Leak-site images (2)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
Logo featuring the text "Colonial Hyundai" in stylized red and blue fonts, with stars incorporated into the design.
onion leak page18 KB