Skip to content
Leak-site post naming CONDOR SPA, captured by ThreatCluster

CONDOR SPA

titan

Ransomware leak-site victim intelligence

Posted
Aug 20, 2026
Country
IT
Industry
Manufacturing

Summary

Written by ThreatClusterfrom site fields, victim profile, leak post, screenshot

The Titan leak claims CONDOR SPA’s entire company infrastructure, including all servers, backups, and workstations, has been encrypted with the TITAN ransomware, and all files are locked. The post states there is no external recovery tool that can help and warns not to attempt restoration or involve authorities. The victim is identified as CONDOR SPA (domain condor-group.it) and the leak post is published.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Domains
www.condor-group.it

What was taken

The entire company infrastructure, including all servers, backups, and workstations, has been encrypted with the TITAN ransomware. Status: All files are locked. No external recovery tool can help. Contact: Reply to the email we sent to the company. Warning: Do not attempt to restore or involve authorities – we monitor your network.

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

Contact
Reply to the email we sent to the company.
Warning
Do not attempt to restore or involve authorities – we monitor your network.

Leak-site images (1)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture