Skip to content
Leak-site post naming EduSpa, captured by ThreatCluster

EduSpa

dragonforce

Ransomware leak-site victim intelligence · EN

Data size
3.59 GB
Posted
Aug 5, 2026
Publication
Aug 5, 2026
Country
South Korea
Industry
Healthcare/Wellness

Summary

Written by ThreatClusterfrom victim profile, leak post

The dragonforce group claims it exfiltrated 3.59 GB of data from EduSpa (eduspa.com), a victim in South Korea. The leak page lists the victim domain as eduspa.com and states the publication status as published. The page also includes a description of Parkmungak as the operator, noting it has been active since 1972.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Headquarters
Seokyung Building 1602-2 Seocho-dong Seocho-gu Fl 3, Seoul, South Korea
Seoul, South Korea
Domains
eduspa.com www.eduspa.com

What was taken

Parkmungak has been operating since 1972, providing a range of services and products tailored to meet the needs of its clients. The company focuses on deliverin...

Leak-site images (2)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
The image contains a logo with the text "DragonForce" in a stylized font, accompanied by an abstract graphic element.
onion leak page46 KB