Skip to content
Leak-site post naming FinSoft (Kolibri retail back-office software), captured by ThreatCluster
Back to victims

FinSoft (Kolibri retail back-office software)

n0n

Ransomware leak-site victim intelligence · EN

Posted
Sep 22, 2026
Publication
Sep 25, 2026
Countdown
deadline 2026-09-25 01:06 UTC
Country
Uzbekistan
Industry
Retail software vendor / IT services

Summary

Written by ThreatClusterfrom file listing, victim profile, leak post, screenshot

n0n claims to have stolen client databases, back-office platform data, and API service data from FinSoft, an Uzbekistan-based retail software vendor offering the Kolibri back-office software. The leak page identifies FinSoft as the victim and notes Kolibri retail back-office software as the platform involved. Publication status is countdown, with a deadline of 2026-09-25 01:06 UTC.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Platforms
Kolibri retail back-office software

What was taken

FinSoft (Kolibri retail back-office software)

Data categories
client databasesback-office platform dataAPI service data
Leak site tags
UzbekistanKolibri back-office

Leak-site images (1)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture