Skip to content
Leak-site post naming Globalport Terminals, captured by ThreatCluster

Globalport Terminals

qilin

Ransomware leak-site victim intelligence · EN

Views
2,897
Posted
Aug 27, 2026
Countdown
119h : 19m
Country
PH
Industry
Business Services

Summary

Written by ThreatClusterfrom site fields, victim profile, leak post, screenshot

The leak claims data from Globalport Terminals — Business Services has been stolen; the post does not specify what data or how much. The victim is identified by the domain globalports.com.ph in the Business Services sector. The publication is in countdown status with 119h 19m remaining, and the leak page lists a TOX hash, a Wikileaks reference, and an onion link.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Domains
http://www.globalports.com.ph

What was taken

Globalport Terminals — Business Services

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

TOX
7C35408411AEEBD53CDBCEBAB167D7B22F1E66614E89DFCB62EE835416F60E1BCD6995152B68
wikileaks
WikileaksV2 (https://wikileaks2.com/)
onion_link
http://pandora42btuwlldza4uthk4bssbtsv47y4t5at5mo4ke3h4nqveobyd.onion

Leak-site images (2)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
Logo of "Globalport Terminals" featuring a green and blue color scheme with a stylized ship icon.
onion leak page15 KB