Everest claims that Greenbotz data totaling about 15 TB across 8,313 files has been leaked, drawn from an AWS-hosted business-document environment with a separate GitLab backup layer. The dataset is described as including resident and tenant names, tenancy and lease documents, verification documents, and related access and vehicle records. The leak post lists the victim as Greenbotz (domain greenbotz.co) and platforms as AWS and GitLab; publication status is countdown.
Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.
The dataset represents a large AWS-hosted business document environment related to the BiomeX / biomex-prod platform, together with a separate GitLab backup layer. The dataset is labeled as approximately 15 TB and contains 8,313 files. The main AWS business-document environment contains 7,746 files, while the separate GitLab backup layer contains 567 TAR backup archives. The dataset includes 6,587 PDF files, 670 TXT files, 567 TAR archives, 307 Excel XLSX spreadsheets, 179 CSV files, 2 Word DOCX files and 1 XML file. In addition to PDF documents, the dataset contains 1,726 non-PDF files, including spreadsheets, CSV exports, text files, system backup archives and configuration-related files. The available data is organized around residential property management, tenant administration, resident onboarding, access control, payment processing, complaint handling, helpdesk workflows, building operations, property announcements, reporting, invoices, receipts and platform backup materials. A significant portion of the files belongs to real resident and tenant administration workflows. The dataset contains signed tenancy agreements, rental agreements, lease renewals, lease extension agreements, stamp duty certificates, tenant authorization documents, resident verification documents, vehicle registration records, vehicle log cards and access-related forms. The tenant and lease data includes 422 tenant agreement files. These files relate to apartment occupancy, lease terms, signed rental arrangements, tenant onboarding, unit-level administration and residential property records. The vehicle and access-management data includes 145 vehicle agreement or vehicle registration files. These files contain vehicle registration materials, log cards, vehicle access documents and supporting records used for parking, access control and resident vehicle administration. The resident verification component includes 661 resident verification files. These files are connected to resident registration, identity verification, approval workflows, property access and internal resident-management processes. The financial and payment component includes 399 invoice files, 346 receipt files and 391 Katomaran payment import files. These records relate to billing, payment confirmation, imported payment data, receipts, invoices, offline payment attachments, deposits and financial administration connected to residential properties and tenant services. The dataset also contains a large operational reporting component, including 3,555 administrative report files and 229 generated report PDFs. These reports are connected to building management, resident services, payment tracking, complaint handling, helpdesk operations, property administration, approvals and internal reporting workflows. The property-management materials include by-laws, AGM minutes, council meeting minutes, newsletters, resident handbooks, renovation documents, notices, user manuals, project updates and building-management documentation. These records show that the dataset covers not only individual resident files, but also the broader operational and governance environment of managed residential properties. The dataset includes complaint, feedback and support-related documents. These files include helpdesk attachments, complaint records, feedback documents, payment images, deposit images and supporting files used in resident-service and issue-resolution workflows. The dataset covers multiple residential and platform environments, including Eco Sanctuary, Flo Residence, Brownstone, Kings Mansion, Adam Park, Greenbotz, Marina Bay, Clementi, Rav, Leshantier, Katomaran and other BiomeX platform areas. The technical backup layer contains 567 GitLab TAR archives, including 564 GitLab backup archives and 3 GitLab configuration backup archives. The GitLab backup filenames cover the period from November 2024 through June 2026 and indicate the presence of source-control, configuration and system-backup materia
Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.