Summary
Written by ThreatClusterfrom file listing, victim profile, leak post, screenshotEverest claims that Greenbotz data totaling about 15 TB across 8,313 files has been leaked, drawn from an AWS-hosted business-document environment with a separate GitLab backup layer. The dataset is described as including resident and tenant names, tenancy and lease documents, verification documents, and related access and vehicle records. The leak post lists the victim as Greenbotz (domain greenbotz.co) and platforms as AWS and GitLab; publication status is countdown.
Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.
Victim profile
- Platforms
- AWS GitLab BiomeX biomex-prod platform
What was taken
The dataset represents a large AWS-hosted business document environment related to the BiomeX / biomex-prod platform, together with a separate GitLab backup layer. Labeled as approximately 15 TB and containing 8,313 files (7,746 in the main AWS environment and 567 TAR backups). It includes 6,587 PDF files, 670 TXT files, 567 TAR archives, 307 XLSX, 179 CSV, 2 DOCX and 1 XML, plus 1,726 non-PDF files. It covers residential property management data including resident/tenant names, tenancy documents, lease terms, vehicle registration records, verification documents, employee face ID references, invoices, receipts, and payment-related records, as well as related helpdesk, reporting, and platform backup materials across multiple BiomeX environments.
Ransom note
Published by the group on their leak site, reproduced verbatim.
The files will be published after the timer counts down. The company still has time to get in touch with us
Also stated on the leak page
Fields this group publishes that do not map to a standard column. Labels are the site's own.
- The files will be published after the timer counts down. The company still has t
- present
Leak-site images (11)
Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.