Skip to content
Leak-site post naming Grupo Juste, captured by ThreatCluster

Grupo Juste

qilin

Ransomware leak-site victim intelligence · EN

Views
4,968
Posted
Sep 18, 2026
Country
MX
Industry
Manufacturing

Summary

Written by ThreatClusterfrom site fields, victim profile, leak post, screenshot, our reporting

Qilin claims Grupo Juste Manufacturing is the victim and has published a leak post. The leak page lists the victim as Grupo Juste Manufacturing, with domain www.grupojuste.com in the manufacturing sector, and shows the post as published with 3,307 views. The leak post includes a TOX hash and references WikileaksV2. Our news reporting places this in the context of a September 2026 wave of ransomware disclosures by Qilin and other groups.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Domains
http://www.grupojuste.com

What was taken

Grupo Juste Manufacturing

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

TOX
7C35408411AEEBD53CDBCEBAB167D7B22F1E66614E89DFCB62EE835416F60E1BCD6995152B68
WikileaksV2
https://wikileaks2.com/

Leak-site images (2)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
Logo of Grupo Juste, featuring a stylized design with the text "salud e innovación desde 1922."
onion leak page21 KB

Negotiation

Onion http://pandora42btuwlldza4uthk4bssbtsv47y4t5at5mo4ke3h4nqveobyd.onion