Skip to content
Leak-site post naming hetero.com, captured by ThreatCluster

hetero.com

orion

Ransomware leak-site victim intelligence

Views
243,884
Posted
Aug 5, 2026
Industry
pharmaceuticals

Summary

Written by ThreatClusterfrom victim profile, leak post

Orion claims to have published material associated with hetero.com. The leak page is published and has 184,770 views. The leak page’s victim profile lists the domain hetero.com. The post does not specify data types or quantities involved.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

What was taken

hetero.com

Leak-site images (1)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture