Leak-site post naming hetero.com, captured by ThreatCluster

hetero.com

orion

Ransomware leak-site victim intelligence

Views
189,861
Posted
Aug 5, 2026
Industry
Healthcare

Summary

Written by ThreatCluster from victim profile, leak post

Orion claims to have published material associated with hetero.com. The leak page is published and has 184,770 views. The leak page’s victim profile lists the domain hetero.com. The post does not specify data types or quantities involved.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

What was taken

hetero

Leak-site images (1)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture