Skip to content
Leak-site post naming Hypertherm, captured by ThreatCluster

Hypertherm

helix

Ransomware leak-site victim intelligence

Data size
184.6 MB
Files
12
Posted
Oct 21, 2026
Country
US
Industry
Manufacturing

Summary

Written by ThreatClusterfrom file listing, victim profile, leak post

The group helix claims Hypertherm records totaling 184.6 MB across 12 files were stolen, with customer records identified as the data category. The leak page states GoFile links and passwords unlock in 24 hours. Publication status is countdown, with a live countdown showing 0 days, 0 hours, 56 minutes, and 48 seconds remaining.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Platforms
GoFile

What was taken

Yearly revenue ~$650.7 million yearly.

Data categories
Customer records

Leak-site images (1)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture