Leak-site post naming I.P. One LTD, captured by ThreatCluster

I.P. One LTD

arcusmedia

Ransomware leak-site victim intelligence

Data size
100GB
Posted
Jul 26, 2025
Countdown
EST LEAK : 7 Days
Country
Thailand
Industry
Household cleaning products manufacturing

Summary

Written by ThreatCluster from site fields, file listing, victim profile, leak post, screenshot

arcusmedia claims to have stolen 100GB of data from I.P. One LTD, a Thai household cleaning products manufacturer. The data categories claimed include financials, employee records, databases, personal information, credit card data, company information, and business documents. The leak post is published and shows an EST LEAK countdown of 7 Days. Victim profile on the leak page lists I.P. One LTD (domain ip-one.com) as a Thailand-based manufacturer with revenue of $220M, and lists Alexander Pushkin as a named individual.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

People named
Alexander Pushkin

What was taken

I.P. One was established in 1972. We are proud to be the first Thai company who …

Data categories
FinancialsEmployeeDatabasesPersonal InformationCCCompanies includedBusiness Documents

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

P1
https://transfer.it/t/2YxWyMkTjbLZ

Leak-site images (1)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture