Skip to content
Leak-site post naming Inversiones Bolívar, captured by ThreatCluster
Back to victims

Inversiones Bolívar

qilin

Ransomware leak-site victim intelligence

Files
7,617
Views
5,845
Posted
Sep 24, 2026
Country
CO
Industry
Insurance

Summary

Written by ThreatClusterfrom site fields, victim profile, leak post, screenshot

The leak post claims 220 files from Inversiones Bolívar Insurance have been published by the group qilin. Victim profile on the leak lists the legal name Inversiones Bolívar, domain www.proyectosdevida.com, in the insurance sector. The leak page provides an onion address, a WikileaksV2 URL, and a TOX hash, and is marked as published; ThreatCluster captured a screenshot of the post.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

What was taken

Inversiones Bolívar Insurance Company

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

TOX
7C35408411AEEBD53CDBCEBAB167D7B22F1E66614E89DFCB62EE835416F60E1BCD6995152B68
Onion
http://pandora42btuwlldza4uthk4bssbtsv47y4t5at5mo4ke3h4nqveobyd.onion
photos
0
WikileaksV2
https://wikileaks2.com/

Leak-site images (2)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
onion leak page13 KB

Negotiation
Tox TOX: 7C35408411AEEBD53CDBCEBAB167D7B22F1E66614E89DFCB62EE835416F60E1BCD6995152B68
Onion http://pandora42btuwlldza4uthk4bssbtsv47y4t5at5mo4ke3h4nqveobyd.onion