Skip to content
Leak-site post naming kyyba.com, captured by ThreatCluster

kyyba.com

unsafe

Ransomware leak-site victim intelligence · EN

Views
33,852
Posted
Sep 22, 2026
Country
FI
Industry
Technology

Summary

Written by ThreatClusterfrom site fields, victim profile, leak post, screenshot

The group unsafe claims to have all of kyyba.com's client repositories and data and states that they will be leaked one by one; the leak page is currently in countdown status. Victim profile on the leak page lists Domain: kyyba.com and Revenue: $53.1 million. It also provides contact instructions via an AWS S3 link or the blog contact form, and notes that download_source_code is not available yet.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Domains
kyyba.com
Platforms
Tor

What was taken

All your client respostitories and data will be leaked one by one. Get in touch with me via the link I left you on your aws S3 or Contact form on the blog

Ransom note

Published by the group on their leak site, reproduced verbatim.

All your client respostitories and data will be leaked one by one. Get in touch with me via the link I left you on your aws S3 or Contact form on the blog

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

Visit
http://hivu45tmlhzrma4qpid2bvaeejslzrh3fpjfdt2yxgbj7qhdkvukvcid.onion/
label
Visit
value
http://hivu45tmlhzrma4qpid2bvaeejslzrh3fpjfdt2yxgbj7qhdkvukvcid.onion/
Visit onion link
http://hivu45tmlhzrma4qpid2bvaeejslzrh3fpjfdt2yxgbj7qhdkvukvcid.onion/
contact_instruction
Get in touch with me via the link I left you on your aws S3 or Contact form on the blog
Download Source Code
Visit (http://hivu45tmlhzrma4qpid2bvaeejslzrh3fpjfdt2yxgbj7qhdkvukvcid.onion/)
download_source_code
Not available yet
Visit Source Code Onion Link
http://hivu45tmlhzrma4qpid2bvaeejslzrh3fpjfdt2yxgbj7qhdkvukvcid.onion/

Leak-site images (1)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture

Negotiation

Onion http://hivu45tmlhzrma4qpid2bvaeejslzrh3fpjfdt2yxgbj7qhdkvukvcid.onion/