Skip to content
Leak-site post naming Leviton, captured by ThreatCluster

Leviton

dark project

Ransomware leak-site victim intelligence

Data size
1.4 TB Data Analyzed
Files
1,102,010
Views
12,386
Posted
Aug 5, 2026
Country
United States
Industry
Manufacturing

Summary

Written by ThreatClusterfrom site fields, file listing, victim profile, leak post, screenshot

The group states that about 1 TB of data was leaked, comprising personal and financial information, with 116,438 files claimed. The leak page’s victim profile lists Ruhrpumpen (domain ruhrpumpen.com), a manufacturing company based in Mexico. The leak post is published on the group’s site.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

What was taken

A major cyber attack has resulted in the Leviton company losing control over its entire repository of sensitive data, totaling approximately 1.4 terabytes. The massive breach exposed a wide range of highly confidential information, including internal financial records, proprietary project schematics and working documents, as well as the personal data of employees. Additionally, a significant quantity of other unclassified but highly sensitive information was exfiltrated in the breach, painting a stark picture of a total system compromise.

Data categories
internal financial recordsproprietary project schematics and working documentspersonal data of employees

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

TOX_ID
243AAD0D1875CA4D48034E799785F2C9EA225E4466C87FA9B9297F7BEADC694478C7DE0A7639
Data Leak
http://kic4bflgzxoo2oq5wn52frqpzba2b75iodhqjgtdulchdeph73kq6zqd.onion/

Leak-site images (2)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
Document titled "NOTICE OF EXCESS LINE PLACEMENT" with company details and a signature at the bottom.
onion leak page355 KB