Summary
Written by ThreatClusterfrom site fields, file listing, victim profile, leak post, screenshot, our reportingDark Project claims roughly 1 TB of Ruhrpumpen data was exfiltrated, comprising 116,438 files, including confidential personal and financial information. The leak post is published. ThreatCluster’s reporting notes that, on 2026-09-07, there were multiple ransomware attacks attributed to DARK PROJECT.
Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.
What was taken
As a result of the attack, 340 GB of data (approximately 130,000 files) was stolen: including Social Security numbers, passports, green cards, invoices, HR documents, and a vast number of architectural drawings—including those from past and current projects, as well as those currently under construction.
Also stated on the leak page
Fields this group publishes that do not map to a standard column. Labels are the site's own.
- TOX_ID
- 243AAD0D1875CA4D48034E799785F2C9EA225E4466C87FA9B9297F7BEADC694478C7DE0A7639
Leak-site images (2)
Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.