Skip to content
Leak-site post naming Ministry of Education — Argentina, captured by ThreatCluster

Ministry of Education — Argentina

n0n

Ransomware leak-site victim intelligence · ES

Posted
Sep 18, 2026
Country
Argentina
Industry
Government / education

Summary

Written by ThreatClusterfrom victim profile, leak post

The group n0n claims to have exfiltrated 1.08 million connection records and the complete network-security configuration of the Ministry of Education in Argentina, and to have evidence of a Monero cryptocurrency miner operating within the ministry network. The leak post is published and states the ministry network is under a total blackout until settlement. The material identifies the victim as Argentina’s Ministry of Education (government/education sector).

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

What was taken

What will be published if no settlement is reached Complete network-security configuration of the ministry network 1.08M connection records: national library (BNM), school-book selection platform, scholarship systems (becasprogresar), titulosvalidez, certificadosinfd, sitrared Evidence of the Monero cryptocurrency miner operating inside the ministry network The ministry network is under a total blackout until settlement.

Leak-site images (1)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture