Skip to content
Leak-site post naming morrisgroupint.com, captured by ThreatCluster

morrisgroupint.com

orion

Ransomware leak-site victim intelligence · EN

Data size
0.5TB
Views
244,498
Posted
Aug 5, 2026
Country
GB
Industry
Professional Services

Summary

Written by ThreatClusterfrom victim profile, leak post

Orion claims that data from morrisgroupint.com has been taken, and the leak page describing the incident is published. The material notes only the victim domain and provides no disclosed quantities or specific data categories. This summary reflects the group’s claims; no independent confirmation or additional details are provided in the cited material.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Employees
0
Domains
morrisgroupint.com

What was taken

morrisgroupint.com

Data categories
partnersclientscommercial contractssketcheschemical properties of productspatents
Leak site tags
AcornVacELMDORmurdokfireproSmith

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

subsidiaries
["AcornVac", "ELMDOR", "murdok", "firepro", "Smith"]

Leak-site images (1)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture