Leak-site post naming morrisgroupint.com, captured by ThreatCluster

morrisgroupint.com

orion

Ransomware leak-site victim intelligence · EN

Data size
0.5
Views
190,225
Posted
Aug 5, 2026
Country
GB
Industry
Professional Services

Summary

Written by ThreatCluster from victim profile, leak post

Orion claims that data from morrisgroupint.com has been taken, and the leak page describing the incident is published. The material notes only the victim domain and provides no disclosed quantities or specific data categories. This summary reflects the group’s claims; no independent confirmation or additional details are provided in the cited material.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Employees
2,000
Domains
morrisgroupint.com

What was taken

morrisgroupint.com

Leak site tags
AcornVacELMDORmurdokfireproSmith

Leak-site images (1)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture