Skip to content
Leak-site post naming MSB, captured by ThreatCluster

MSB

sarcoma

Ransomware leak-site victim intelligence

Data size
66 GB Archive
Files
1
Views
67,816
Posted
Sep 29, 2025
Country
USA
Industry
Commercial & Residential Construction

Summary

Written by ThreatClusterfrom victim profile, leak post

Sarcoma states they have published a 66 GB archive claimed to be from MSB (MS Builders), associated with the domain msbuilders.com. The leak page identifies the victim as MSB in the United States, within the Commercial & Residential Construction sector. Publication status on the leak post is published.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

What was taken

MSB General Contractors specializes in disaster recovery services, offering support and solutions for clients affected by various emergencies. Their focus is on ensuring timely and efficient recovery processes for both residential and commercial projects. The company aims to serve a wide range of clients in need of recovery assistance and has a portfolio of completed projects demonstrating their capabilities. MSB is also involved in humanitarian activities, reflecting their commitment to community support

File types seen
zip × 1
Sample files (1)
msbuilders.local.zip

Leak-site images (1)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture