Skip to content
Leak-site post naming msgas.com.br, captured by ThreatCluster
Back to victims

msgas.com.br

blackwater

Ransomware leak-site victim intelligence · EN

Posted
Jul 25, 2026
Country
BR
Industry
Energy & Utilities

Summary

Written by ThreatClusterfrom file listing, victim profile, leak post, screenshot

Blackwater claims msgas.com.br was compromised, with customers' personal data, contract information, and internal company data taken. The victim domain is msgas.com.br, per the leak page. The leak post was published on 2026-07-25.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Domains
msgas.com.br

What was taken

customers' personal data, contract information, internal company data: http://ucfhnoihzgx4wz4beyzfxnh46cs37r4zbq627xyctykpatruvmghbyqd.onion/s/7f89713825a4376e/

Data categories
customers' personal datacontract informationinternal company data

Leak-site images (2)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
The image features four horizontal bands, each displaying the "msgas" logo in different color backgrounds: dark blue, light blue, green, and yellow.
onion leak page97 KB

Negotiation
Onion http://ucfhnoihzgx4wz4beyzfxnh46cs37r4zbq627xyctykpatruvmghbyqd.onion/s/7f89713825a4376e/