Skip to content
Leak-site post naming Mutsumi Group, captured by ThreatCluster
Back to victims

Mutsumi Group

qilin

Ransomware leak-site victim intelligence

Views
4,298
Posted
Oct 4, 2026
Country
JP
Industry
Construction

Summary

Written by ThreatClusterfrom site fields, victim profile, leak post, screenshot

Qilin's leak post claims to have exfiltrated data from Mutsumi Group, a construction-sector company identified by domain mutsumi-g.co.jp. The publication status is listed, and the post provides a TOX identifier and an onion link, with WikileaksV2 cited as the source. ThreatCluster captured a screenshot of the leak post.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Employees
249
Domains
http://www.mutsumi-g.co.jp

What was taken

Mutsumi Group Construction

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

tox
TOX: 7C35408411AEEBD53CDBCEBAB167D7B22F1E66614E89DFCB62EE835416F60E1BCD6995152B68
onion_link
http://pandora42btuwlldza4uthk4bssbtsv47y4t5at5mo4ke3h4nqveobyd.onion
wikileaks_source
WikileaksV2 (https://wikileaks2.com/)

Leak-site images (2)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
The image is a webpage for Mutsumi Group, featuring sections like "Top Message," "Mutsumi Group," and "History," along with images of trucks and industrial facilities.
onion leak page124 KB

Negotiation
Tox 7C35408411AEEBD53CDBCEBAB167D7B22F1E66614E89DFCB62EE835416F60E1BCD6995152B68
Onion pandora42btuwlldza4uthk4bssbtsv47y4t5at5mo4ke3h4nqveobyd.onion