Leak-site post naming On***de, captured by ThreatCluster

On***de

auditteam

Ransomware leak-site victim intelligence

Posted
May 28, 2026
Country
RU
Industry
Not Found

What was taken

Millions of user records, order records, and file server data.

Leak-site images (1)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture