Skip to content
Leak-site post naming Ornico, captured by ThreatCluster

Ransomware leak-site victim intelligence

Posted
Nov 9, 2026
Country
ZA
Industry
Professional Services

What was taken

Country: Gauteng 2000, ZA | Website: www.ornico.co | Revenue: $20 Million | Industry: Information and Media | Employees: 100-200 | Properties: 216 GB (583,507 Files, 23,572 Folders)

Leak-site images (7)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
Screenshot of a spreadsheet containing names and email addresses, organized into columns with company names highlighted.
onion leak page234 KB
Screenshot of a spreadsheet containing various entries with columns for country, organization, type, and URLs.
onion leak page231 KB
Screenshot of a spreadsheet listing various newspapers, their publication frequency, format, and country of origin.
onion leak page225 KB
Screenshot of a spreadsheet containing financial data, including columns for various expenses and totals related to sales and marketing.
onion leak page278 KB
Screenshot of a financial spreadsheet with multiple sections, including income, expenses, and various financial metrics.
onion leak page248 KB
Screenshot of a spreadsheet displaying income and expense data with columns for various categories, including totals and percentage changes.
onion leak page296 KB