Skip to content
Leak-site post naming Ruhrpumpen, captured by ThreatCluster

Ruhrpumpen

dark project

Ransomware leak-site victim intelligence

Data size
1 TB
Files
116,438
Views
3,081
Posted
Aug 5, 2026
Country
Mexico
Industry
Manufacturing

Summary

Written by ThreatClusterfrom file listing, victim profile, leak post, screenshot

Dark Project states that Ruhrpumpen suffered a sophisticated cyberattack in the company’s network, resulting in the leak of approximately 1 TB of data (116,438 files). The leak post claims the exposed data includes personal information and financial information. The leak page identifies Ruhrpumpen (domain ruhrpumpen.com) as the victim—a Mexico-based manufacturing company with about $350 million in revenue—and notes the leak post is published.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

What was taken

A sophisticated cyberattack in the company's network led to a massive data breach. As a result of the incident, approximately 1 TB of data was leaked, including confidential personal and financial information.

Data categories
personal informationfinancial information

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

TOX_ID
243AAD0D1875CA4D48034E799785F2C9EA225E4466C87FA9B9297F7BEADC694478C7DE0A7639

Leak-site images (2)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
Screenshot of a document containing tabular data with multiple columns and rows, including headings and various entries.
onion leak page647 KB

Negotiation

Tox 243AAD0D1875CA4D48034E799785F2C9EA225E4466C87FA9B9297F7BEADC694478C7DE0A7639