Skip to content
Leak-site post naming SAD'S Interim, captured by ThreatCluster

SAD'S Interim

rhysida

Ransomware leak-site victim intelligence

Posted
Sep 8, 2026
Country
FR
Industry
Professional Services

What was taken

SAD'S Interim Since 2000, SAD'S INTERIM has established itself as a key player in the temporary employment sector.Bank statements (relev�s) with SEPA credit transfersFactoring: invoice import batches, client receivables ledgers (encours) with EUR amounts and named clients, payment receipts (quittances)SQL backups of the BRANIPP ERP (the temp-workers payroll database)Payslips (bulletins de salaire) and payroll validation workbooksPermanent-staff employment contracts signed by the owners (Sadoun f

Leak-site images (3)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
The image contains a document with sections labeled "Lettre d'initialisation du certificat de sign," "Banque," and "NOTE D'INFORMATION," featuring various text and data fields related to a certificate and banking information.
onion leak page263 KB
The image contains a collage of documents, including a passport, a work contract, and various official forms with text and logos.
onion leak page300 KB