Skip to content
Leak-site post naming ShopDunk, captured by ThreatCluster

ShopDunk

qilin

Ransomware leak-site victim intelligence · EN

Views
5,956
Posted
Sep 20, 2026
Country
TH
Industry
Business Services

Summary

Written by ThreatClusterfrom site fields, victim profile, leak post, screenshot

Qilin claims ShopDunk is the victim in this leak, which was posted on 2026-09-20 and described on the page as a Blog ShopDunk. The leak page provides a victim profile with domain www.shopdunk.com and sector Business Services. It also lists a TOX hash and links to onion and Wikileaks sources, and ThreatCluster captured a screenshot of the post; the publication status is listed.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Domains
shopdunk.com

What was taken

Blog ShopDunk

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

TOX
7C35408411AEEBD53CDBCEBAB167D7B22F1E66614E89DFCB62EE835416F60E1BCD6995152B68
onion
http://pandora42btuwlldza4uthk4bssbtsv47y4t5at5mo4ke3h4nqveobyd.onion
WikileaksV2
https://wikileaks2.com/
onion_source
http://pandora42btuwlldza4uthk4bssbtsv47y4t5at5mo4ke3h4nqveobyd.onion
WikileaksV2_link
https://wikileaks2.com/

Leak-site images (2)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
The image contains a logo with the text "SHOPDUNK" and the phrase "Đại lý ủy quyền Apple" below it, featuring a wavy line design.
onion leak page68 KB

Negotiation

Tox 7C35408411AEEBD53CDBCEBAB167D7B22F1E66614E89DFCB62EE835416F60E1BCD6995152B68
Onion pandora42btuwlldza4uthk4bssbtsv47y4t5at5mo4ke3h4nqveobyd.onion