Skip to content
Leak-site post naming SPDM, captured by ThreatCluster

Ransomware leak-site victim intelligence · PT

Data size
847 GB (871,912 Files, 76,047 Folders)
Files
871,912
Views
871,912
Posted
Jul 26, 2026
Country
Brazil
Industry
Hospitals & Clinics

Summary

Written by ThreatClusterfrom site fields, victim profile, leak post, screenshot

The group claims it exfiltrated 847 GB across 871,912 files from SPDM - Associação Paulista para o Desenvolvimento da Medicina, a Brazilian non-profit. The victim is identified as SPDM, with domain spdm.org.br, in Brazil’s Hospitals & Clinics sector, reportedly generating $197 million in revenue and employing 10,000–20,000 people. The leak post states the data types include HR and recruitment records, internal documentation and source code. The publication status on the leak page is listed.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Headquarters
Brazil
Employees
0
Domains
spdm.org.br

What was taken

SPDM - Associação Paulista para o Desenvolvimento da Medicina is a non-profit, philanthropic civil association, recognized as a public utility at the federal, state, and municipal levels where its headquarters are located, respectively by decrees nos.

Data categories
DatabasesPIIEmailsContracts

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

Screenshots
Screenshot 1-6

Leak-site images (4)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
The image contains multiple screenshots of software interfaces displaying data tables, charts, and status indicators related to project management or tracking.
onion leak page3.4 MB
Collage of images and diagrams related to a biological reactor, including tanks, inflow and outflow systems, and membrane diffusers.
onion leak page3.7 MB
The image displays a computer interface with multiple windows, including a file explorer, a system monitoring dashboard, and a directory listing.
onion leak page2.7 MB