Summary
Written by ThreatClusterfrom victim profile, leak post, screenshot, our reportingThe group "global" claims to have exfiltrated 532.98 GB of data from Sutton Public Schools, whose domain is www.suttonschools.net. The leak post shows a publication status of countdown, with the deadline marked as "DEADLINE EXPIRED" and a "BREACH NOTICE." The leak page’s victim profile lists the domain www.suttonschools.net and identifies the sector as Education.
Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.
Victim profile
- Platforms
- Tor v3 Zero-JS
What was taken
Sutton Public Schools’ website provides info on schedules, events, sports, news, and contacts for students, families, and the community in Sutton, MA.
Also stated on the leak page
Fields this group publishes that do not map to a standard column. Labels are the site's own.
- CUSTODY & ESCROW
- All target disclosures and research materials are held under sealed cryptographic escrow until verified publication. Unreleased materials remain inaccessible to third parties.
- EDGE RUNTIME & LOGGING
- This public node operates on an ephemeral memory model with zero persistent logging. No user sessions, identity keys, or raw archive databases are retained on edge routing layers.
- Anonymous Ticket System
- 🎫 Anonymous Ticket System (Zero-JS)
- Encrypted Whistleblower Box
- ENCRYPTED WHISTLEBLOWER BOX
Leak-site images (1)
Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.