Skip to content
Leak-site post naming The Liberty Group, captured by ThreatCluster

The Liberty Group

dark project

Ransomware leak-site victim intelligence

Data size
483 GB Data Analyzed
Files
27,000
Views
9,852
Posted
Aug 24, 2026
Country
United States
Industry
Moving and logistics services

Summary

Written by ThreatClusterfrom site fields, file listing, victim profile, leak post, screenshot

The Dark Project group claims a sophisticated cyberattack resulted in a data breach leaking about 1 TB of data in 116,438 files, including personal and financial data. The leak page’s victim profile lists ruhrpumpen.com (Ruhrpumpen) as the domain, in manufacturing, based in Mexico, with reported revenue of $350 million. The leak post is marked as published.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

What was taken

A company has suffered a major cyberattack resulting in the theft of approximately 27,000 internal files. The leaked documents include financial records, internal working materials, and personal data of employees. Attackers encrypted the company's systems following the breach, severely disrupting operations

Data categories
financial recordsinternal working materialspersonal data of employees

Leak-site images (2)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
Screenshot of a bank reconciliation statement detailing transactions for a RBC CAD account, including deposits, withdrawals, and ending balance.
onion leak page355 KB

Negotiation

Tox 243AAD0D1875CA4D48034E799785F2C9EA225E4466C87FA9B9297F7BEADC694478C7DE0A7639
Onion http://ddpe7fyxfpkgyu5vld7qqqs67zva2yt6ci7wnw2bjra6f3hhzk773pyd.onion