Captured Sep 16, 2026

Thema Foundries

qilin

Ransomware leak-site victim intelligence

Files

Views

7,430

Posted

Sep 16, 2026

Countdown

111h : 29m

Country

Industry

Business Services

Summary

Written by ThreatClusterfrom site fields, file listing, victim profile, leak post, screenshot, our reporting

Qilin states that seven sample PNG files were published from Thema Foundries (domain thema-foundries.com) on their leak site. The leak page identifies Thema Foundries as the victim in the Business Services sector and provides associated leak-site details, including an onion URL and WikileaksV2 links, plus a TOX hash. The publication status is listed as published, with a countdown shown of 207 hours 41 minutes to publication on the page.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Platforms: WikileaksV2 TOX

What was taken

Blog Thema Foundries

File types seen

png × 7

Sample files (7)

7c6616a0d758fadc7063e2e3de10339b.png

890d19a30e8f7b1d0eaced3c44be1fc5.png

d8543f9e93049eb51e9b465c186bf371.png

e8cc4acf692cd7dbd6ad2d5a55a9b557.png

f849d0ccc866a08402446c620c106458.png

e036bd993236f6dbd6e59b6577beded0.png

336136cdccec8094a798379d518dfe12.png

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

TOX: 7C35408411AEEBD53CDBCEBAB167D7B22F1E66614E89DFCB62EE835416F60E1BCD6995152B68
onion_url: http://pandora42btuwlldza4uthk4bssbtsv47y4t5at5mo4ke3h4nqveobyd.onion
onion_link: http://pandora42btuwlldza4uthk4bssbtsv47y4t5at5mo4ke3h4nqveobyd.onion
WikileaksV2: https://wikileaks2.com/
image_paths: ["/uploads/blog/2778/photos/7c6616a0d758fadc7063e2e3de10339b.png", "/uploads/blog/2778/photos/890d19a30e8f7b1d0eaced3c44be1fc5.png", "/uploads/blog/2778/photos/d8543f9e93049eb51e9b465c186bf371.png", "/uploads/blog/2778/photos/e8cc4acf692cd7dbd6ad2d5a55a9b557.png", "/uploads/blog/2778/photos/f849d0ccc866a08402446c620c106458.png", "/uploads/blog/2778/photos/e036bd993236f6dbd6e59b6577beded0.png", "/uploads/blog/2778/photos/336136cdccec8094a798379d518dfe12.png"]
tox_contact: TOX: 7C35408411AEEBD53CDBCEBAB167D7B22F1E66614E89DFCB62EE835416F60E1BCD6995152B68
onion_listing: http://pandora42btuwlldza4uthk4bssbtsv47y4t5at5mo4ke3h4nqveobyd.onion
wikileaks_entry: https://wikileaks2.com/
wikileaks_source: https://wikileaks2.com/
image_count_label: 7 photos
WikileaksV2 (https://wikileaks2.com/): https://wikileaks2.com/

Leak-site images (11)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture

The image contains a slide titled "OES End Point Detection" with spectrometer data, including wavelength range, CCD area, resolution, and minimum integration time, along with a graph showing spectral data.

onion leak page368 KB

Document titled "MUTUAL NON-DISCLOSURE AGREEMENT" with sections detailing parties involved, addresses, and contact information. Contains legal language regarding confidentiality obligations.

onion leak page229 KB

Document titled "Confidentiality and Non-Disclosure Agreement" outlining terms and conditions related to confidential information and obligations of the parties involved.

onion leak page278 KB

Document titled "Confidential Meeting Minutes" with details about attendees, company information, and a signature section. It spans three pages.

onion leak page260 KB

Document titled "Bilateral Non-Disclosure Agreement" with sections outlining definitions, obligations, and signatures, including a company logo and a signature at the bottom.

onion leak page240 KB

The image features a blurred background of a laboratory setting with equipment, and a foreground text section displaying "EULITHA AG" and project details.

onion leak page585 KB

The image features a dark background with a blue abstract design resembling flowing lines or particles, along with the text "SPARC III-V" and "LIST OF DEVICES."

onion leak page587 KB

Logo featuring the word "THEMA" in bold blue letters, with "FOUNDIES" in a lighter font, accompanied by a starburst design in purple and blue.

onion leak page839 KB

The image contains a presentation slide detailing spectrometer data for OES End Point Detection, including range, CCD area, resolution, and minimum integration time, along with a graph.

onion leak page43 KB

Screenshot of a mutual non-disclosure agreement with sections for parties, organization details, and contact information.

onion leak page48 KB

Negotiation

Tox 7C35408411AEEBD53CDBCEBAB167D7B22F1E66614E89DFCB62EE835416F60E1BCD6995152B68

Onion http://pandora42btuwlldza4uthk4bssbtsv47y4t5at5mo4ke3h4nqveobyd.onion