Captured Sep 16, 2026

Thorndale Foundation

qilin

Ransomware leak-site victim intelligence

Files

Views

4,972

Posted

Sep 16, 2026

Country

Industry

Non-Profit & Charitable Organizations

Summary

Written by ThreatClusterfrom file listing, victim profile, leak post, screenshot, our reporting

The group states that six sample files were published from Thorndale Foundation's data: one JPG and five PNG. The stated victim is Thorndale Foundation (domain thorndale.com.au; non-profit & charitable organizations). Publication status: the leak post is listed on ThreatCluster's leak site.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

What was taken

Thorndale Foundation

File types seen

jpg × 1png × 5

Sample files (6)

ebf634b47b680b95e524fb3a575172ed.png

a5f53cd3420407fb13c63862dd26c1b2.png

d4f58b448b0ca1e6ac57a60bf69bd2cd.png

0c3ac6e4f6077e41d31aa56a63db9524.jpg

bf54a9f825bb7f2fd9979ed7c82bd7a4.png

cc641f3bd51483ea8a4ed1462f3ea1de.png

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

TOX: 7C35408411AEEBD53CDBCEBAB167D7B22F1E66614E89DFCB62EE835416F60E1BCD6995152B68
WikileaksV2: https://wikileaks2.com/
wikileaksV2: https://wikileaks2.com/
photos_count: 6

Leak-site images (11)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture

Screenshot of a tax invoice detailing services provided, including descriptions, quantities, unit prices, GST, and total amounts in AUD.

onion leak page246 KB

Screenshot of a Dropbox Sign audit trail showing document history, including sent, viewed, and completed timestamps.

onion leak page149 KB

Scan of an Australian passport showing personal details, including a photograph and passport information.

onion leak page172 KB

Screenshot of a table listing names, dates of birth, and clearance status for individuals.

onion leak page53 KB

Scan of an Australian passport featuring a photograph, personal details, and a decorative background.

onion leak page393 KB

Document titled "Privacy & Confidentiality Agreement" outlining terms between Thorndale Foundation and an individual, including roles and confidentiality obligations.

onion leak page200 KB

Logo of the Thorndale Foundation, featuring stylized figures and the text "supporting people with disability."

onion leak page156 KB

Screenshot of a tax invoice with details including invoice date, description of services, quantities, unit prices, and total amount.

onion leak page48 KB

Screenshot of a Dropbox Sign audit trail showing document history, including timestamps and actions taken.

onion leak page62 KB

Scan of an Australian passport showing personal details, including name, date of birth, and expiration date.

onion leak page91 KB

Negotiation

Tox 7C35408411AEEBD53CDBCEBAB167D7B22F1E66614E89DFCB62EE835416F60E1BCD6995152B68

Onion http://pandora42btuwlldza4uthk4bssbtsv47y4t5at5mo4ke3h4nqveobyd.onion