Skip to content
Leak-site post naming tpa-group.sk, captured by ThreatCluster
Back to victims

tpa-group.sk

underground

Ransomware leak-site victim intelligence

Posted
May 1, 2024
Country
Slovakia
Industry
Business Service...

Summary

Written by ThreatClusterfrom file listing, victim profile, leak post

Underground claims to have stolen a broad data set from tpa-group.sk, a Slovakia-based business services firm, with revenue figures listed as $281 million for tpa-group.com and $15 million for tpa-group.sk. The material is described as including client emails with confidential agreements, accounting and tax reports, audit documents, company and client financial data, clients' passports/IDs and other personal information, privileged content, password-protected banking documents, payroll data, and employees' personal information. The leak page states publication status as published and identifies the victim as tpa-group.sk.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

What was taken

tpa-group.sk | Underground store

Data categories
email communications with clients that contain confidential agreementsaccounting and tax reports for each clientaudit documentscompany and clients financial documentsclients passports/ID's and private informationdocuments contain privileged and confidential informationpassword-protected documents from a bankpayroll datacompany financial and performance dataemployees personal information (Tc Identification Numbers)

Leak-site images (1)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture