Skip to content
Leak-site post naming TUI China, captured by ThreatCluster

TUI China

dragonforce

Ransomware leak-site victim intelligence · EN

Data size
97.31 GB
Posted
Aug 3, 2026
Publication
Aug 3, 2024
Country
China
Industry
Travel

Summary

Written by ThreatClusterfrom victim profile, leak post

The leak post, attributed to dragonforce, claims 97.31 GB of data from TUI China (domain tui.cn, China) and lists the publication status as countdown. The group states that TUI China is an affiliate of TUI Group and that it was established in late 2003 as the first joint venture with foreign partners. The leak page’s victim profile identifies tui.cn as the domain and China as the country.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Domains
www.tui.cn

What was taken

An affiliate of TUI Group, the world's number one leisure tourism business, TUI China was established in late 2003 as the first joint venture with foreign major...

Leak-site images (2)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
Logo featuring the text "DragonForce" with a stylized graphic element resembling a dragon or wave in orange and white.
onion leak page46 KB