Leak-site post naming Twal Family IT Lab, captured by ThreatCluster

Twal Family IT Lab

medusalocker

Ransomware leak-site victim intelligence

Posted
Aug 16, 2026
Industry
Technology

What was taken

Personal IT home lab. AD domain: twalfamily.com. VMware vSphere, multiple AD domains. Daniel Al Twal works at Technology North Corp (Edmonton), former DND co-op. No corporate target. Previously misidentified as Forces/forces.gc.ca. | 4172 Wolfe Point Way, Ottawa, ON K1V 1P5, Canada

Leak-site images (1)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture