DarkLeakMarket is a dark web marketplace active since 2019 reselling stolen data from ransomware victims.
DarkLeakMarket is a dark web data leak marketplace active since at least 2019, acting as a resale market for stolen data sourced from ransomware groups and hacking forums rather than a direct ransomware operator. It targets various sector organizations that have been victims of ransomware, with 39 known victims publicly identified. Key TTPs involve the acquisition and re-sale of third-party data leaks, relying on external ransomware operations for initial access and data. Defenders should prioritize dark web monitoring for exposed data and enhance post-compromise data leak risk management, as their organization's data may appear on this market after a ransomware incident.
DarkLeakMarket is a dark web data leak marketplace active since at least 2019 that sells stolen data sourced from ransomware groups and hacking forums, with 39 known victim organizations; it operates more as a data resale market than a traditional ransomware operator.
DarkLeakMarket is a dark web data leak marketplace active since at least 2019. It does not conduct active ransomware operations itself; instead, it acts as a resale market, dealing in the acquisition and re-distribution of stolen data sourced from ransomware groups and hacking forums.
This market primarily targets various sector organizations that have been victims of ransomware. They have 39 known victims, and defenders should consider that their organization's data may appear on this market after a ransomware incident.
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.