ValenciaLeaks is a 2024 data-extortion group targeting government entities and the pharmaceutical sector.
ValenciaLeaks is a data-extortion group that surfaced in August–September 2024. It primarily targets government entities (such as US city municipalities) and the pharmaceutical sector. Their main TTPs involve large-scale data exfiltration and publication on a dedicated leak site. Defenders should enhance Data Loss Prevention (DLP) controls and increase monitoring for anomalous outbound data transfers.
ValenciaLeaks is a data-extortion group that surfaced in August–September 2024, focused on exfiltrating large volumes of data and publishing it on a dedicated leak site, with documented victims including the City of Pleasanton, CA (283 GB exfiltrated) and pharmaceutical firm Duo Pharma Biotech.
ValenciaLeaks primarily targets government entities (such as US city municipalities) and the pharmaceutical sector.
Their main TTPs involve large-scale data exfiltration and publication on a dedicated leak site.
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.