World Leaks is a financially motivated cybercrime group rebranded from Hunters International in 2025, focused solely on data theft and extortion.
World Leaks is a financially motivated cybercrime group that emerged in January 2025 as a rebrand of the Hunters International ransomware operation. They have shifted their focus entirely from file encryption to solely stealing sensitive data and threatening to leak it for extortion. The group targets a wide range of sectors including Manufacturing, Professional Services, Education, Retail, and Healthcare across multiple countries such as the United States, Brazil, India, and Pakistan. Defenders should prioritize data loss prevention (DLP) controls, network segmentation, and rigorous monitoring for anomalous data exfiltration activities.
World Leaks emerged in January 2025 as a rebrand of the Hunters International ransomware operation, shifting its focus from file encryption to solely stealing sensitive data and threatening to leak it unless a ransom is paid
World Leaks emerged in January 2025 as a rebrand of the Hunters International ransomware operation. The key difference is that the group has abandoned file encryption entirely and now focuses solely on stealing sensitive data and threatening to leak it for extortion.
World Leaks targets a wide range of sectors including Manufacturing, Professional Services, Education, Retail, and Healthcare. The main targeted countries include the United States, Brazil, India, and Pakistan.
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.