Back to Threat Groups

shaoleaks

INACTIVE

ransomware group

SHAOleaks is a low-profile data leak and extortion group with minimal public documentation, operating a leak site but la

Victims
4
records
First Discovered
Nov 1, 2022
victim
Last Discovered
Nov 1, 2022
victim
Inactive Since
1,429
days
Countries
0
hit
Avg Discount
—
no settlements

Group Activity

Last 12 months
Oct
2025
Nov
2025
Dec
2025
Jan
2026
Feb
2026
Mar
2026
Apr
2026
May
2026
Jun
2026
Jul
2026
Aug
2026
Sep
2026

Victims (4)

Welcome to new customers!

shaoleaks
Nov 1, 2022
1.0Published

Some of our customers was not payed to us for data decryption. So we publish some of his d

shaoleaks
Nov 1, 2022
1.0Published

Update for boxerproperty

shaoleaks
Nov 1, 2022
Construction1.0Published

Greetings to havi.com and tmsw.com

shaoleaks2 groups: yanluowang
Nov 1, 2022
1.0Published
havi.com

Infrastructure

leak site
OFFLINE

unreachable

http://crptd5sv5bdz6hovrbkac6mnp3rt7zij62njsqwh5a6ldd3asxdd22qd.onion

2915ms

1d ago