Valencialeaks / Valencia
ValenciaLeaks is a data-extortion group that surfaced in August–September 2024, focused on exfiltrating large volumes of data and publishing it on a dedicated leak site, with documented victims including the City of Pleasanton, CA (283 GB exfiltrated) and pharmaceutical firm Duo Pharma Biotech.
Victims
5
First Victim
2024-09-18
(est. attack date)
Discovery Date
2024-09-10
Last Seen
2024-09-18
Inactive Since
1yr
more than
Avg Delay
-8
days
Infostealer
60.0%
victims with domain
Countries
5
hit
Uptime
0.0% avg (30d)
Known Locations (2)
| Favicon | Title | Type | Available | Last Visit | Server Info | FQDN | Status | |
|---|---|---|---|---|---|---|---|---|
|
Valencia Ransomware | No | 2026-08-22T08:36:12 |
6doyqxqqj36vnedtt2zwxmngx52mgyp7brbrtwkyd75jgiolocoybgid.onion
|
||||
|
No | 2026-08-22T12:57:56 |
4tpksbx73v5bewqr7kanwmkegyldfq6deir6cpv5zeaxg3mrnsk35eyd.onion
|
Target
Top 5 Activity Sectors
- Professional Services 2
- Manufacturing 1
- Healthcare 1
- Government & Defense 1
Top 5 Countries
-
Bangladesh
1
-
Luxembourg
1
-
Malaysia
1
-
Spain
1
-
United States
1
Heatmap
Ransom Notes (1)
YARA Rules (1)
Victims (5)
