World Leaks
aka Hunters International
The 2025 rebrand of the Hunters International ransomware group, reported to have dropped file encryption in favor of stealing data and threatening to publish it. It targets healthcare, manufacturing and more, and has been active in Japan.
- Alert level
- 2/ 5
- Reports & advisories (90 days)
- 0
- Known exploited CVEs
- 0
- Personal data leaked (disclosed)
- None confirmed
How they attack
Entry
Logging in with stolen passwords
Like using a copied key to stroll in through the front door as if they belonged.
Inside
Hauling out large amounts of data
Like posing as movers and loading whole filing cabinets onto a truck.
Goal
Threatening to publish
Like leaving the house unlocked but threatening to publish the stolen diary unless paid.
Sources
Attributions are quoted as assessed by governments and security vendors. VulnPulse does not make attributions itself.
Leak counts only add up figures disclosed by the affected companies or authorities, never the attackers' own claims. We do not list victim names or link to leak sites.
The alert level is calculated automatically from reports and advisories in the last 90 days, known exploited vulnerabilities, and whether the group has targeted Japan.
Updated 2026-10-23 · daily