Russian Federation

Ne***ox is an entity identified within the IT sector based in Russia, cataloged as a ransomware victim in the threat-intelligence index. Its classification reflects its association with the AuditTeam threat actor, providing context for cybersecurity monitoring and risk assessment purposes. The entry documents the relationship between the entity and the identified threat actor without disclosing specific incident details, operational tactics, or confirmed breach specifics. This neutral listing supports comprehensive threat intelligence analysis for defenders and security professionals tracking ransomware activity across sectors and geographies.

[AI generated] N/A

Почищена, значения грамотно соединены в строки. То есть вместо (leakosint): 🩺Sovamed.ru В феврале 2024 года стало известно, что хакеры получили доступ к информации из формы записи на прием с сайта медицинского центра «СОВА». Опубликованные данные содержат имена, телефоны, почты, города проживания и тексты комментариев. Всего 126 тысяч записей. 📩Email: V██████████@██████.█u 📞Телефон: 7█████████8 Получаем: question|answer|email|phone_number Ольга Прием (осмотр, консультация) врача-офтальмолога ведущего специалиста первичный 1800 ₽ Воронеж|Воронеж|[email protected]|79521292948

TE***PB is cataloged as a ransomware victim entity operating within the Russian sector. Its profile within the threat-intelligence index reflects its role as an affected organization subject to cyber threat activity. The entity is specifically associated with the AuditTeam threat actor or source, providing context for threat attribution and investigative tracking. This listing type identifies TE***PB as a ransomware victim, contributing to broader cybersecurity awareness and defensive intelligence. TE***PB was listed as a ransomware victim associated with AuditTeam.

Astrodent / Астродент (astrodent-clinic.ru) Date: 2023 Size: 21.28 MB Records: 162,005 Contains: Email, Phone, Appointment Date & Time, Personal Account Balance, Family Account, Family Name, Full Address, Passport Info, Tax ID, SNILS, and other info.

🇷🇺 Database: zaymer.ru Description: this is an online service that provides microloans to a bank account or card without human intervention in a fully automated mode. Date: 02.23.2024 Line: 16.857.434 Data: Full name, Date of birth, Telephone, Place of birth, Address, Document details, TIN and others.

morflot.ru / morflot.gov.ru Date: Feb 01, 2021 Records: 146.754 Contains: username, email, hash(md5 + salt), reg date, dob, case info, full name, and other.

my***ru is cataloged as a ransomware victim entity based in Russia. The entity operates within a sector not explicitly detailed in available intelligence, though its classification reflects its involvement in a threat-intelligence index under the associated actor AuditTeam. This listing type identifies its role within cybersecurity incident tracking, emphasizing its connection to AuditTeam as the attributed threat actor. The description remains neutral and avoids speculative claims regarding breach specifics, data exposure, or operational details. my***ru was officially listed as a ransomware victim associated with AuditTeam.

Name: Beeline Staff Date: 2022 Records: 198,520 Contains: Login, City, Full Name, Email, Phone Number

Name: Parisnail.ru Records: ~28,000,000 Contains: Full name, Email address, Phone Number, Hashed, Floor, Date of birth, Order details.

full names

Name: Russian Border Control (Kordon) Date: 2026 Size: 1.70 GB (Uncompressed) Records: 7.9M Password: Rei xD

bu***en is cataloged as a ransomware victim entity operating within the RU region and associated with the AuditTeam threat actor. The entity name suggests involvement in cybersecurity auditing or monitoring contexts, though specific sector details, operational offerings, or confirmed incident specifics remain unverified in available intelligence. This listing type identifies bu***en as a ransomware victim linked to AuditTeam within the threat-intelligence index framework. No details regarding stolen data, ransom demands, or confirmed breach evidence are provided here to maintain factual neutrality. The entry reflects the entity's classification and association without asserting unverified incident outcomes.

bu***en is cataloged as a ransomware victim entity operating within the RU region and associated with the AuditTeam threat actor. The entity name suggests involvement in cybersecurity auditing or monitoring contexts, though specific sector details, operational offerings, or confirmed incident specifics remain unverified in available intelligence. This listing type identifies bu***en as a ransomware victim linked to AuditTeam within the threat-intelligence index framework. No details regarding stolen data, ransom demands, or confirmed breach evidence are provided here to maintain factual neutrality. The entry reflects the entity's classification and association without asserting unverified incident outcomes.

pa***op is cataloged as a ransomware victim within the threat-intelligence index, associated with the AuditTeam threat actor and identified as operating from Russia. The entity represents an organization that experienced a ransomware-related security event, with its sector and specific offerings contextualized within the intelligence record. This listing type documents the relationship between the victim entity, the AuditTeam source attribution, and the geographic origin country. The entry provides a neutral overview for threat-intelligence analysis without disclosing unverified incident details. It was listed as a ransomware victim associated with AuditTeam.

Name: Russian Railways (RZD) Date: 2025 Records: ~500k Contains: ID, Full Name, Phone Number, Email, Date of Birth, workplace, and other info. Russian Railways (RZD) is a state-owned company and the main operator of railway transportation in Russia.