Skip to content

Search Ransomware Intelligence

Jump to a group, country, industry or search victims.

Listed on a ransomware leak site

AmplifAI (GoDaddy instance)

ampbi.net

AmplifAI (GoDaddy instance) was listed on the Whitearmor leak site on Nov 1, 2026. Information as of Nov 1, 2026.

Country: United StatesIndustry: Unknown
Updated continuously · figures as of Nov 1, 2026
Claimed by
Whitearmor
First listed
Nov 1, 2026
Claims recorded
1

Leak-Site Claim.

WhitearmorConfirmed claim
Posted on the leak site
Nov 1, 2026
Collected by Brandefense
Nov 1, 2026
Data claimed
Not stated
Leak-site post text, written by the group
GoDaddy AmplifAI Instance, Complete Data Dump ================================================ URL: [removed] Okta SSO: [removed] Okta App ID: exksdlj2ty3Pfq9En0x7 (AmplifAI) Office 365 Federation: godaddy.okta.com/app/office365/exk3q5qqbpJoB61dF0x7 ============================================================ USER DATABASE, 13,565 unique employees ============================================================ File: all_users.json Fields per [removed] "", "email": "", "userseq":, "firstname": "", "lastname": "", "ad_id": "", "password": "", "aduser": "true/false", "usertype": "1/2/3/4"…

Get alerted the moment your company or a supplier is posted on a leak site.

Alert me
Other confirmed victims claimed by the same group
VictimClaimed byCountryIndustryData claimedPosted
KTU Shipyard
ktushipyard.com
WhitearmorIDIndonesiaTransportation and LogisticsNot stated
rolly.io
rolly.io
WhitearmorUSUnited StatesTechnologyNot stated
Ryder
ryder.com
WhitearmorUSUnited StatesTransportation and Logistics490 GB
Echo.com
echo.com
WhitearmorUSUnited StatesTransportation and Logistics2 GB
t.meWhitearmorAEUnited Arab EmiratesMedia and EntertainmentNot stated
Kucoin
kucoin.com
WhitearmorSCSeychellesFinancial ServicesNot stated

Get Real-Time Alerts, IOC Feeds And Takedowns.

The Brandefense platform watches every leak site for your company, vendors and executives, and acts on what it finds.

Figures as of Nov 1, 2026. Confirmed leak-site claims collected by Brandefense technologies and validated by Brandefense analysts.

Listed on a leak site means a ransomware group has claimed the company; it is not a confirmed breach. To request a correction or removal, contact Brandefense.