Skip to content

Search Ransomware Intelligence

Jump to a group, country, industry or search victims.

Listed on a ransomware leak site

Somali Immigration and Nationality Agency (HSJ); Ministry of Justice and Constitutional Affairs

etas.gov.so

Somali Immigration and Nationality Agency (HSJ); Ministry of Justice and Constitutional Affairs was listed on the ShinyHunters leak site on Oct 14, 2026. Information as of Oct 19, 2026.

Country: SomaliaIndustry: Retail
Updated continuously · figures as of Oct 19, 2026
Claimed by
ShinyHunters
First listed
Oct 14, 2026
Claims recorded
1

Leak-Site Claim.

ShinyHuntersConfirmed claim
Posted on the leak site
Oct 14, 2026
Collected by Brandefense
Oct 18, 2026
Data claimed
Not stated
Leak-site post text, written by the group
ShinyHunters threat actor claiming identity as Aegis announced alleged compromise of Somali Immigration and Nationality Agency (HSJ) internal employee system and Ministry of Justice notarial records totaling 17.1 GB. Threat actor claims exfiltration of data from etas.gov.so and immigration.gov.so domains and demands $100,000 USD ransom with 1-week deadline before public data release. Post includes list of alleged ShinyHunters members and contact information via ProtonMail and Session encrypted messaging.

Get alerted the moment your company or a supplier is posted on a leak site.

Alert me
Other confirmed victims claimed by the same group
VictimClaimed byCountryIndustryData claimedPosted
Vercel Inc.
vercel.com
ShinyHuntersUSUnited StatesHosting Service ProvidersNot stated
Abaco Informatica
abaco-informatica.com.ar
ShinyHuntersARArgentinaTechnologyNot stated
Correios
correos.es
ShinyHuntersESSpainTransportation and LogisticsNot stated
Ticketmaster
ticketmaster.com
ShinyHuntersUSUnited StatesMedia and EntertainmentNot stated
DexCom, Inc.
dexcom.com
ShinyHuntersUSUnited StatesHealthcareNot stated
O'Reilly Automotive
oreillyauto.com
ShinyHuntersUSUnited StatesRetailNot stated
Other confirmed victims in the same industry
VictimClaimed byCountryIndustryData claimedPosted
Belcorp
belcorp.biz
QilinPEPeruRetailNot stated
Quikrete
quikrete.com
HelixUSUnited StatesRetailNot stated
Pure Options
pureoptions.com
PlayUSUnited StatesRetailNot stated
Verano Holdings
verano.com
The-seven-deadly-sinsUSUnited StatesRetail2.4 MB
Segres Systec
segres.com
QilinPEPeruRetailNot stated
buckle
buckle.com
Iah6477USUnited StatesRetail144.5 GB

Get Real-Time Alerts, IOC Feeds And Takedowns.

The Brandefense platform watches every leak site for your company, vendors and executives, and acts on what it finds.

Figures as of Oct 19, 2026. Confirmed leak-site claims collected by Brandefense technologies and validated by Brandefense analysts.

Listed on a leak site means a ransomware group has claimed the company; it is not a confirmed breach. To request a correction or removal, contact Brandefense.