Skip to content

Search Ransomware Intelligence

Jump to a group, country, industry or search victims.

Listed on a ransomware leak site

Grupo Tersa

grupotersa.com.mx

Grupo Tersa was listed on the LockBit 3.0 and LockBit 5.0 leak site on Mar 15, 2025. Brandefense has recorded 2 separate claims against it. Information as of Oct 19, 2026.

Country: MexicoIndustry: Unknown
Updated continuously · figures as of Oct 19, 2026
Claimed by
LockBit 3.0, LockBit 5.0
First listed
Mar 15, 2025
Claims recorded
2

2 Leak-Site Claims.

LockBit 3.0Confirmed claim
Posted on the leak site
Apr 6, 2025
Collected by Brandefense
Jul 11, 2025
Data claimed
Not stated
Leak-site post text, written by the group
greetings! today we are posting here the new company, "grupo tersa". company description: grupo tersa was born from the dream of our chairman and founder rodrigo valle hernández in 1982, which has now become the dream of a great team of workers and collaborators that we call fuerza tersa. our main purpose has always been to move our mexican families with the mission of “being recognized as a leading company that sells prestigious and reliable brands for our clients, with national coverage.” with a vision of “being committed to offering the best value proposition, improving the lives of our…
LockBit 5.0Confirmed claim
Posted on the leak site
Mar 15, 2025
Collected by Brandefense
Dec 7, 2025
Data claimed
Not stated
Leak-site post text, written by the group
Company Description: Grupo TERSA was born from the dream of our Chairman and Founder Rodrigo Valle H...

Get alerted the moment your company or a supplier is posted on a leak site.

Alert me
Other confirmed victims claimed by the same group
VictimClaimed byCountryIndustryData claimedPosted
ispace.com
ispace.com
LockBit 3.0INIndiaConsultingNot stated
fosterfarms.com
fosterfarms.com
LockBit 3.0USUnited StatesFood and BeverageNot stated
lyonhealy.com
lyonhealy.com
LockBit 3.0USUnited StatesMedia and EntertainmentNot stated
sandycove.org
sandycove.org
LockBit 3.0USUnited StatesNon-profit and Civil SocietyNot stated
tucsoneyecare.com
tucsoneyecare.com
LockBit 3.0USUnited StatesHealthcareNot stated
crispinvalve.com
crispinvalve.com
LockBit 3.0USUnited StatesUnknownNot stated

Get Real-Time Alerts, IOC Feeds And Takedowns.

The Brandefense platform watches every leak site for your company, vendors and executives, and acts on what it finds.

Figures as of Oct 19, 2026. Confirmed leak-site claims collected by Brandefense technologies and validated by Brandefense analysts.

Listed on a leak site means a ransomware group has claimed the company; it is not a confirmed breach. To request a correction or removal, contact Brandefense.