Skip to content

Search Ransomware Intelligence

Jump to a group, country, industry or search victims.

Listed on a ransomware leak site

Leonard's Express

leonardsexpress.com

Leonard's Express was listed on the Qilin and BlackBasta leak site on Jan 1, 2024. Brandefense has recorded 2 separate claims against it. Information as of Nov 13, 2026.

Updated continuously · figures as of Nov 13, 2026
Claimed by
Qilin, BlackBasta
First listed
Jan 1, 2024
Claims recorded
2

2 Leak-Site Claims.

QilinConfirmed claim
Posted on the leak site
Nov 9, 2026
Collected by Brandefense
Nov 11, 2026
Data claimed
Not stated
BlackBastaConfirmed claim
Posted on the leak site
Jan 1, 2024
Collected by Brandefense
Jul 11, 2025
Data claimed
Not stated

Get alerted the moment your company or a supplier is posted on a leak site.

Alert me
Other confirmed victims claimed by the same group
VictimClaimed byCountryIndustryData claimedPosted
York University
yorku.ca
QilinCACanadaEducation and ResearchNot stated
The University of Texas at Arlington
library.uta.edu
QilinUSUnited StatesEducation and ResearchNot stated
Oral Roberts University
oru.edu
QilinUSUnited StatesEducation and ResearchNot stated
XK net SA de CV
xknet.mx
QilinUnknownUnknownNot stated
Oak Green School
oakgreen.bucks.sch.uk
QilinGBUnited KingdomEducation and ResearchNot stated
Gandol Doors
gandol.com
QilinUnknownUnknownNot stated
Other confirmed victims in the same industry
VictimClaimed byCountryIndustryData claimedPosted
Koray Topaç Hukuk Bürosu
koraytopac.com.tr
DoommageddonTRTürkiyeConsultingNot stated
Airblue
airblue.com
AoqinPKPakistanTransportation and LogisticsNot stated
Texas Truck Center
texastruckcenter.com
N0nUSUnited StatesTransportation and LogisticsNot stated
Native Touch Inc.
nativetouch.com
N0nCACanadaConsultingNot stated
axiscades.com
axiscades.com
INC RansomINIndiaConsultingNot stated
baronandbudd.com
baronandbudd.com
Curious-wormUSUnited StatesConsultingNot stated

Get Real-Time Alerts, IOC Feeds And Takedowns.

The Brandefense platform watches every leak site for your company, vendors and executives, and acts on what it finds.

Figures as of Nov 13, 2026. Confirmed leak-site claims collected by Brandefense technologies and validated by Brandefense analysts.

Listed on a leak site means a ransomware group has claimed the company; it is not a confirmed breach. To request a correction or removal, contact Brandefense.