Skip to content

Search Ransomware Intelligence

Jump to a group, country, industry or search victims.

Listed on a ransomware leak site

Grupo Santillana

santillana.com

Grupo Santillana was listed on the Hellcat leak site on Mar 24, 2025. Information as of Oct 19, 2026.

Updated continuously · figures as of Oct 19, 2026
Claimed by
Hellcat
First listed
Mar 24, 2025
Claims recorded
1

Leak-Site Claim.

HellcatConfirmed claim
Posted on the leak site
Mar 24, 2025
Collected by Brandefense
Jul 12, 2025
Data claimed
Not stated
Leak-site post text, written by the group
We hold sensitive files from Santillana, the largest business unit of Spain’s publicly traded Prisa media group. The company must act quickly to prevent the exposure of this data.

Get alerted the moment your company or a supplier is posted on a leak site.

Alert me
Other confirmed victims claimed by the same group
VictimClaimed byCountryIndustryData claimedPosted
Potomac Financial Services
potomacfinancialadvisors.com
HellcatUSUnited StatesUnknownNot stated
LeoVegas AB
leovegasgroup.com
HellcatSESwedenMedia and EntertainmentNot stated
Racami
racami.com
HellcatUSUnited StatesFinancial Services, InsuranceNot stated
Asseco
asseco.com
HellcatPLPolandTechnologyNot stated
Transsion Holdings
transsion.com
HellcatETEthiopiaTechnologyNot stated
Omnitracs
omnitracs.com
HellcatUSUnited StatesConsultingNot stated
Other confirmed victims in the same industry
VictimClaimed byCountryIndustryData claimedPosted
The Akeeli Group
theakeeligroup.com
N0nUSUnited StatesEducation and ResearchNot stated
Llano Independent School District
llanoisd.org
QilinUSUnited StatesEducation and ResearchNot stated
Solid Trading B.V.
solid-fx.com
N0nNLNetherlandsEducation and ResearchNot stated
First Brothers Co., Ltd
firstbrothers.com
QilinJPJapanEducation and ResearchNot stated
Wellington College International School Bangkok
wellingtoncollege.ac.th
The GentlemenTHThailandEducation and ResearchNot stated
nowaszkola.com
nowaszkola.com
INC RansomPLPolandEducation and ResearchNot stated

Get Real-Time Alerts, IOC Feeds And Takedowns.

The Brandefense platform watches every leak site for your company, vendors and executives, and acts on what it finds.

Figures as of Oct 19, 2026. Confirmed leak-site claims collected by Brandefense technologies and validated by Brandefense analysts.

Listed on a leak site means a ransomware group has claimed the company; it is not a confirmed breach. To request a correction or removal, contact Brandefense.