Skip to content

Search Ransomware Intelligence

Jump to a group, country, industry or search victims.

Listed on a ransomware leak site

S&PGLOBAL, LiteLLM/Trivy campaign (TeamPCP)

spglobal.com

S&PGLOBAL, LiteLLM/Trivy campaign (TeamPCP) was listed on the Vect and ShinyHunters and LockBit 3.0 leak site on Aug 1, 2023. Brandefense has recorded 4 separate claims against it. Information as of Oct 19, 2026.

Updated continuously · figures as of Oct 19, 2026
Claimed by
Vect, ShinyHunters, LockBit 3.0
First listed
Aug 1, 2023
Claims recorded
4

4 Leak-Site Claims.

VectConfirmed claim
Posted on the leak site
Apr 15, 2026
Collected by Brandefense
Apr 17, 2026
Data claimed
Not stated
Leak-site post text, written by the group
SECTOR: Business Services • COUNTRY: US • SITE: [removed]
VectConfirmed claim
Posted on the leak site
Oct 5, 2025
Collected by Brandefense
Apr 17, 2026
Data claimed
250 GB
Leak-site post text, written by the group
Status: STATUS: NEGOTIATING | Sector: Business Services | Internal projects, secrets, api keys etc DATA SIZE: 250GB | Deadline: 8d 8h
ShinyHuntersConfirmed claim
Posted on the leak site
Oct 5, 2025
Collected by Brandefense
Nov 6, 2025
Data claimed
Not stated
Leak-site post text, written by the group
S&P Global is an American company that provides high-quality market intelligence in the form of credit ratings, analytics, data, and insights to help customers make informed decisions. It operates through four divisions: S&P Global Ratings, S&P Global Market Intelligence, S&P Dow Jones Indices, and S&P Global Platts, covering various sectors like energy, finance, commodities, and technology.
LockBit 3.0Confirmed claim
Posted on the leak site
Aug 1, 2023
Collected by Brandefense
Jul 11, 2025
Data claimed
Not stated

Get alerted the moment your company or a supplier is posted on a leak site.

Alert me
Other confirmed victims claimed by the same group
VictimClaimed byCountryIndustryData claimedPosted
guesty, LITELLM/TRIVY CAMPAIGN (TEAMPCP)
guesty.com
VectILIsraelTechnology700 GB
Verlat Energy
verlatenergy.com
VectPEPeruEnergy and UtilitiesNot stated
USHA International Limited
usha.com
VectINIndiaManufacturingNot stated
keliweb
keliweb.it
VectITItalyTechnology200 GB
Casas del Mediterraneo
casasdelmediterraneo.com
VectESSpainConstruction200 GB
jdaas
jdaas.com
VectINIndiaTechnology600 GB
Other confirmed victims in the same industry
VictimClaimed byCountryIndustryData claimedPosted
PingCAP / TiDB Cloud
pingcap.com
FulcrumsecUSUnited StatesTechnologyNot stated
Merit Financial Group
meritfinancialadvisors.com
StormUSUnited StatesFinancial ServicesNot stated
Finzly Corp
finzly.com
N0nUSUnited StatesFinancial ServicesNot stated
Amagi Media Labs
amagi.com
N0nINIndiaTechnologyNot stated
All Business Technologies (Fox Hill bookkeeping and tax practice)
allbusinesstechnologies.com
N0nUSUnited StatesTechnologyNot stated
********rta.ch
rta.ch
CloakCHSwitzerlandFinancial ServicesNot stated

Get Real-Time Alerts, IOC Feeds And Takedowns.

The Brandefense platform watches every leak site for your company, vendors and executives, and acts on what it finds.

Figures as of Oct 19, 2026. Confirmed leak-site claims collected by Brandefense technologies and validated by Brandefense analysts.

Listed on a leak site means a ransomware group has claimed the company; it is not a confirmed breach. To request a correction or removal, contact Brandefense.