Ransomware Group: WORLDLEAKS

VICTIM NAME: Nicke

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the WORLDLEAKS Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

Nicke is identified as the victim on a leak page attributed to the group worldleaks. The page lists the victim as being based in Japan, but the industry field is not populated, leaving the sector unclear. The post date on the leak page is 2025-08-19 13:37:45, which should be treated as the publication date in the absence of any disclosed compromise date. The description field shows “[AI generated] N/A,” indicating a non-informative or autogenerated description accompanying the post. The page also notes that a claim URL is present, suggesting there is a link associated with the attackers’ claim, though no actual URL is shown in the provided data.

Media assets on the page appear to be minimal or nonexistent. The dataset indicates there are no images or screenshots (images_count is 0) and no downloadable files or external links (downloads_present is false, link_count is 0). Other fields such as photos, files, and size_gb are empty, and the annotations for images and links are also empty. Because the impact field is blank, there is no explicit statement about whether the incident involved encryption or a data leak, nor any ransom figures in the supplied data. Taken together, the available data point to a minimal leak-page entry that names the victim and notes the existence of a claim URL, but without further public-facing details in this record.