[WORLDLEAKS] – Ransomware Victim: Mavis Tire Supply

image

Ransomware Group: WORLDLEAKS

VICTIM NAME: Mavis Tire Supply

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the WORLDLEAKS Onion Dark Web Tor Blog page.


AI Generated Summary of the Ransomware Leak Page

The leak page, attributed to the WorldLeaks group, identifies the victim as Mavis Tire Supply, a large US-based consumer services company with a nationwide tire and auto service network. The accompanying data provides context on the victim’s scale, noting the organization operates over 700 service centers across 13 states, with a concentration in the Northeast and South. The post is stamped with 2025-09-23 17:30:29.000000, which is treated here as the page’s post date since no explicit compromise date is provided. A claim URL is indicated as present on the page, suggesting additional information behind a linked resource, though the actual URL is not displayed here. The record shows no images, downloads, or attachments—there are zero images and zero files associated with this entry.

There is no explicit detail about the attack’s impact in the available data (for example, whether files were encrypted or data exfiltrated, or any ransom amount). The page contains no visible screenshots or attachments (images_count = 0; downloads_present = false), indicating that this particular snapshot does not include internal documents or image content. The focus appears to be on identifying the victim and providing a broad business context rather than presenting technical incident specifics. The publicly visible timestamp remains September 23, 2025, and the country associated with the victim is the United States.


A considerable amount of time and effort goes into maintaining this website, creating backend automation and creating new features and content for you to make actionable intelligence decisions. Everyone that supports the site helps enable new functionality.

If you like the site, please support us on “Patreon” or “Buy Me A Coffee” using the buttons below

To keep up to date follow us on the below channels.