Ransomware Group: TERMITE

VICTIM NAME: News-Press & Gazette Co[.]

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the TERMITE Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

News-Press & Gazette Co. is identified as the ransomware victim in the leak page analyzed. The company is a United States-based media and telecommunications group that publishes daily newspapers and weekly publications, provides cable, internet, and digital telephone services, and operates commercial printing operations as well as television and radio stations. Founded in 1845 and headquartered in St. Joseph, Missouri, News-Press & Gazette Co. is described by the leak post as the breached entity. The page is dated September 26, 2025; there is no separately listed compromise date, so this date is treated as the post date.

The attackers claim to have attacked News-Press & Gazette Co. again and to have exfiltrated approximately 30 GB of personal data, according to an update posted on the page. The leak page includes three images, described in general terms as screenshots of internal documents or related materials, serving as visual evidence of the claim. A claim URL is present on the page, and the metadata references a secondary onion-based link to the attackers’ site, though no URLs are included in this summary. The content depicts a data-leak scenario rather than encryption, with no explicit ransom figures disclosed in the available data.