[WORLDLEAKS] – Ransomware Victim: Kobayashi

image

NOTE: No files or stolen information are exfiltrated, downloaded, taken, hosted, seen, reposted, or disclosed by RedPacket Security. Any legal issues relating to the content should be directed at the attackers, not RedPacket Security. This blog is an editorial notice informing that a company has fallen victim to a ransomware attack. RedPacket Security is not affiliated with any ransomware threat actors or groups and will not host infringing content. The information on this page is automated and redacted whilst being scraped directly from the WORLDLEAKS Onion Dark Web Tor Blog page.

Ransomware group:
WORLDLEAKS
Victim name:
KOBAYASHI

AI Generated Summary of the Ransomware Leak Page

On November 1, 2025, a ransomware leak post attributed to the Worldleaks group publicly identifies Kobayashi as a victim. The post date in the metadata is 2025-11-01 09:08:13.000000, and no separate compromise date is provided, so this timestamp should be treated as the post date. The page describes Kobayashi as a Japanese company that manufactures and sells over-the-counter drugs, oral hygiene products, and other healthcare items with a global footprint. Although the industry field in the metadata is not filled, the narrative text presents the victim as a pharmaceutical manufacturer with a diversified product lineup. The post does not disclose a ransom amount, nor does it clearly state whether encryption occurred or data was exfiltrated in the visible content. The leak page shows no screenshots or downloadable files—the counts for images and downloads are zero. There is an indication that a claim URL is present on the page for additional details, though no specific URLs are included in this summary.

The page’s visible content concentrates on identifying the victim and outlining a broad business description rather than presenting data artifacts. The page indicates the location as Japan, and attributes the incident to Worldleaks. With no explicit compromise date, encryption status, or ransom figure disclosed, the exact impact remains unconfirmed from this post alone. The post contains no images or attachments, and there are currently no visible data samples on the page. Given the presence of a claim URL but the lack of attached data on the page, readers should monitor for follow-up disclosures or additional leak updates to determine the scope of the breach and any potential data exposure.

Support Our Work

A considerable amount of time and effort goes into maintaining this website, creating backend automation and creating new features and content for you to make actionable intelligence decisions. Everyone that supports the site helps enable new functionality.

If you like the site, please support us on Patreon or Buy Me A Coffee using the buttons below.

AI APIs OSINT driven New features