MS13-089
Data as of September 14, 2026.
What industries MS13-089 targets
Sector identified for 4 of 5 victims.
| Legal | 1 | |
| Real Estate | 1 | |
| Logistics | 1 | |
| Financial Services | 1 |
Where the victims are located
Country identified for all 5 victims.
| United States | 2 | |
| Luxembourg | 1 | |
| Chile | 1 | |
| Italy | 1 |
Every MS13-089 victim
| Victim | Sector | Country | Posted |
|---|---|---|---|
| Servicios Marítimos M.G. servmarmg.cl | Logistics | Chile | Aug 17, 2026 |
| Brittany Residential brittanyresidential.com | Real Estate | United States | May 6, 2026 |
| SJL Jimenez Lunz sjl-legal.com | Legal | Luxembourg | Jan 16, 2026 |
| Studio DGP Dottori Commercialisti dgpcommercialisti.it | Financial Services | Italy | Dec 16, 2025 |
| Virginia Urology uro.com | Not identified | United States | Dec 16, 2025 |
Browse recent data breaches for more.
MS13-089 leak site
The address we've seen MS13-089 publish victims from. Any .onion address needs the Tor Browser.
msleakjir7pxbe6onlqe5uwgvdmy6nq4mnwfy7ojswbhnleenm77vgad.onion
MS13-089 questions
Is MS13-089 still active?
Yes. MS13-089 posted its most recent victim on August 17, 2026.
How many victims has MS13-089 claimed?
MS13-089 has named 5 victims on its leak site since we started tracking it. That counts organizations, not leaked files. A single victim often accounts for thousands of published files.
When did MS13-089 first appear?
The first victim we recorded for MS13-089 was posted on December 16, 2025. That's when the group entered our collection, which isn't necessarily when it started operating.
Has MS13-089 already got your credentials?
Check whether your employees' logins have leaked on the dark web before they're exploited.
Check your exposure →Continuous dark web monitoring alerts you when your company's data shows up, whether that's employee credentials or files published after an attack.