Skira
Data as of August 16, 2026.
What industries Skira targets
Sector identified for 5 of 8 victims.
| Government | 2 | |
| Education | 1 | |
| Technology | 1 | |
| Financial Services | 1 |
Where the victims are located
Country identified for 2 of 8 victims.
| Turkey | 1 | |
| Thailand | 1 |
Every Skira victim
| Victim | Sector | Country | Posted |
|---|---|---|---|
| Innovex innovex.co.th | Not identified | Thailand | Nov 19, 2025 |
| Dedicated Web Consultants dwcusa.com | Technology | Not identified | May 2, 2025 |
| Independent Title Agency independenttitle.com | Financial Services | Not identified | Apr 21, 2025 |
| CCL Products cclproducts.com | Not identified | Not identified | Mar 7, 2025 |
| Krisala Developer krisala.com | Government | Not identified | Mar 7, 2025 |
| Lawyers Diary and Manual lawdiary.com | Not identified | Not identified | Mar 7, 2025 |
| Carruth Compliance Consulting ncompliance.com | Education | Not identified | Mar 7, 2025 |
| Van Metropolitan Municipality van.bel.tr | Government | Turkey | Mar 7, 2025 |
Browse recent data breaches for more.
Skira leak site
The address we've seen Skira publish victims from. Any .onion address needs the Tor Browser.
mtgc3qvyedjnfu7cen2zsupdppi5ys5g2hm6xwujvoepw25p4dy6huid.onion
Skira questions
Is Skira still active?
It's gone quiet. The last victim we recorded was November 19, 2025, and nothing has appeared since. Groups do go quiet and come back, so we're still watching.
How many victims has Skira claimed?
Skira has named 8 victims on its leak site since we started tracking it. That counts organizations, not leaked files. A single victim often accounts for thousands of published files. 1 of them was posted in the last 12 months.
When did Skira first appear?
The first victim we recorded for Skira was posted on March 7, 2025. That's when the group entered our collection, which isn't necessarily when it started operating.
Which sectors does Skira target?
Government accounts for the most victims we can classify, with 2. Education follows at 1. We could identify a sector for 5 of 8 victims, so treat this as the shape of the targeting rather than a full census.
Has Skira already got your credentials?
Check whether your employees' logins have leaked on the dark web before they're exploited.
Check your exposure →Continuous dark web monitoring alerts you when your company's data shows up, whether that's employee credentials or files published after an attack.