W.A
Data as of August 16, 2026.
What industries W.A targets
Sector identified for 7 of 12 victims.
| Financial Services | 2 | |
| Healthcare | 1 | |
| Agriculture | 1 | |
| Real Estate | 1 | |
| Manufacturing | 1 | |
| Legal | 1 |
Where the victims are located
Country identified for 3 of 12 victims.
| Thailand | 1 | |
| South Africa | 1 | |
| Colombia | 1 |
Every W.A victim
| Victim | Sector | Country | Posted |
|---|---|---|---|
| Doi Tung doitung.org | Agriculture | Thailand | Aug 6, 2025 |
| Monos monos.mn | Healthcare | Not identified | Aug 5, 2025 |
| Hevea Cameroun hevecam.com | Not identified | Not identified | Aug 4, 2025 |
| Cavelier Abogados cavelier.com | Legal | Colombia | Jul 31, 2025 |
| Seoudi Investment Group seoudi.com | Financial Services | Not identified | Jul 31, 2025 |
| Telangana Publications tppl.news | Not identified | Not identified | Jul 28, 2025 |
| Bela Bela Local Municipality belabela.gov.za | Not identified | South Africa | Jul 23, 2025 |
| Eswatini Water Services swsc.co.sz | Not identified | Not identified | Jul 23, 2025 |
| Union Civil Service Board gov.mm | Not identified | Not identified | Jul 16, 2025 |
| Usha Martin ushamartin.com | Manufacturing | Not identified | Jul 9, 2025 |
| Shukaku shukaku-inc.com | Real Estate | Not identified | Jul 3, 2025 |
| WayUp Brazil wayupbrasil.com | Financial Services | Not identified | Jul 3, 2025 |
Browse recent data breaches for more.
W.A leak sites
Addresses we've seen W.A publish victims from. Any .onion address needs the Tor Browser.
am7hswbi46e3ozxec3msxwwzxebkfulsgonhv5kndzeryc2pu46sxmad.onionweepangrbqjfsxd2noz4bmolztnqsma3vw4c6qfnbfusadzd2m26emqd.onion
W.A questions
Is W.A still active?
Not for over a year. The last victim we recorded was August 6, 2025. The leak site has published nothing since, though the data it already leaked is still out there.
How many victims has W.A claimed?
W.A has named 12 victims on its leak site since we started tracking it. That counts organizations, not leaked files. A single victim often accounts for thousands of published files.
When did W.A first appear?
The first victim we recorded for W.A was posted on July 3, 2025. That's when the group entered our collection, which isn't necessarily when it started operating.
Which sectors does W.A target?
Financial Services accounts for the most victims we can classify, with 2. Healthcare follows at 1. We could identify a sector for 7 of 12 victims, so treat this as the shape of the targeting rather than a full census.
Has W.A already got your credentials?
Check whether your employees' logins have leaked on the dark web before they're exploited.
Check your exposure →Continuous dark web monitoring alerts you when your company's data shows up, whether that's employee credentials or files published after an attack.