Ransom! Intuitive Machines (MAY-2026)

Ransom! Intuitive Machines (MAY-2026)
LeakBazaar ransomware operators reportedly targeted Intuitive Machines, Inc., exfiltrating 70GB of sensitive data across nine categories including confidential data, finance, guidance, and quarterly/research reports, with a posted ransom demand. The impacted country is #UnitedStates.

Incident Details

  • Victim: Intuitive Machines
  • Sector: Technology
  • Country: US
  • Actor: LeakBazaar
  • Source: https://mes4qo4rd6t3biyrm6q4twkquspzd7r4kg7va765nbdfxqgnc2w3pead.onion/company?dataBlobId=8175986c-749e-4b00-a385-284be141b619
  • Discovered: 2026-05-10T08:57:05.705960+00:00
  • Published: 2026-05-05T00:00:00+00:00

Information

  • Intuitive Machines is a U.S.-based company that designs, manufactures, and operates space products and services.
  • Its space systems and infrastructure support scientific and human exploration, as well as the use of lunar resources for sustainable presence on the moon.
  • The company provides lunar access services, including Nova, lunar surface rover services, fixed lunar surface services, lunar orbit delivery services, rideshare delivery to lunar orbit, and content sales and marketing sponsorships.
  • It also offers orbital services such as satellite delivery and rideshare, satellite servicing and refueling, space station servicing, satellite repositioning, and orbital debris removal.
  • Additional offerings include lunar data services such as the lunar data network, lunar south pole and far-side coverage, lunar positioning services, and data relay and storage/caching.
  • The leaked material reportedly includes about 70GB of sensitive information across 9 categories.
  • Confidential data is listed as the largest category.
  • Other categories include buyback, calculation cost of production, dividends, finance, guidance, possible violations, quarterly reports, and research reports.
  • The threat actor associated with the leak is LeakBazaar.

Disclaimer: This post is based on public claims made by the ransomware group "LeakBazaar". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.

monitored by: ransomware.live