Ransom! Millennium packages (MAY-2026)

Ransom! Millennium packages (MAY-2026)

Millennium Packages in the United States was targeted by LeakBazaar ransomware, with 120GB of valuable information across 11 separate categories including confidential data, finance, guidance, insurance, organizational records, and supplier/buyer materials. The data reportedly listed ransom pricing at $1000 for “one hands” and $500 for “many hands.” #UnitedStates

Incident Details

  • Victim: Millennium packages
  • Sector: Transportation/Logistics
  • Country: US
  • Actor: LeakBazaar
  • Source: https://mes4qo4rd6t3biyrm6q4twkquspzd7r4kg7va765nbdfxqgnc2w3pead.onion/company?dataBlobId=312c4039-9ffe-4791-b733-99cc9236d71c
  • Discovered: 2026-05-10T08:55:45.786763+00:00
  • Published: 2026-04-22T00:00:00+00:00

Information

  • 120GB of valuable information exposed across 11 separate categories.
  • Calculation Cost of Production (2.15GB) — $1000 / $500.
  • Confidential Data (17.38GB) — $1000 for exclusive access / $500 for broader access.
  • Finance (6.59GB) — $1000 for exclusive access / $500 for broader access.
  • Guidance (36.52GB) — $1000 for exclusive access / $500 for broader access.
  • Insurance (6.69GB) — $1000 for exclusive access / $500 for broader access.
  • Organization (558.64MB) — $1000 for exclusive access / $500 for broader access.
  • Possible Violations (16.59MB) — $1000 for exclusive access / $500 for broader access.
  • Quarterly Reports (789.15MB) — $1000 for exclusive access / $500 for broader access.
  • Research Reports (655.02MB) — $1000 for exclusive access / $500 for broader access.
  • Sanctions (48.75MB) — $1000 for exclusive access / $500 for broader access.
  • Suppliers and Buyers (3.8GB) — $1000 for exclusive access / $500 for broader access.

Disclaimer: This post is based on public claims made by the ransomware group "LeakBazaar". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.

monitored by: ransomware.live