KillSec's leak site listed roughly 450 victims before the takedown
Assessment
SecurityWeek reported that "Prior to its takedown, the KillSec leak website listed roughly 450 victims" without giving a source. No other count located is close to it. Group-IB, which monitored the leak site and Telegram channels, counted 274 organisations publicly claimed; Bitdefender Labs counted close to 300 postings in total (126 in 2025 and 25 in 2026); ransomware.live records 286; Halcyon recorded over 250 as of November 2025; the Catalan police give more than 280 victims. Nothing published supports 450 as a leak-site count.
Where this claim appeared
SecurityWeek · 2026-10-01
https://www.securityweek.com/police-shut-down-killsec-ransomware-identify-alleged-teen-leader/What “Unverified” means
Widely repeated, but no supporting evidence was located. This is not a statement that the claim is false — it is a statement that nothing published supports it, which is a different and more common problem.
2 of 5 · rating scale
Assessed in
Operation KillSwitch: KillSec ransomware takedown, a 16-year-old suspect and a US indictmentThink this assessment is wrong? Report an error.