Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Logo

Universitt Hamburg

uni-hamburg.de
Group Panzer
Discovered 2026-09-18 00:23 UTC
Est. attack date 2026-09-17
Country DE
Sector
Agriculture and Food Production Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation
Data exfiltrated 3GB

Description:

Universität Hamburg is the largest research and educational institution in Northern Germany, with over 42,000 students. It offers a wide range of academic programs and is recognized for its excellence in research and teaching. The university serves diverse target groups including prospective students, current students, researchers, and alumni. It collaborates with various societal and economic partners to address contemporary challenges and contribute to future solutions.
Infostealer activity detected by HudsonRock

Compromised Employees: 51

Compromised Users: 1370

Third Party Employee Credentials: 90

External Attack Surface: 127

Infostealer Distribution
Exposure Report
by ParanoidLab
25696
Passwords
1318 critical
291
Cookies
5 critical
Last queried 2026-09-18 07:09 UTC

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • No emails found.
MX Records
  • mx03.rrz.uni-hamburg.de.
  • mx04.rrz.uni-hamburg.de.
  • mx05.rrz.uni-hamburg.de.
TXT Records
  • v=spf1 ip4:134.100.38.64/26 ~all
  • google-site-verification=OZcUjRiXyV-FC_CETAcSW8vmGy5Z5PVeV9VuY6hmmPk
  • google-gws-recovery-domain-verification=53008832
  • adobe-idp-site-verification=46b245589c136af9a25e6fe7e169e3f2256cae02b6e3b087d82cfe9afe6ea643
  • apple-domain-verification=EOZVdX53PEO7QreC
  • jamf-site-verification=myEv21-oaE8vC4h52sT0-A
  • MS=442ABFBA9905F38423AE1FC75712741886F34779
  • HARICA-0O9klqSrtJaFt32jFMr
Cloud / SaaS Services Detected
Adobe Apple JamF

Leak Screenshot:

Leak Screenshot

Legal Disclaimer: Ransomware.live does not engage in the acquisition, exfiltration, downloading, possession, hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data. This platform indexes only publicly visible information posted by ransomware operators and open web sources without accessing or obtaining the underlying stolen content. The service is provided to support public awareness, legitimate research, and cyber-resilience. No stolen personal or confidential data is collected or distributed via this site.