Ransomware group karakurt hits COSI
COSI — a education target has been listed by the karakurt ransomware group on 2023-08-02. The information below reflects what the threat actor has publicly claimed on their leak site; the details have not been independently verified.
Incident Report
| Target Organization | COSI |
|---|---|
| Threat Group | karakurt |
| Summary | COSI, a education organization, was listed by the karakurt ransomware group on its leak site on 2023-08-02. |
| Date of Breach | 2023-08-02 |
| Discovery Date | 2023-08-02 |
| Region | — |
| Target Domain | cosi.org |
| Business Sector | Education |
| Severity | MEDIUM |
Claim by karakurt
COSI, Columbus, Ohio's dynamic Center of Science and Industry, inspires the scientists, dreamers, and innovators of tomorrow. We've taken about 75GBs of data from this organization. You will find there their projects information, lots of accounting and financial documents, contracts (some of them are confidential), clients contacts, donations information an so on. There are also databases containing clients, partners and employee data, transactions and correspondence. Wait for the release.
Posted by the karakurt threat actor on its public leak site. This is the group's own statement and has not been independently verified by HackerFeeds.
Sources
Victim website
cosi.org
Leak post (onion / Tor)
https://3f7nxkjway3d223j27lyad7v5cgmyaifesycvmwq7i7cbs23lb6llryd.onion/companies/fea7cc27-94f6-4359-bd10-ede87830c6ba
Open this URL in Tor Browser. Browsing leak sites carries real risk — view passively, never click further.
Disclaimer
HackerFeeds does not engage in the exfiltration, downloading, taking, hosting, viewing, reposting, or disclosure of any stolen information. All breach data reported here is sourced from publicly available threat intelligence feeds for awareness purposes only.

