A newly rebranded cyber extortion group calling itself World Leaks has reportedly infiltrated one of Dell Technologies' demonstration platforms and is attempting to extort the tech major over stolen data. The attack, which occurred earlier this month, targeted Dell’s Customer Solution Centers—a platform used to showcase products and test proof-of-concept solutions for commercial clients.
Dell has confirmed the incident, stating that a threat actor accessed the Solution Center, which operates as an isolated environment designed solely for demonstrations and product testing. According to Dell, this system is intentionally separated from the company’s main networks, partner systems, and customer data infrastructure.
“The data used in the Solution Center is primarily synthetic or publicly available datasets created for demonstration purposes,” Dell said in a statement. “Based on our investigation so far, the threat actor appears to have accessed mainly synthetic, non-sensitive, and test-related information.”
Despite the attackers’ claims that the stolen files include sample medical and financial data, Dell has clarified that these datasets are fabricated and hold no real-world value. The only legitimate data believed to have been accessed is reportedly an outdated contact list.
Customers interacting with Dell’s Solution Centers are repeatedly advised against uploading any private or sensitive information to the environment, which further limits the exposure risk.
The company has declined to disclose details on how the breach occurred, citing an active investigation. It also did not comment on the ransom demand.
World Leaks is the successor to the Hunters International ransomware group, which began operations in late 2023 and had ties to the defunct Hive ransomware operation based on code similarities. The group has since pivoted from encrypting files to focusing entirely on data theft and extortion, reportedly using custom-built tools to exfiltrate data from targeted systems.
Since rebranding in January 2025, World Leaks has claimed responsibility for attacks on 49 organizations globally. While Dell has not yet been listed on the group’s leak site, the extortion attempt indicates the company is under pressure to negotiate.
Cybersecurity analysts view this shift toward non-encryption-based extortion as part of a growing trend, driven by stricter global enforcement and reduced profitability in traditional ransomware attacks.
