World Leaks Claims Dell Data Breach, Leaks 1.3 TB of Files

World Leaks, the rebranded version of the Hunters International ransomware gang, has leaked 1.3 TB of internal data, which the group claims belongs to Dell Technologies Inc., the American multinational tech giant.

The announcement was made earlier today, Monday, July 21, 2025, on the group’s official dark web leak site. According to information reviewed by Hackread.com, the leak contains 416,103 files, all publicly available for download. Many of these files directly reference Dell Technologies and appear consistent with internal corporate data.

A closer look at the leaked file list shows what appears to be internal data from across Dell Technologies’ global network. The files come from various regional systems, including the Americas, Europe, and Asia-Pacific, and cover everything from employee folders and software tools to infrastructure scripts and backup data.

Many of the files mention Dell Technologies and its products, such as PowerPath, PowerStore, and firmware for Dell-branded hardware. There are also references to VMware tools, automation scripts written in Terraform, and files linked to system monitoring and internal testing.

Some paths point to browser profiles, log files, and software packages used in development or support environments. What stands out is how often Dell’s name and tools appear throughout the directories, along with structured naming that suggests the data is pulled from real corporate systems. All of this supports the group’s claim that the files are indeed from inside Dell’s infrastructure.

It’s also worth noting that World Leaks has not disclosed when the breach of Dell Technologies occurred, how it was carried out, or how the company responded to it.

In a statement to Hackread.com, Dell confirmed that a threat actor accessed its internal “Solution Center,” an environment used for product demos and testing. The company emphasised that this system is isolated from customer and partner networks and is not part of its service infrastructure.

According to Dell, the data obtained was primarily synthetic, publicly available, or related to internal scripts and testing outputs. While Dell did not use the term “breach,” its response indicates that unauthorised access did occur. The company says its investigation is ongoing.

As Hackread.com reported in early July 2025, World Leaks is the new name adopted by the group formerly known as Hunters International. The gang has changed its approach, now focusing solely on data theft and extortion rather than deploying ransomware. Their approach focuses on stealing sensitive data and threatening to leak it unless they are paid by their victims.

This approach is completely different from how Hunters International operated, where file encryption was used alongside extortion. World Leaks has dropped the encryption part entirely and is now gambling everything on the pressure that comes from the threat of public exposure.

The change could be a strategic one, especially with law enforcement agencies becoming more aggressive and ransomware profits facing more obstacles. By cutting out the encryption step, they reduce the chances of getting caught while still profiting from the stolen data.

World Leaks now uses a custom exfiltration tool to automatically extract large volumes of data from compromised networks. This tool seems to be a more advanced version of the data theft software previously used by affiliates of the original Hunters International group.

A company as large as Dell is always an attractive target for cybercriminals, and this isn’t the first time hackers have claimed to breach its systems. On May 9, 2024, a hacker using the alias “Menelik” claimed to be selling data from 49 million Dell customer accounts.

The following day, on May 10, Dell confirmed the breach but downplayed its severity, stating that the compromised data posed “no significant risk.” The exposed information included full names, physical addresses, Dell hardware and order details, service tags, item descriptions, order dates, warranty information, and more.

In September 2024, a hacker using the alias “grep” announced three separate data breaches involving Dell. One of the breaches reportedly exposed data belonging to more than 10,000 Dell employees.