Law enforcement took control of the KillSec ransomware leak site on 30 September 2026, securing at least 110 terabytes of data to stop further unauthorised access, Europol said. The leak site was used to pressure organisations with threats to publish stolen files unless a ransom was paid. KillSec’s operation relied on extortion through data theft and online exposure. By maintaining a platform to threaten publication, the group aimed to force targets into negotiations under the threat of damage from leaked information. During the action, authorities secured the large cache of stolen data held by the site, preventing it from being accessed further without authorisation. Europol said the investigation remains focused on disrupting KillSec’s ransomware activities and associated leak infrastructure.