TalibLeaks — Hacktivist Profile

TalibLeaks is a self-branded leak persona targeting the Taliban-controlled government of Afghanistan, operating its own leak site and a matching account on X. It has claimed Taliban data leaks on at least three occasions, in 2023, in 2024, and in a far larger February 2025 operation publishing over 50GB of documents said to come from 21 Taliban ministries and government agencies. Independent OSINT analysis by Afghan Witness at the Centre for Information Resilience judged the earlier 2023 and 2024 dumps to contain largely generic or already-public material, while the 2025 release drew wider attention. The operators' identity, nationality and motives beyond a stated human-rights framing remain unconfirmed, so origin is carried here as Unknown. The spelling TabiLeaks appears in some coverage and is retained as an alias, but it is almost certainly a transcription error: the same article uses both spellings, and TalibLeaks is the form used on the group's own site and across the bulk of reporting.

Also tracked as

TabiLeaks

Countries linked to this actor

Read the full analysis on IntelFusions