The funksec ransomware group listed Moon on its data leak site on 2025-02-28. Country: US Sector: Technology Domains named: play.google.com, com.itcan.moon Claim as published on the leak site: https://play.google.com/store/apps/details?id=com.itcan.moon&hl=en-US