The donutleaks ransomware group listed Sando on its data leak site on 2022-08-24.