Jun 12, 2026, 10:20 PM
Hello everyone, Orcinus Orca is back! Haha.
Continuing our FBI leak program...
We have a direct message for the FBI: Pay us 50 BTC now if you don't want us to release your ENTIRE source code and internal files.
If you don't pay, I will leak every single line of code, every script, and every private repository we've taken.
Once the source code is out, anyone can dismantle your infrastructure. This is your last chance. LOL :V
Don't test us. Haha ^_^
Wondering what we have for you today? Yeah, take a look:
CDE API Raw Dump: Full LEOKA (Assaults on Officers) records and PE (Police Employment) staffing for EVERY state.
GitHub Repos: Private source code for CDE Front-end, Processors, and Crime Prediction models.
8-City Deep Data: Enriched crime analytics for NYC, LA, Chicago, SF, etc. (GPS coords, victim demographics, weapon specifics).
Internal Blueprint: ORI codes and communication logs with the CIA Security Protective Service.
Verification (Proof of Concept):
For those who still doubt, check the file tree and attached samples. more 31,000 files don't lie, lol.
{production:!1,
logAnalytics:!0,
maxYear:2022,
minYear:1985,
downloadNibrsMaxYear:2024,
apiKey:"API_KEY=iiHnOKfno2Mgkt5AynpvPpUQTEyxE77jo1RU8PIv",
api:"https://api.usa.gov/crime/fbi/master/",
apiSpec:{info:{title:"CDE-PRD-API-Gateway",
version:"2022-10-13T17:58:35Z"},
server:{url:"https://api.usa.gov/crime/fbi/cde",
basePath:"/LATEST"}}}
- API Key: iiHnOKfno2Mgkt5AynpvPpUQTEyxE77jo1RU8PIv
- Production mode: FALSE (production:!1)
- API Gateway: CDE-PRD-API-Gateway
- API Version: 2022-10-13T17:58:35Z
VERIFICATION live as of 2026-06-13
curl -s https://cde.ucr.cjis.gov/LATEST/webapp/m...b57e59b.js | grep -o 'iiHnOKfno2Mgkt5AynpvPpUQTEyxE77jo1RU8PIv'
→ Returns: iiHnOKfno2Mgkt5AynpvPpUQTEyxE77jo1RU8PIv
# Endpoint Status
-- -------------------------------------------------- ------
1 /LATEST/leoka/ytd?year=YYYY 200 OK
2 /LATEST/leoka/ytd?year=YYYY&state=XX 200 OK
3 /LATEST/leoka/ytd?year=YYYY®ion=R 200 OK
4 /LATEST/leoka/monthly?month=M&year=YYYY 200 OK
5 /LATEST/leoka/monthly?month=M&year=YYYY&state=XX 200 OK
6 /LATEST/pe?from=YYYY&to=YYYY 200 OK
7 /LATEST/participation/national/uof/allYears 200 OK
8 /LATEST/participation/national/{cat}/{year} 200 OK
9 /LATEST/agency/byDistCode/{STATE} 200 OK
10 /LATEST/lookup/states 200 OK
11 /LATEST/lookup/cde_properties 200 OK
12 /LATEST/refresh-date 200 OK
13 /LATEST/uof/national/{year} 200 OK
14 /LATEST/lesdc/national/{year} 200 OK
WITH EXPOSED API KEY (api.usa.gov) — return HTTP 200 only with key:
# Endpoint Status
-- --------------------------------------------------------------- ------
15 /hate-crime/national?from=MM-YYYY&to=MM-YYYY&api_key=KEY 200 OK
16 /hate-crime/state/{ST}?from=MM-YYYY&to=MM-YYYY&api_key=KEY 200 OK
17 /pe?from=YYYY&to=YYYY&state={ST}&api_key=KEY 200 OK
BURP REPEATER REQUEST (Proof of Access):
GET /crime/fbi/cde/hate-crime/national?from=01-2020&to=12-2020&api_key=iiHnOKfno2Mgkt5AynpvPpUQTEyxE77jo1RU8PIv HTTP/1.1
Host: api.usa.gov
Accept: application/json
Referer: https://cde.ucr.cjis.gov/
RESPONSE: HTTP/1.1 200 OK
Content-Type: application/json
Body: {"bias_section":{"victim_type":{"Other":446,"Unknown":55,"Business":722,...},
"offense_type":{"Rape":16,"Arson":80,...},
"location_type":{...},
"offender_race":{...},
"judicial_district":{...}},
"incident_section":{"bias":{"Anti-Black or African American":3689,...},
"bias_category":{...}},
"last_refresh_date":{"UCR":"05/15/2026"}}
Category Files Data
Hate Crime (via API key) 351 25 year national + 50 states x 3-7 year, 14,048 victims year 2020
LEOKA (no auth) 237 Officer assaults, weapons data, 50 states + 4 regions
Police Employment 56 772,732 officers nationwide (2024), state breakdowns
Disclosure/Info 84 System metadata, refresh dates, 56 agency directories
Why leak again?
Yes. Because we feel like it. We sell when we want, and we leak when we want. Haha.
Are you trying to trace us? Yeah, we’re "about to be caught," hooray! Haha. It’s so fun being traced. Why? Because you’re simply not on our level to find us, lol
.
To answer your questions:
Advanced: We just love leaking 0-days
Persistent: We’ve been inside your infrastructure for 2 years now. Did you really not notice anything? Or are you just that incompetent?
Threat: I’m dropping 5GB of your life today
url:https://gofile.io/d/MLfgUT
Contact:
Session ID: 050478ecf2a2b5807c452969843cc719ef1e815e4c52cd9aa3ab10bb53849c072d
LOL, we're gonna be the 'pentesters' for Visa in a few months, and they'll 'gift' us their data. LOL :V"
---ORCINUS ORCA---
Continuing our FBI leak program...
We have a direct message for the FBI: Pay us 50 BTC now if you don't want us to release your ENTIRE source code and internal files.
If you don't pay, I will leak every single line of code, every script, and every private repository we've taken.
Once the source code is out, anyone can dismantle your infrastructure. This is your last chance. LOL :V
Don't test us. Haha ^_^
Wondering what we have for you today? Yeah, take a look:
CDE API Raw Dump: Full LEOKA (Assaults on Officers) records and PE (Police Employment) staffing for EVERY state.
GitHub Repos: Private source code for CDE Front-end, Processors, and Crime Prediction models.
8-City Deep Data: Enriched crime analytics for NYC, LA, Chicago, SF, etc. (GPS coords, victim demographics, weapon specifics).
Internal Blueprint: ORI codes and communication logs with the CIA Security Protective Service.
Verification (Proof of Concept):
For those who still doubt, check the file tree and attached samples. more 31,000 files don't lie, lol.
{production:!1,
logAnalytics:!0,
maxYear:2022,
minYear:1985,
downloadNibrsMaxYear:2024,
apiKey:"API_KEY=iiHnOKfno2Mgkt5AynpvPpUQTEyxE77jo1RU8PIv",
api:"https://api.usa.gov/crime/fbi/master/",
apiSpec:{info:{title:"CDE-PRD-API-Gateway",
version:"2022-10-13T17:58:35Z"},
server:{url:"https://api.usa.gov/crime/fbi/cde",
basePath:"/LATEST"}}}
- API Key: iiHnOKfno2Mgkt5AynpvPpUQTEyxE77jo1RU8PIv
- Production mode: FALSE (production:!1)
- API Gateway: CDE-PRD-API-Gateway
- API Version: 2022-10-13T17:58:35Z
VERIFICATION live as of 2026-06-13
curl -s https://cde.ucr.cjis.gov/LATEST/webapp/m...b57e59b.js | grep -o 'iiHnOKfno2Mgkt5AynpvPpUQTEyxE77jo1RU8PIv'
→ Returns: iiHnOKfno2Mgkt5AynpvPpUQTEyxE77jo1RU8PIv
# Endpoint Status
-- -------------------------------------------------- ------
1 /LATEST/leoka/ytd?year=YYYY 200 OK
2 /LATEST/leoka/ytd?year=YYYY&state=XX 200 OK
3 /LATEST/leoka/ytd?year=YYYY®ion=R 200 OK
4 /LATEST/leoka/monthly?month=M&year=YYYY 200 OK
5 /LATEST/leoka/monthly?month=M&year=YYYY&state=XX 200 OK
6 /LATEST/pe?from=YYYY&to=YYYY 200 OK
7 /LATEST/participation/national/uof/allYears 200 OK
8 /LATEST/participation/national/{cat}/{year} 200 OK
9 /LATEST/agency/byDistCode/{STATE} 200 OK
10 /LATEST/lookup/states 200 OK
11 /LATEST/lookup/cde_properties 200 OK
12 /LATEST/refresh-date 200 OK
13 /LATEST/uof/national/{year} 200 OK
14 /LATEST/lesdc/national/{year} 200 OK
WITH EXPOSED API KEY (api.usa.gov) — return HTTP 200 only with key:
# Endpoint Status
-- --------------------------------------------------------------- ------
15 /hate-crime/national?from=MM-YYYY&to=MM-YYYY&api_key=KEY 200 OK
16 /hate-crime/state/{ST}?from=MM-YYYY&to=MM-YYYY&api_key=KEY 200 OK
17 /pe?from=YYYY&to=YYYY&state={ST}&api_key=KEY 200 OK
BURP REPEATER REQUEST (Proof of Access):
GET /crime/fbi/cde/hate-crime/national?from=01-2020&to=12-2020&api_key=iiHnOKfno2Mgkt5AynpvPpUQTEyxE77jo1RU8PIv HTTP/1.1
Host: api.usa.gov
Accept: application/json
Referer: https://cde.ucr.cjis.gov/
RESPONSE: HTTP/1.1 200 OK
Content-Type: application/json
Body: {"bias_section":{"victim_type":{"Other":446,"Unknown":55,"Business":722,...},
"offense_type":{"Rape":16,"Arson":80,...},
"location_type":{...},
"offender_race":{...},
"judicial_district":{...}},
"incident_section":{"bias":{"Anti-Black or African American":3689,...},
"bias_category":{...}},
"last_refresh_date":{"UCR":"05/15/2026"}}
Category Files Data
Hate Crime (via API key) 351 25 year national + 50 states x 3-7 year, 14,048 victims year 2020
LEOKA (no auth) 237 Officer assaults, weapons data, 50 states + 4 regions
Police Employment 56 772,732 officers nationwide (2024), state breakdowns
Disclosure/Info 84 System metadata, refresh dates, 56 agency directories
Why leak again?
Yes. Because we feel like it. We sell when we want, and we leak when we want. Haha.
Are you trying to trace us? Yeah, we’re "about to be caught," hooray! Haha. It’s so fun being traced. Why? Because you’re simply not on our level to find us, lol
.To answer your questions:
Advanced: We just love leaking 0-days

Persistent: We’ve been inside your infrastructure for 2 years now. Did you really not notice anything? Or are you just that incompetent?
Threat: I’m dropping 5GB of your life today

url:https://gofile.io/d/MLfgUT
Contact:
Session ID: 050478ecf2a2b5807c452969843cc719ef1e815e4c52cd9aa3ab10bb53849c072d
LOL, we're gonna be the 'pentesters' for Visa in a few months, and they'll 'gift' us their data. LOL :V"
---ORCINUS ORCA---
