Ummah Security

Ummah Security, also styled UmmahSec or Ummah’s Security, is an ideologically branded Telegram-centered actor associated with hack-and-leak and data-sale claims. Recoverable channel history shows intermittent activation, relationship signaling and a probable contributor using the HXRID identity, while the operators’ geographic origin remains unresolved.

A June 2025 post is explicitly signed by HXRID and co-tags Khilafah Hackers and Dxploit; later secondary reporting links HXRID to a claimed Indian e-commerce compromise and the sale of an alleged Taiwanese university database. Those records support a public activity and monetization narrative, but do not establish that Ummah Security acquired the data, directed the operation or controlled the advertised transaction.

The KhilafahHackers X profile cross-links UmmahSec branding, while posts also promote Dxploit and Kal_Egy surfaces. These links form an ecosystem graph, not a membership roster. No geographic origin or behavior-level ATT&CK technique is defensible from current evidence.