Summary
GOLD PUMPKIN is a financially motivated cybercrime group engaged in data‑theft and extortion. The group previously operated as ICA Group and rebranded as HELLCAT in late October 2024. Throughout these identities, the group ran a Tor‑based leak site used for posting stolen data. No activity attributed to GOLD PUMPKIN / ICA Group / HELLCAT has been observed since May 2025.

Contact us
Contact us directly whether your organization needs immediate assistance or
you want to discuss your incident readiness, response, and testing needs.