Play
Ransomware <br/> <br/>
Victims in the last 90 days50
Most affected countries
- United States6
- Andorra1
- Germany1
- Spain1
- Sweden1
Most affected sectors
- Other20
- Professional services8
- Manufacturing4
- Finance & insurance4
- Retail3
- Automotive2
- Technology2
- Telecommunications1
Priority mitigations
MITRE ATT&CK mitigations that cover the most techniques used by this group.
- Privileged Account Management (7 techniques covered)
- User Account Management (6 techniques covered)
- Password Policies (5 techniques covered)
- User Training (4 techniques covered)
- Multi-factor Authentication (4 techniques covered)
- Filter Network Traffic (4 techniques covered)
- Restrict File and Directory Permissions (3 techniques covered)
- Network Segmentation (3 techniques covered)
MITRE ATT&CK techniques
T1030 · Data Transfer Size LimitsT1016 · System Network Configuration DiscoveryT1048 · Exfiltration Over Alternative ProtocolT1070.004 · File DeletionT1059.003 · Windows Command ShellT1059.001 · PowerShellT1560.001 · Archive via UtilityT1018 · Remote System DiscoveryT1057 · Process DiscoveryT1027.010 · Command ObfuscationT1587.001 · MalwareT1078.003 · Local AccountsT1021.002 · SMB/Windows Admin SharesT1685.005 · Clear Windows Event LogsT1078 · Valid AccountsT1105 · Ingress Tool TransferT1078.002 · Domain AccountsT1082 · System Information DiscoveryT1083 · File and Directory DiscoveryT1518.001 · Security Software DiscoveryT1133 · External Remote ServicesT1588.002 · ToolT1190 · Exploit Public-Facing ApplicationT1003.001 · LSASS MemoryT1657 · Financial TheftT1685 · Disable or Modify Tools
Recent victims
| Organisation | Country | Sector | Claimed | Status |
|---|---|---|---|---|
| 🔒 Entidad desconocida | — | Other | 9/30/2026 | ◌ Claimed (unverified) |
| Airtech Mechanical Services | — | Professional services | 9/30/2026 | ◌ Claimed (unverified) |
| 🔒 Negocio del sector automotriz | — | Automotive | 9/30/2026 | ◌ Claimed (unverified) |
| Starr Whitehouse Landscape Architects | — | Professional services | 9/28/2026 | ◌ Claimed (unverified) |
| Ever Ready First Aid | — | Healthcare | 9/28/2026 | ◌ Claimed (unverified) |
| 🔒 Organización no identificada | — | Other | 9/21/2026 | ◌ Claimed (unverified) |
| 🔒 Organización no identificada | — | Other | 9/21/2026 | ◌ Claimed (unverified) |
| Vista Plastic Solutions | — | Manufacturing | 9/18/2026 | ◌ Claimed (unverified) |
| Inglewood Golf | — | Hospitality & tourism | 9/18/2026 | ◌ Claimed (unverified) |
| Barrett Mahony Consulting Engineers | — | Professional services | 9/18/2026 | ◌ Claimed (unverified) |
| 🔒 Entidad sin clasificación clara | — | Other | 9/10/2026 | ◌ Claimed (unverified) |
| Grunthal Welding & Supplies | — | Manufacturing | 9/10/2026 | ◌ Claimed (unverified) |
| 🔒 Entidad del sector energético | — | Energy & utilities | 9/9/2026 | ◌ Claimed (unverified) |
| GT Distributors | — | Retail | 9/9/2026 | ◌ Claimed (unverified) |
| 🔒 Entidad sin identificar | — | Other | 8/31/2026 | ◌ Claimed (unverified) |
| Figgins Family Wine Estates | United States | Agriculture & food | 8/31/2026 | ◌ Claimed (unverified) |
| KRC Machine Tool Solutions | — | Manufacturing | 8/31/2026 | ◌ Claimed (unverified) |
| Meteor Group | — | Other | 8/31/2026 | ◌ Claimed (unverified) |
| 🔒 Entidad del sector de medios | — | Other | 8/20/2026 | ◌ Claimed (unverified) |
| Latoplast | — | Other | 8/20/2026 | ◌ Claimed (unverified) |
| Coltrane Systems | — | Technology | 8/18/2026 | ◌ Claimed (unverified) |
| Bridgeport Capital Services | — | Finance & insurance | 8/17/2026 | ◌ Claimed (unverified) |
| Sam Pack Auto Group | United States | Automotive | 8/17/2026 | ◌ Claimed (unverified) |
| Woodhaven Association | — | Other | 8/17/2026 | ◌ Claimed (unverified) |
| MIE Solutions | — | Other | 8/9/2026 | ◌ Claimed (unverified) |
Claims are published by the criminal groups themselves and are unverified until the organisation or the press confirms them. Names of natural persons (sole traders, individual professionals) are anonymised under the GDPR. We never link to leak sites or stolen data. To request the removal or anonymisation of an entry, contact the site administrator.
Sources: RansomLook (CC BY 4.0), MITRE ATT&CK®, MISP Galaxy, GDELT.