Energy Ransomware Victims & Data Breaches
Dark Eye is tracking 734 organizations in the Energy sector named by ransomware and data-extortion groups, with activity recorded as recently as July 2026. Each listing links to a full intelligence profile with the attributed threat actor, discovery date and source.
- 734Victims tracked
- 8Threat groups
- 8Countries
- July 2026Latest activity
Most active ransomware groups targeting Energy
Top countries for Energy attacks
Energy Victims Page 5 / 8
| Type | Target | Source | Discovered | Country | Intel Link |
|---|---|---|---|---|---|
| Ransomware | allweatheraa.com View Details | lockbit3 | United States | ||
| Ransomware | Anderson Oil & Gas View Details | hunters | United States | ||
| Ransomware | Alternate Energy View Details | play | United States | ||
| Ransomware | Veren Inc and Crescent Point Energy View Details | ransomhouse | Canada | ||
| Ransomware | petroassist.co.uk View Details | lockbit3 | United Kingdom | ||
| Ransomware | BLEnergy View Details | handala | — | ||
| Ransomware | Regas (regasenergy.com) View Details | monti | Bulgaria | ||
| Ransomware | Hayden Power Group View Details | play | United States | ||
| Ransomware | Sonol ( Gas Stations ) View Details | handala | — | ||
| Ransomware | The 21st Century Energy Group View Details | play | United States | ||
| Ransomware | Indika Energy View Details | hunters | Indonesia | ||
| Ransomware | Power Lube Industrial View Details | akira | United States | ||
| Ransomware | North Coast Petroleum View Details | medusa | Australia | ||
| Ransomware | Utility Datacenter View Details | akira | United States | ||
| Ransomware | Ojai srl View Details | 8base | Italy | ||
| Ransomware | Peregrine Petroleum View Details | blacksuit | United States | ||
| Ransomware | Amarilla Gas View Details | play | Argentina | ||
| Ransomware | Dynamo Electric View Details | medusa | Canada | ||
| Ransomware | hydefuel.com View Details | qilin | United States | ||
| Ransomware | Hoppecke View Details | dragonforce | Germany | ||
| Ransomware | Axip Energy Services View Details | hunters | United States | ||
| Ransomware | powertestdyno.com View Details | lockbit3 | United States | ||
| Ransomware | Wind Composite Services Group, LLC View Details | bianlian | United States | ||
| Ransomware | Vannguard Utility Partners View Details | akira | United States | ||
| Ransomware | atlasoil.com View Details | blackbasta | United States | ||
| Ransomware | Matadero de Gijón - Biogas energy plant - mataderodegijon.es View Details | ransomhub | Spain | ||
| Ransomware | qualityplumbingassociates.com View Details | lockbit3 | United States | ||
| Ransomware | aharvey.nf.ca View Details | incransom | Canada | ||
| Ransomware | WindCom View Details | dragonforce | Spain | ||
| Ransomware | GMJ & Co, Chartered Accountants View Details | bianlian | India | ||
| Ransomware | Crescent Point Energy View Details | ransomhouse | United States | ||
| Ransomware | manusa.com View Details | lockbit3 | United States | ||
| Ransomware | ultragasmexico.com View Details | lockbit3 | Mexico | ||
| Ransomware | hpo.pe View Details | lockbit3 | Peru | ||
| Ransomware | essinc.com View Details | lockbit3 | United States | ||
| Ransomware | ondozabal.com View Details | lockbit3 | Spain | ||
| Ransomware | Nestoil View Details | blacksuit | Nigeria | ||
| Ransomware | www.servicepower.com View Details | apt73 | United Kingdom | ||
| Ransomware | ottlite.com View Details | lockbit3 | United States | ||
| Ransomware | Mellitah Oil & Gas / Enigas Ly (Eni Electricity, Oil & Gas) View Details | ransomhub | Italy | ||
| Ransomware | Axip Energy Services View Details | play | United States | ||
| Ransomware | sesenergy.org View Details | lockbit3 | United States | ||
| Ransomware | Central Power Systems and Services View Details | hunters | United States | ||
| Ransomware | saglobal.com View Details | cactus | Canada | ||
| Ransomware | Speedy France View Details | 8base | France | ||
| Ransomware | FEB31st View Details | 8base | Italy | ||
| Ransomware | genesisenergy.com View Details | dispossessor | United States | ||
| Ransomware | consolenergy.com View Details | dispossessor | — | ||
| Ransomware | powerfi.org View Details | dispossessor | — | ||
| Ransomware | energytransfer.com View Details | dispossessor | — | ||
| Ransomware | www.empowerins.com View Details | dispossessor | — | ||
| Ransomware | sinopecthc.com View Details | dispossessor | — | ||
| Ransomware | gulfcoastwindows.com View Details | dispossessor | — | ||
| Ransomware | miguelmechanical.com View Details | dispossessor | — | ||
| Ransomware | myerspower.com View Details | dispossessor | — | ||
| Ransomware | diavaz.com View Details | dispossessor | — | ||
| Ransomware | psenergy.com View Details | dispossessor | — | ||
| Ransomware | oneexchangecorp.com View Details | dispossessor | — | ||
| Ransomware | armortex.com View Details | dispossessor | — | ||
| Ransomware | commercialfluidpower.com View Details | dispossessor | United States | ||
| Ransomware | goodhopeholdings.com View Details | dispossessor | Malaysia | ||
| Ransomware | hendelsinc.com View Details | dispossessor | — | ||
| Ransomware | doyon.com | doyondrilling.com View Details | blackbasta | United States | ||
| Ransomware | Pioneer Oil Company, Inc. View Details | bianlian | India | ||
| Ransomware | hirebus.com View Details | darkvault | United States | ||
| Ransomware | specialoilfield.com View Details | lockbit3 | Oman | ||
| Ransomware | Lambda Energy Resources View Details | play | United States | ||
| Ransomware | Gascontec.com View Details | cloak | Germany | ||
| Ransomware | Rockford Gastroenterology Associates View Details | raworld | United States | ||
| Ransomware | rushenergyservices.com View Details | lockbit3 | Canada | ||
| Ransomware | PowerRail Distribution View Details | blacksuit | United States | ||
| Ransomware | dismogas View Details | stormous | Colombia | ||
| Ransomware | starkpower.de View Details | lockbit3 | Germany | ||
| Ransomware | Crystal Window & Door Systems View Details | dragonforce | United States | ||
| Ransomware | Petrus Resources Ltd View Details | alphv | United States | ||
| Ransomware | Dinamic Oil View Details | trigona | Italy | ||
| Ransomware | Electro Marteix View Details | alphv | Spain | ||
| Ransomware | Axel Johnson View Details | 8base | Sweden | ||
| Ransomware | Wapiti Energy View Details | hunters | United States | ||
| Ransomware | Rush Energy Services Inc [Time's up] View Details | alphv | Canada | ||
| Ransomware | Trans-Northern Pipelines View Details | alphv | Canada | ||
| Ransomware | Rush Energy Services Inc [You have 48 hours] View Details | alphv | Canada | ||
| Ransomware | SERCIDE View Details | alphv | Spain | ||
| Ransomware | Lower Valley Energy, Inc View Details | alphv | United States | ||
| Ransomware | Impact Energy Services View Details | hunters | Canada | ||
| Ransomware | Black Butte Coal Co View Details | incransom | United States | ||
| Ransomware | elandenergy.com Eland Energy View Details | alphalocker | United States | ||
| Ransomware | Double Eagle Energy Holdings IV View Details | hunters | United States | ||
| Ransomware | qtc-energy.com View Details | lockbit3 | Thailand | ||
| Ransomware | digipwr.com View Details | lockbit3 | United States | ||
| Ransomware | Anderson King Energy Consultants, LLC View Details | 8base | United States | ||
| Ransomware | SAED International View Details | alphv | Saudi Arabia | ||
| Ransomware | graebener-group.com View Details | blackbasta | Germany | ||
| Ransomware | Clearwinds View Details | alphv | — | ||
| Ransomware | EPS.RS View Details | qilin | Serbia | ||
| Ransomware | hendelsinc.com View Details | lockbit3 | — | ||
| Ransomware | avescorent.ch View Details | lockbit3 | Switzerland | ||
| Ransomware | quakerwindows.com View Details | cactus | — | ||
| Ransomware | whafh.com View Details | blackbasta | United States | ||
| Ransomware | evn.com.vn View Details | stormous | Viet Nam |