Finance / Legal / Insurance Ransomware Victims & Data Breaches
Dark Eye is tracking 2558 organizations in the Finance / Legal / Insurance sector named by ransomware and data-extortion groups, with activity recorded as recently as July 2026. Each listing links to a full intelligence profile with the attributed threat actor, discovery date and source.
- 2558Victims tracked
- 8Threat groups
- 8Countries
- July 2026Latest activity
Most active ransomware groups targeting Finance / Legal / Insurance
Top countries for Finance / Legal / Insurance attacks
Finance / Legal / Insurance Victims Page 2 / 26
| Type | Target | Source | Discovered | Country | Intel Link |
|---|---|---|---|---|---|
| Ransomware | Delegal Poindexter & Underkofler, P.A. View Details | morpheus | United States | ||
| Ransomware | lpgroup View Details | nova | United Kingdom | ||
| Ransomware | Cash Canada View Details | qilin | Canada | ||
| Ransomware | lpgroup.pt View Details | nova | Portugal | ||
| Ransomware | Lee International View Details | qilin | Korea, Republic of | ||
| Ransomware | AYA BANK View Details | lapsus$ | Myanmar | ||
| Ransomware | G* View Details | Icarus | United States | ||
| Ransomware | belpointeasset.com \ belpointe.com View Details | incransom | United States | ||
| Ransomware | eggetttax.ca View Details | BrainCipher | Canada | ||
| Ransomware | sterlinggloballtd.com View Details | BrainCipher | United Kingdom | ||
| Ransomware | Central Bank of Libya View Details | qilin | Libya | ||
| Ransomware | NationsBuilders Insurance Services View Details | aurora | — | ||
| Ransomware | L'Archevque & Rivest Ltée View Details | worldleaks | Canada | ||
| Ransomware | ENB Versicherungen | myenb.ch View Details | payload | Switzerland | ||
| Ransomware | eternal.hk View Details | lockbit5 | Hong Kong | ||
| Ransomware | amc.co.th View Details | lockbit5 | Thailand | ||
| Ransomware | ra-vogeler.de View Details | cloak | Germany | ||
| Ransomware | NAIC.org View Details | shinyhunters | United States | ||
| Ransomware | Greg Crosslin View Details | play | United States | ||
| Ransomware | eurOptimum View Details | play | Germany | ||
| Ransomware | Gerencial View Details | spacebears | Brazil | ||
| Ransomware | W******S*******D View Details | cloak | — | ||
| Ransomware | Guy E******* & F*******, P.A View Details | nightspire | — | ||
| Ransomware | thecreditpros.com View Details | Icarus | United States | ||
| Ransomware | smithassociatescpa.com View Details | incransom | United States | ||
| Ransomware | B****S I******t***l View Details | nightspire | — | ||
| Ransomware | Fidelity Pension Managers View Details | Deadlock | Nigeria | ||
| Ransomware | Palmer Sicard View Details | thegentlemen | — | ||
| Ransomware | Linnecken Partner View Details | thegentlemen | Germany | ||
| Ransomware | Bni.co.id bank of indonesia free data. View Details | Triple X | Indonesia | ||
| Ransomware | mgrlaw.com View Details | threeam | United States | ||
| Ransomware | The Vant Group View Details | insomnia | United States | ||
| Ransomware | hbexperts-conseils.ca View Details | m3rx | Canada | ||
| Ransomware | UiTM Holdings View Details | thegentlemen | Malaysia | ||
| Ransomware | www.commonwealth-partners.com View Details | lynx | United Kingdom | ||
| Ransomware | scbgroup.com.sg View Details | lockbit5 | Singapore | ||
| Ransomware | sumerfaktoring.com View Details | lockbit5 | Russian Federation | ||
| Ransomware | Plaxen & Adler View Details | qilin | Germany | ||
| Ransomware | Miller & Zois View Details | qilin | United States | ||
| Ransomware | Bekman Marder Hopper Malarkey & Perlin View Details | qilin | Moldova, Republic of | ||
| Ransomware | Wright Constable & Skeen View Details | qilin | United States | ||
| Ransomware | libertyinsurance.com.ph View Details | krybit | Philippines | ||
| Ransomware | Associated Investor Services View Details | akira | — | ||
| Ransomware | First Federal Savings & Loan View Details | worldleaks | United States | ||
| Ransomware | HDFC FUND View Details | morpheus | India | ||
| Ransomware | Sayre Associates View Details | dragonforce | United States | ||
| Ransomware | M1xchange View Details | worldleaks | India | ||
| Ransomware | NRCapital View Details | ULose | Korea, Republic of | ||
| Ransomware | MSICapital View Details | ULose | Korea, Republic of | ||
| Ransomware | ASIA STRATEGIC View Details | nightspire | — | ||
| Ransomware | First Mutual Holdings View Details | nightspire | Zimbabwe | ||
| Ransomware | Dallis Law Firm View Details | play | United States | ||
| Ransomware | Harrell Martin Peace View Details | thegentlemen | United States | ||
| Ransomware | 3E Accounting View Details | thegentlemen | Singapore | ||
| Ransomware | Colina Financial Advisors View Details | incransom | Bahamas | ||
| Ransomware | Factors Western View Details | akira | — | ||
| Ransomware | Hal Otey Financial View Details | akira | — | ||
| Ransomware | activ88-interim.com View Details | krybit | Germany | ||
| Ransomware | Stellar View Details | spacebears | Turks and Caicos Islands | ||
| Ransomware | Mortensenlawoffices View Details | kairos | United States | ||
| Ransomware | Panorama BPO View Details | dragonforce | Philippines | ||
| Ransomware | Bradley law firm View Details | incransom | United States | ||
| Ransomware | Grupo Mauá View Details | bravox | Brazil | ||
| Ransomware | MAPFRE ASSURANCE View Details | lapsus$ | Spain | ||
| Ransomware | Cedar Street Capital (A part of a Cynvestors Limited Partnership) View Details | genesis | United States | ||
| Ransomware | Siveco - View Details | coinbasecartel | France | ||
| Ransomware | Lee Law Offices View Details | cmdorganization | United States | ||
| Ransomware | ******** & Co View Details | genesis | United States | ||
| Ransomware | Schacht Law Office View Details | akira | — | ||
| Ransomware | belimed.com View Details | incransom | United States | ||
| Ransomware | Peña & Bromberg View Details | genesis | United States | ||
| Ransomware | Fox Rothschild LLP View Details | SilentRansomGroup | United States | ||
| Ransomware | lawants View Details | incransom | Spain | ||
| Ransomware | northbridge.com View Details | dragonforce | Canada | ||
| Ransomware | wsm.co.uk View Details | dragonforce | United Kingdom | ||
| Ransomware | jichasa.com View Details | m3rx | Mexico | ||
| Ransomware | FWMK Law Offices View Details | dragonforce | Israel | ||
| Ransomware | qlslogistics.com.au View Details | dragonforce | Australia | ||
| Ransomware | dentonfirm.com View Details | dragonforce | United States | ||
| Ransomware | Delbrook Capital Advisors View Details | dragonforce | United States | ||
| Ransomware | Ridge Law Firm View Details | spacebears | United States | ||
| Ransomware | Gestordes View Details | spacebears | Spain | ||
| Ransomware | Sunrise, Toscana Country Club,Andalusia Country Club. View Details | akira | — | ||
| Ransomware | epbinsurance.com View Details | dragonforce | United States | ||
| Ransomware | allianceadjustment.com View Details | dragonforce | United States | ||
| Ransomware | ggroupcpas.com View Details | dragonforce | United States | ||
| Ransomware | sphvalue.com View Details | dragonforce | — | ||
| Ransomware | ennsco.ca View Details | dragonforce | Canada | ||
| Ransomware | Rawaj Consumer Finance View Details | nightspire | Egypt | ||
| Ransomware | **** & ******** View Details | genesis | United States | ||
| Ransomware | AMACCAO View Details | nova | Viet Nam | ||
| Ransomware | Exchange Group View Details | pear | Canada | ||
| Ransomware | TAURUS INVESTMENT HOLDINGS View Details | dragonforce | Cyprus | ||
| Ransomware | Elohim Law Corporation View Details | payload | Singapore | ||
| Ransomware | DFI AMERICA, LLC View Details | titan | United States | ||
| Ransomware | grupo55.com View Details | m3rx | Spain | ||
| Ransomware | PNSB Insurance Brokers Sdn Bhd View Details | qilin | Malaysia | ||
| Ransomware | Ross Yerger Insurance View Details | thegentlemen | United States | ||
| Ransomware | AdvancedHEALTH. View Details | dragonforce | United States | ||
| Ransomware | AdvancedHEALTH View Details | dragonforce | United States |