Ransomware Group intelligence
Barracuda
ActiveTrack Barracuda with 16 published victims and 3 known leak locations in a single intelligence view.
Overview
Barracuda is tracked by Dark Eye as a ransomware group with 16 published victims.
United States is currently the most targeted country in this dataset.
3 known leak locations are currently associated with this group.
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (3)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 1 | Onion service | Unknown | darkfoxaqhfpxkrbt7vxns2z2u2k72sgmqbzeorupaiottw3ecm2wgyd.onion |
| Leak location 2 | Onion service | Unknown | uvm6hk4wwstfddja5z5htgtlehmfyflffijz6iozsuqyacyibzxefkqd.onion |
| Leak location 3 | Onion service | Unknown | qr6uopkqxmq254osyct3oibil32xp3qsimkkbqdscsrsb4zqbagnifad.onion |
Top Activity Sectors
No sector intelligence available.
Ransom Notes (0)
▼No ransom notes available for this group.
Tools Used
▼No tools used available.
YARA Rules (0)
▼No YARA rules available.
Indicators of Compromise (0)
▼No IoCs available for this group.
Negotiation Chats (0)
▼No negotiation chats available.
Research Sources
No external research sources linked yet.
Victims (16)
Search, filter and paginate the victim timeline for Barracuda.
| Type | Target | Discovered | Country | Business Category | Intel Link |
|---|---|---|---|---|---|
| Ransomware | Skyline Implants & Periodontics id32035 View details | United States | Services | ||
|
skylineperio.com operates within the Services sector based in the United States, providing professional and technical services to clients. As cataloged in the threat-intelligence index, this entity is classified as a ransomware victim linked to the Barracuda threat actor. The listing reflects observed security events associated with this organization without disclosing specific breach details, data exfiltration specifics, or financial impact. This entry serves to document the relationship between skylineperio.com and Barracuda within cybersecurity threat reporting frameworks, aiding defenders in contextualizing potential risks. The description adheres strictly to verified index associations and avoids speculation regarding incident mechanics or outcomes. |
|||||
| Ransomware | Skyline Implants & Periodontics id32035 View details | United States | Services | ||
|
Full personal and servers files dumps from Skyline Implants & Periodontics company. The data files contain: medical documents of patients (including MRI scans of various parts of the body — files with the .dcm extension), personal photos, and the personal data of the doctor, Scott Ferguson, as well as documents from the company Skyline Implants & Periodontics — in particular, information on equipment and pharmaceutical procurement and other related materials. | Severity: HIGH | Size: 800 GB | Status: free | FREE |
|||||
| Ransomware | Namyang Industrial Co., Ltd. id32036 View details | Korea, Republic of | IT | ||
|
n yi.co.kr operates within the IT sector and is located in South Korea. The entity functions as a digital organization providing technology-focused services, aligning with its classification within cybersecurity threat indexing frameworks. As a ransomware victim, n yi.co.kr is documented within this threat-intelligence index due to its association with the Barracuda threat actor. This listing reflects the entity's position in incident records without disclosing unverified technical details, data specifics, or financial impact. The entry serves to catalog the relationship between the organization and the identified threat actor for analytical and defensive reference purposes. |
|||||
| Ransomware | Namyang Industrial Co., Ltd. id32036 View details | Korea, Republic of | IT | ||
|
Selling fresh full database dumps of company Namyang Industrial Co., Ltd. (renamed to Namyang Nexmo). Infrastructure dump, not website! There information about employers, manufacturing, parts, clients, partners and etc. Total lines (csv format): 17 641 181. | Severity: HIGH | Size: 2.51 GB | Status: free | FREE |
|||||
| Ransomware | Clinical Associates of the Finger Lakes (CAFL) id32037 View details | United States | Healthcare / Medicine | ||
|
clinassoc.com operates within the United States healthcare and medicine sector, providing clinical association and related healthcare services. As a healthcare organization, it handles sensitive patient and operational information, making it a relevant target within threat-intelligence monitoring frameworks. This listing identifies clinassoc.com as a ransomware victim associated with Barracuda, reflecting the entity's inclusion in cybersecurity intelligence records tied to this threat actor. The description remains factual and neutral, avoiding invented details regarding breach scope, data impact, ransom terms, or confirmed incident specifics. The record serves as a structured catalog entry for threat-intelligence analysis and sector-focused risk monitoring. |
|||||
| Ransomware | Clinical Associates of the Finger Lakes (CAFL) id32037 View details | United States | Healthcare / Medicine | ||
|
The company mishandled its clients' and employees' data, which is why it was leaked. We extracted all files and documents from the infrastructure. These documents included children's medical records, personal information of parents and employees, a full dump of all emails from the mail server, and much more. Target website: https://www.clinassoc.com/ | Severity: HIGH | Size: 447 GB | Status: selling | $1000 |
|||||
| Ransomware | VR Advogados id31727 View details | Brazil | Finance / Legal / Insurance | ||
|
VR Advogados is a law firm based in Brazil, operating in the finance and legal sector, providing a range of services to clients. As a legal services provider, VR Advogados likely handles sensitive client information. VR Advogados was listed as a ransomware victim associated with Barracuda |
|||||
| Ransomware | VR Advogados id31727 View details | Brazil | Finance / Legal / Insurance | ||
|
VR Advogados, a Brazilian law firm, neglected its clients’ personal data, violating laws regarding data storage and confidentiality—they posted and shared all of their clients’ documents, passport information, and powers of attorney via a Discord server. We hacked it. Now we have 3,000 documents belonging to all of their clients—passports, powers of attorney, declarations, personal and work-related correspondence, and more. The firm hasn’t responded to us for three days; if this continues, we’ll start selling the data. | Status: upcoming | Size: 10 GB | Starts at $30000.00 |
|||||
| Ransomware | Ferrell \ Skyline Implants & Periodontics \ Dr. Scott Ferguson id31366 View details | United States | Healthcare / Medicine | ||
|
Ferrell Skyline Implants & Periodontics, led by Dr. Scott Ferguson, is a US-based healthcare and medicine provider specializing in implants and periodontics. The practice offers various dental services, catering to patients in the US. Ferrell Skyline Implants & Periodontics operates within the healthcare sector, providing medical services to its patients. It was listed as a ransomware victim associated with Barracuda. |
|||||
| Ransomware | Ferrell \ Skyline Implants & Periodontics \ Dr. Scott Ferguson id31366 View details | United States | Healthcare / Medicine | ||
|
Full personal and servers files dumps from Skyline Implants & Periodontics company. The data files contain: medical documents of patients (including MRI scans of various parts of the body — files with the .dcm extension), personal photos, and the personal data of the doctor, Scott Ferguson, as well as documents from the company Skyline Implants & Periodontics — in particular, information on equipment and pharmaceutical procurement and other related materials. | Status: free | Size: 800 GB | Now free |
|||||
| Ransomware | Micro-Comm Inc. id31353 View details | United States | IT | ||
|
Micro-comm.com is an IT company based in the US, offering various services within the information technology sector. As a US-based entity, micro-comm.com operates within the IT industry, providing services to its clients. Micro-comm.com was listed as a ransomware victim associated with Barracuda. |
|||||
| Ransomware | Micro-Comm Inc. id31353 View details | United States | IT | ||
|
Micro-Comm, Inc. is an industrial automation company based in Olathe, Kansas, that provides water and wastewater control systems, manufacturing control panels, micro-controllers, and SCADA software. [http://www.micro-comm-inc.com]. Tree of all files: https://www.filemail.com/d/vpqdvykqwssupsw. Files count: 894 963, documents type: maps, schemes, personal employers information, personal citizens information, work photos, emails, partners personal information | Status: selling | Size: 643 GB | Starting at $30000.00 |
|||||
| Ransomware | Namyang Industrial Co., Ltd. \ NAMYANG NEXMO id31354 View details | Korea, Republic of | Telecommunications | ||
|
Nynexmo.com is a telecommunications company based in Korea, offering various services in the sector. The company operates in the telecommunications industry, providing essential services. Nynexmo.com was listed as a ransomware victim associated with Barracuda |
|||||
| Ransomware | Namyang Industrial Co., Ltd. \ NAMYANG NEXMO id31354 View details | Korea, Republic of | Telecommunications | ||
|
Selling fresh full database dumps of company Namyang Industrial Co., Ltd. (renamed to Namyang Nexmo). Infrastructure dump, not website! There information about employers, manufacturing, parts, clients, partners and etc. Total lines (csv format): 17 641 181. | Status: selling | Size: 2.51 GB | Starting at $40000.00 |
|||||
| Ransomware | RS Automation Co., Ltd. id31355 View details | China | Manufacturing / Engineering | ||
|
Cable-peeler.com is a company operating in the manufacturing and engineering sector, based in China. The company likely provides products or services related to cable peeling, a process used in various industrial applications. Cable-peeler.com was listed as a ransomware victim associated with Barracuda |
|||||
| Ransomware | RS Automation Co., Ltd. id31355 View details | China | Manufacturing / Engineering | ||
|
Full dump of all files from the servers and developers personal files and NAS. Legal documents, letters, drawings, assembly, C, and C++ source codes. Official manufacturer website: rsautomation.co.kr | Status: upcoming | Size: 637 GB | Starts at $50000.00 |
|||||