Ransomware Group intelligence

Bianlian

Inactive

Track Bianlian with 558 published victims and 3 known leak locations in a single intelligence view.

DARK EYE ALERTS

Want an alert every time a new ransomware post is published?

Choose the feeds and the countries you care about — we email you when they move.

Victims 558 Known published victims in this dataset

First discovered 2022-07-14 Earliest victim discovery date

Last discovered 2025-03-31 Latest victim discovery date

Inactive since 579 days Days since the latest known victim

Top country United States 167 victims

Known locations 3 Leak or negotiation infrastructure tracked

Bianlian is tracked by Dark Eye as a ransomware group with 558 published victims.

United States is currently the most targeted country in this dataset.

3 known leak locations are currently associated with this group.

558

Leaked 1 0.2%
Pending 557 99.8%
Deleted 0 0.0%

Top Countries

Distribution

Label	Type	Availability	Links
Leak location 2	Onion service	Down checked 1h ago	`bianlivemqbawcco4cx4a672k2fip3guyxudzurfqvdszafam3ofqgqd.onion`
Leak location 3	Onion service	Down checked 1h ago	`bianliaoxoeriowgqohcly4a6sbkpc3se2yvxgidxomxlpuhx5ehrpad.onion`
Leak location 1	Onion service	Down checked 1h ago	`bianlianlbc5an4kgnay3opdemgcryg2kpfcbgczopmm3dnbz3uaunad.onion`

Communication / Marketing 88
Healthcare / Pharma 75
Services 69
Finance / Legal / Insurance 66
Not identified 59
Construction / Real Estate 44
Manufacturing / Engineering 33
IT 26
Transportation / Travel / Logistics 22
Education 20
Energy 11
Hospitality / Food & Beverage / Tourism 9
Public Sector 8
Retail / E-commerce 8
Telecommunications 5
Agriculture / Food 4
NGOs / Associations 2

Typical Attacks (10)

▼

MITRE ATT&CK does not currently catalogue Bianlian, so this is our assessment of the techniques it uses, drawn from public reporting. The techniques themselves, and every "what that means" definition below, come from MITRE ATT&CK v20.0. Confidence: medium. Treat it as orientation, not attribution.

T1059.001 PowerShell Execution

What they do: bianlian uses PowerShell scripts to execute malicious commands and deploy ransomware payloads across compromised systems.

What that means: Adversaries may abuse PowerShell commands and scripts for execution.
T1547.001 Registry Run Keys / Startup Folder PersistencePrivilege Escalation

What they do: bianlian modifies registry run keys to ensure ransomware reactivation after system reboots for persistence.

What that means: Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key.
T1685 Disable or Modify Tools Defense Impairment

What they do: bianlian disables antivirus tools and security software to evade detection during initial compromise and execution.

What that means: Adversaries may disable, degrade, or tamper with security tools or applications (e.g., endpoint detection and response (EDR) tools, intrusion detection systems (IDS), antivirus, logging agents, sensors, etc.) to impair or reduce visibility of defensive capabilities.
T1070.004 File Deletion Stealth

What they do: bianlian deletes Volume Shadow Copies and backup directories via command-line tools to prevent data recovery.

What that means: Adversaries may delete files left behind by the actions of their intrusion activity.
T1018 Remote System Discovery Discovery

What they do: bianlian uses remote system discovery to map victim infrastructure and identify high-value targets for encryption.

What that means: Adversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for Lateral Movement from the current system.
T1049 System Network Connections Discovery Discovery

What they do: bianlian queries system network connections to identify active services and communication paths for exfiltration or command channels.

What that means: Adversaries may attempt to get a listing of network connections to or from the compromised system they are currently accessing or from remote systems by querying for information over the network.
T1135 Network Share Discovery Discovery

What they do: bianlian performs network share discovery to identify victim file shares and target data for encryption.

What that means: Adversaries may look for folders and drives shared on remote systems as a means of identifying sources of information to gather as a precursor for Collection and to identify potential systems of interest for Lateral Movement.
T1021.002 SMB/Windows Admin Shares Lateral Movement

What they do: bianlian exploits SMB/Windows Admin Shares to move laterally within victim networks to additional hosts.

What that means: Adversaries may use Valid Accounts to interact with a remote network share using Server Message Block (SMB).
T1567.002 Exfiltration to Cloud Storage Exfiltration

What they do: bianlian exfiltrates stolen data using encrypted channels to enable double extortion against victims.

What that means: Adversaries may exfiltrate data to a cloud storage service rather than over their primary command and control channel.
T1486 Data Encrypted for Impact Impact

What they do: bianlian encrypts victim files using custom ransomware binaries to maximize impact and pressure for payment.

What that means: Adversaries may encrypt data on target systems or on large numbers of systems in a network to interrupt availability to system and network resources.

Tools Observed (29)

▼

Software Bianlian has been seen using, grouped by what it is used for. Legitimate administration tools appear here because these actors routinely abuse them — presence in this list is not itself malicious.

Credential theft

RDP Recognizer

Discovery

Advanced IP Scanner PingCastle SharpShares SoftPerfect NetScan WKTools

Discovery & enumeration

Advanced IP Scanner Advanced Port Scanner PingCastle SharpShares SoftPerfect NetScan WKTools

Exfiltration

MEGA RClone

LOLBAS (living-off-the-land binaries)

PsExec

OffSec

Impacket

Offensive security tooling

Impacket

RMM Tools

AmmyyAdmin AnyDesk Atera ScreenConnect Splashtop TeamViewer

Remote monitoring & management

AnyDesk AmmyyAdmin Atera ScreenConnect Splashtop TeamViewer

Tool data from Ransomware Tool Matrix by BushidoUK, licensed CC BY 4.0. Grouped by purpose and matched to this group by Dark Eye.

Ransom Notes (1)

▼

The note this group leaves on a compromised machine. Click a filename to read it.

Look at this instruction.txt txt · 1053 chars

Your network systems were attacked and encrypted. Contact us in order to restore your data. Don't make any changes in your file structure: touch no files, don't try to recover by yourself, that may lead to it's complete loss.

To contact us you have to download "tox" messenger: https://qtox.github.io/

Add user with the following ID to get your instructions:
A4B3B0845DA242A64BF17E0DB4278EDF85855739667D3E2AE8B89D5439015F07E81D12D767FC

Alternative way: [email protected]

Your ID: [snip]

You should know that we have been downloading data from your network for a significant time before the attack: financial, client, business, post, technical and personal files.
In 10 days - it will be posted at our site http://bianlianlbc5an4kgnay3opdemgcryg2kpfcbgczopmm3dnbz3uaunad.onion / http://bianlivemqbawcco4cx4a672k2fip3guyxudzurfqvdszafam3ofqgqd.onion with links send to your clients, partners, competitors and news agencies, that will lead to a negative impact on your company: potential financial, business and reputational loses.
   ---!!!---

View on RansomLook

Ransom-note text from RansomLook, licensed CC BY 4.0.

Victims (558)

Search, filter and paginate the victim timeline for Bianlian. Showing 301–400 of 558.

Type	Target	Discovered	Country	Business Category	Intel Link	Leak status
Ransomware	A ************ id7142 View details	2023-07-06	India	Construction / Real Estate		pending
Indian real estate company. ID 7142
Ransomware	** I**** ******* id7111 View details	2023-07-03	—	Finance / Legal / Insurance		pending
Insurance company. ID 7111
Ransomware	l* C********* id7092 View details	2023-07-01	—	Construction / Real Estate		pending
Company a full service heavy highway construction. ID 7092
Ransomware	Kondratoff Persick LLP id7091 View details	2023-07-01	—	Finance / Legal / Insurance		pending
Kondratoff Persick LLP is Yorkton and area’s largest law firm, boasting 9 lawyers. ID 7091
Ransomware	Undisclosed Staffing Company id7090 View details	2023-07-01	—	Services		pending
Staffing solutions. ID 7090
Ransomware	Arab Shipbuilding and Repair Yard id7047 View details	2023-06-28	Bahrain	Construction / Real Estate		pending
ASRY (Arab Shipbuilding & Repair Yard) is the Arabian Gulf's leading maritime repair and fabrication facility. Founded in 1977 in Bahrain, the multi-service yard operates in four sectors which combined cover all types of vessel repair. ID 7047
Ransomware	Misr Life Insurance id7046 View details	2023-06-28	—	Finance / Legal / Insurance		pending
Misr LIfe is a company that operates in the Insurance industry. It employs 501-1,000 people and has $123M of revenue. ID 7046
Ransomware	N ******* ****** id7045 View details	2023-06-28	—	Healthcare / Pharma		pending
Healthcare organization, USA. ID 7045
Ransomware	Piramal Group id7044 View details	2023-06-28	—	Healthcare / Pharma		pending
Piramal Enterprises is a global business conglomerate with a diverse interest in Pharma, Financial Services, Healthcare Information Management, Real Estate and Glass Packaging. ID 7044
Ransomware	Hiberus Tecnología id7022 View details	2023-06-26	Spain	IT		pending
The leading technology services company in the Northeast of Spain specialised in business and technology consulting. ID 7022
Ransomware	** H** id7005 View details	2023-06-23	—	Communication / Marketing		pending
Company is one of the oldest and most storied names in the musical products industry. ID 7005
Ransomware	i** *** id7004 View details	2023-06-23	—	Healthcare / Pharma		pending
Company is a global business conglomerate with a diverse interest in Pharma, Financial Services, Healthcare Information Management, etc.. ID 7004
Ransomware	American Crane Rental id7003 View details	2023-06-23	—	Manufacturing / Engineering		pending
Company operates in truck & crane rental Industry, 15 ton to 350 ton hydraulic cranes bare boom truck rental, standard mount to swing cabs machinery relocation, and other transportation vehicles. ID 7003
Ransomware	BGFIBank Group id6967 View details	2023-06-21	—	Finance / Legal / Insurance		pending
BGFIBank Group is a large financial services conglomerate in Central, West and East Africa, with subsidiaries in ten countries. The member institutions serve both individuals and businesses, with emphasis on small-to-medium enterprises. ID 6967
Ransomware	T* * *****t .. id6966** View details	2023-06-21	—	Telecommunications		pending
The telecommunications firm that produces solutions such as optical cards, fiber optic cables, and antennas. ID 6966
Ransomware	The Sullivan Group of Court Reporters id6965 View details	2023-06-21	—	Services		pending
The company that has experience in every type of litigation. ID 6965
Ransomware	K***** *** * id6840** View details	2023-06-13	Canada	Finance / Legal / Insurance		pending
Large law firm based in Canada. ID 6840
Ransomware	ir* el** id6839 View details	2023-06-13	Spain	IT		pending
The leading technology services company in the Northeast of Spain specialised in business and technology consulting. ID 6839
Ransomware	A*** * ** id6797 View details	2023-06-09	—	Other		pending
Operated truck & crane rental company. ID 6797
Ransomware	* **** * u e******* id6789 View details	2023-06-08	—	Other		pending
The company that has experience in every type of litigation. ID 6789
Ransomware	Aeliusmd Medical Systems id6788 View details	2023-06-08	—	Healthcare / Pharma		pending
AeliusMD offers the tools to assist companies and individuals to meet their needs for occupational and environmental health and wellness over a broad time spectrum. ID 6788
Ransomware	M* ** id6787 View details	2023-06-08	—	Finance / Legal / Insurance		pending
Company that operates in the Insurance industry. It employs 501-1,000 people and has $100M-$250M of revenue. ID 6787
Ransomware	Aarti Industries Ltd. id6698 View details	2023-06-01	—	Healthcare / Pharma		pending
The company manufactures chemicals that are used in the downstream manufacture of pharmaceuticals, agrochemicals, polymers, additives, surfactants, pigments, dyes, and more. ID 6698
Ransomware	EDG, Inc id6697 View details	2023-06-01	—	Communication / Marketing		pending
The company that provides engineering solutions and project service solutions. ID 6697
Ransomware	Chadwick, Washington, Moriarty, Elmore & Bunn id6696 View details	2023-06-01	Chad	Finance / Legal / Insurance		pending
Chadwick Washington's attorneys work with community managers to help establish and promote efficient working relationships with association boards. ID 6696
Ransomware	Handok Inc. id6695 View details	2023-06-01	—	Healthcare / Pharma		pending
An integrated pharmaceutical company providing drugs, medical devices, and in-vitro diagnostics instruments and devices. ID 6695
Ransomware	Laebon Homes id6694 View details	2023-06-01	—	Communication / Marketing		pending
Laebon Rental Communities provides affordable apartments and town homes to residents of Central Alberta. Properties are located in Red Deer, Sylvan Lake, Penhold & Lacombe. ID 6694
Ransomware	TY Inc id6693 View details	2023-06-01	—	Services		pending
Ty Inc is a manufacturer and seller of stuffed animal toys. The company is headquartered in Oak Brook. ID 6693
Ransomware	C***** *********** id6672 View details	2023-05-29	—	Healthcare / Pharma		pending
A pharmaceutical company that acquires, develops, and commercializes branded prescription products. ID 6672
Ransomware	Earlens Corporation id6671 View details	2023-05-29	—	Healthcare / Pharma		pending
USA medical technology company that develops hearing solutions. ID 6671
Ransomware	Neutronic Stamping id6670 View details	2023-05-29	—	Other		pending
Neutronic Stamping and Plating manufactures high quality electronic contacts, pins, and lead-frames in our two plants located in Fountain Valley, CA. ID 6670
Ransomware	******MD id6657 View details	2023-05-27	—	Communication / Marketing		pending
The company helping business reduce injuries, lower costs and promote a safe workplace, and providing with the highest quality software systems and unparalleled customer service. ID 6657
Ransomware	**G Inc. id6656 View details	2023-05-27	—	Communication / Marketing		pending
The company that provides engineering solutions and project service solutions. ID 6656
Ransomware	a I******* id6655 View details	2023-05-27	—	Healthcare / Pharma		pending
The company manufactures chemicals that are used in the downstream manufacture of pharmaceuticals, agrochemicals, polymers, additives, surfactants, pigments, dyes, and more. ID 6655
Ransomware	H** e* V*** i Project id6654 View details	2023-05-27	—	Communication / Marketing		pending
The energy industry’s premier analytical source for energy information. ID 6654
Ransomware	M*** * id6625 View details	2023-05-24	—	Construction / Real Estate		pending
Company that fabricates reinforcement steel for concrete construction of bridges, roads, and buildings. ID 6625
Ransomware	H* id6594 View details	2023-05-23	—	Healthcare / Pharma		pending
An integrated pharmaceutical company providing drugs, medical devices, and in-vitro diagnostics instruments and devices. ID 6594
Ransomware	Rusan Pharma id6593 View details	2023-05-23	—	Healthcare / Pharma		pending
Global pharmaceutical company. ID 6593
Ransomware	T * id6507 View details	2023-05-22	—	Other		pending
Manufacturer and seller of toys. ID 6507
Ransomware	Alconex Specialty Products id6506 View details	2023-05-22	—	Communication / Marketing		pending
The company that produces and supplies magnet wire for manufacturers globally. ID 6506
Ransomware	H** id6505 View details	2023-05-22	—	Communication / Marketing		pending
Highway and security turnkey solutions provider. ID 6505
Ransomware	Zoni Language Centers id6504 View details	2023-05-22	—	Education		pending
Zoni is one of the leaders in international language and College placement education. ID 6504
Ransomware	a** *** id6459 View details	2023-05-18	Canada	Communication / Marketing		pending
Company provides affordable apartments and town homes to residents of Canada. ID 6459
Ransomware	ENSA - Seguros de Angola id6458 View details	2023-05-18	Angola	NGOs / Associations		pending
The insurance company created in 1978 to support customers with risk protection solutions, promoting individual and corporate life value, monetizing shareholder value, with social responsibility. ID 6458
Ransomware	Z* ****** **s id6457 View details	2023-05-18	—	Education		pending
This is one of the leaders in international language and College placement education. ID 6457
Ransomware	Vascular Center of Intervention id6420 View details	2023-05-11	—	Healthcare / Pharma		pending
Vascular Center of Intervention is a company that operates in the Hospital & Health Care industry. It employs 6-10 people and has $0M-$1M of revenue. The company is headquartered in Fresno, California. ID 6420
Ransomware	A** ***** o*** id6419 View details	2023-05-11	—	Communication / Marketing		pending
The company that produces and supplies magnet wire for manufacturers globally. ID 6419
Ransomware	Albany ENT & Allergy Services id6418 View details	2023-05-11	—	Services		pending
Albany ENT & Allergy Services is a comprehensive practice devoted to the care of adults and children with disorders of the ear, nose, throat, head and neck. Clinic has a particular interest in allergy diagnosis and immunotherapy as well as sleep disorders, etc.. ID 6418
Ransomware	B&R Eckel's Transport id6417 View details	2023-05-11	—	Transportation / Travel / Logistics		pending
Founded in 1965, B&R Eckel's Transport provides daily freight services, rig moving, heavy oil field trucking, pipe storage yards, highway trucking, tank moving, oil field trucking, bulk trucking, pickers, cranes up to 50 tons, trailer rentals, warehousing, etc.. ID 6417
Ransomware	DA Alexander Company INC id6416 View details	2023-05-11	—	Communication / Marketing		pending
The company provides high quality landscape design, installation and maintenance services for residential, commercial and industrial properties. ID 6416
Ransomware	Hermes Medical Solutions id6415 View details	2023-05-11	—	Healthcare / Pharma		pending
HMS delivers a complete Molecular Imaging Software Suite to visualize, process, analyze, report and archive imaging data from multiple modalities and devices. ID 6415
Ransomware	North Shore Medical Labs id6414 View details	2023-05-11	—	Healthcare / Pharma		pending
North Shore Medical Labs (NSML) is a full-service clinical reference laboratory, dedicated to serve the individual needs of the healthcare provider through a committed staff, client focused and service oriented organization. NSML is fully accredited and licensed by the College of American Pathologists (CAP), New York State Department of Health, the Center for Medicare and Medicaid Services (CLIA). ID 6414
Ransomware	Altstadt Hoffman Plumbing id6387 View details	2023-05-09	—	Services		pending
Altstadt Hoffman Plumbing’s highly trained licensed Evansville tri-state plumbers offer a variety of fast, reliable plumbing services for your home or business. Altstadt Hoffman Plumbing offers quality service and specialize in new construction, commercial, industrial, residential, remodeling, and emergency repairs. ID 6387
Ransomware	Bedford Lodge Hotel id6386 View details	2023-05-09	United Kingdom	Hospitality / Food & Beverage / Tourism		pending
Perfectly situated Bedford Lodge Hotel & Spa is just a stone's throw from historic Bury St Edmunds, Cambridge and Ely, making it an ideal base to explore. ID 6386
Ransomware	CADOpt Technologies id6385 View details	2023-05-09	—	IT		pending
Company providing Engineering Services and Solutions, mainly in the areas of CAD (Computer Aided Design), CAM (Computer Aided Manufacturing), CAE (Computer Aided Engineering). ID 6385
Ransomware	Commerce Pundit id6384 View details	2023-05-09	—	Retail / E-commerce		pending
Internet Service Providers, Website Hosting & Internet-related Services. ID 6384
Ransomware	Deer Lakes School District id6383 View details	2023-05-09	—	Education		pending
The Deer Lakes School District is a small, suburban, K-12 public school district near Pittsburgh which covers East Deer, Frazer, and West Deer townships in Allegheny County, Pennsylvania. Deer Lakes School District encompasses approximately 41 square miles. ID 6383
Ransomware	Department of Education of the Canton of Basel-Stadt id6382 View details	2023-05-09	Switzerland	Public Sector		pending
The Department of Education is the largest of the seven departments of the canton of Basel-Stadt. It employs around 7000 people in over 200 professions and has a budget of around one billion francs. ID 6382
Ransomware	Entelect id6381 View details	2023-05-09	South Africa	Services		pending
IT Services & Custom Software engineering and solutions company since 2001. ID 6381
Ransomware	Greenslade Taylor Hunt id6380 View details	2023-05-09	—	Construction / Real Estate		pending
GTH is one of the longest established firms of chartered surveyors, auctioneers, property specialists and letting agents in the West Country. ID 6380
Ransomware	Humana id6379 View details	2023-05-09	Sweden	Construction / Real Estate		pending
Humana is a leading Nordic care company providing services within individual and family care, personal assistance, elderly care and special service housing in accordance with LSS. ID 6379
Ransomware	IDEM Safety Switches id6378 View details	2023-05-09	—	Communication / Marketing		pending
The company offers a diverse range of products covering all aspects of the human-machine interface. ID 6378
Ransomware	B ***** ***** id6357 View details	2023-05-05	—	Transportation / Travel / Logistics		pending
Transportation company that provides daily freight services, heavy oil field trucking, pipe storage yards, highway trucking, etc.. ID 6357
Ransomware	C*** ****** id6356 View details	2023-05-05	—	Finance / Legal / Insurance		pending
Lawyer firm that supports cooperative interaction between managing agents and community associations. ID 6356
Ransomware	M******* *** ** id6355 View details	2023-05-05	—	Healthcare / Pharma		pending
Physician-owned multispecialty clinic. It has over 30,000 patients per month. ID 6355
Ransomware	N**** **** id6354 View details	2023-05-05	—	Manufacturing / Engineering		pending
Company that manufactures high quality electronic contacts, lead-frames for the Automotive, Consumer Electronics, Telecom and Defense industries. ID 6354
Ransomware	R ** id6352 View details	2023-05-05	—	Healthcare / Pharma		pending
Global pharmaceutical company. ID 6352
Ransomware	.A. ****** & ***, *. id6300 View details	2023-05-01	—	Communication / Marketing		pending
The company provides high quality landscape design, installation and maintenance services for residential, commercial and industrial properties. ID 6300
Ransomware	A ********* id6287 View details	2023-04-28	—	Other		pending
Company is a leading, service-oriented international moving and storage company with offices located throughout the world." ID 6287
Ransomware	E* - ***** **** id6286 View details	2023-04-28	—	Communication / Marketing		pending
The insurance company created in 1978 to support customers with risk protection solutions, promoting individual and corporate life value, monetizing shareholder value, with social responsibility. ID 6286
Ransomware	H* *** S*** id6285 View details	2023-04-28	—	Communication / Marketing		pending
Provider of software and scanning devices for molecular imaging and radiology ID 6285
Ransomware	P***** ***** e* id6284 View details	2023-04-28	—	Healthcare / Pharma		pending
Hospitals & Physicians Clinics that enhance dramatically the health and wellness of the community. ID 6284
Ransomware	Manufacturing id6241 View details	2023-04-25	—	Manufacturing / Engineering	—	pending
No additional victim description available. ID 6241
Ransomware	Bilstein GmbH id6239 View details	2023-04-25	Germany	Manufacturing / Engineering		pending
Family-run and independent specialist for automotive replacement parts based in Germany. ID 6239
Ransomware	Falcon Express Transportation, Inc. id6238 View details	2023-04-25	—	Transportation / Travel / Logistics		pending
Falcon is a full-service courier, delivery, transportation, and logistics company headquartered in Beltsville, Maryland. ID 6238
Ransomware	General Plug & Manufacturing id6237 View details	2023-04-25	—	Manufacturing / Engineering		pending
General Plug and Manufacturing is a primary manufacturer of pipe plugs, reducer bushings, and special screw machine parts supplied to leading manufacturers and distributors in the automotive, pipe/valve/fitting, electrical, and fastener industries. ID 6237
Ransomware	GROUPE ETIC id6236 View details	2023-04-25	—	Services		pending
Group ETIC provids services to companies in the following fields: Outsourced reception services, remote surveillance, customer relationship center, call center platform based in Marseille, training and audit. ID 6236
Ransomware	XPress Cargo id6235 View details	2023-04-25	—	Transportation / Travel / Logistics		pending
Freight Moving Solutions by XPress Cargo, Inc. ID 6235
Ransomware	A* * * ***** S*** id6234 View details	2023-04-25	United States	Healthcare / Pharma		pending
Company is part of the Hospitals & Physicians Clinics industry, located in United States. It has a particular interest in allergy diagnosis and immunotherapy, sleep disorders, etc.. ID 6234
Ransomware	*** * M** ** id6184 View details	2023-04-19	—	Healthcare / Pharma		pending
A full-service clinical reference laboratory, a healthcare provider, fully accredited and licensed by the College of American Pathologists (CAP). ID 6184
Ransomware	A*** *** **** id6183 View details	2023-04-19	—	Construction / Real Estate		pending
The company that operates in the Commercial & Residential Construction industry. ID 6183
Ransomware	B** * * id6182 View details	2023-04-19	—	Healthcare / Pharma		pending
Hospitality General & Spa. ID 6182
Ransomware	C* ******** *** id6181 View details	2023-04-19	—	Manufacturing / Engineering		pending
Company providing Engineering Services and Solutions, mainly in the areas of CAD (Computer Aided Design), CAM (Computer Aided Manufacturing), CAE (Computer Aided Engineering). ID 6181
Ransomware	C*** N* id6180 View details	2023-04-19	—	Communication / Marketing		pending
Internet Service Providers, Website Hosting & Internet-related Services. ID 6180
Ransomware	D* *** S* **** id6179 View details	2023-04-19	—	Education		pending
Small, suburban, K-12 public school district. ID 6179
Ransomware	E** ******* id6178 View details	2023-04-19	—	Healthcare / Pharma		pending
A privately held medical technology company that has developed hearing solutions. ID 6178
Ransomware	E*** id6177 View details	2023-04-19	—	Services		pending
IT Services & Custom Software engineering and solutions company since 2001. ID 6177
Ransomware	G***** ** id6176 View details	2023-04-19	—	Construction / Real Estate		pending
The Real Estate company since 1843. ID 6176
Ransomware	H* * id6175 View details	2023-04-19	—	Communication / Marketing		pending
Leading care company providing services within individual and family care. ID 6175
Ransomware	Co. and Nobiskrug Yachts GmbH id6122 View details	2023-04-13	—	Other	—	pending
No additional victim description available. ID 6122
Ransomware	Aerowind id6121 View details	2023-04-13	—	Energy		pending
Aerowind Corp is a company that operates in the Airlines/Aviation industry. It employs 21-50 people and has $5M-$10M of revenue. The company is headquartered in El Cajon, California. ID 6121
Ransomware	Capstan Atlantic id6120 View details	2023-04-13	—	Communication / Marketing		pending
Capstan Atlantic is a leading producer of precision Powdered Metal Gears, Sprockets and complex Structural Components. ID 6120
Ransomware	Faps id6119 View details	2023-04-13	—	Communication / Marketing		pending
FAPS, Inc., originally known as Foreign Automotive Preparation Service, is a third generation company established in Port Newark, NJ in 1956 by John A. LoBue. The pre-delivery company has been providing the Automotive Industry Import/Export preparation services. ID 6119
Ransomware	Southeastern University id6118 View details	2023-04-13	—	Education		pending
Southeastern Louisiana University. The state's third-largest public university, boasting nearly 15,000 students and more than 150 programs of study. ID 6118
Ransomware	Tennessee State University id6117 View details	2023-04-13	—	Public Sector		pending
Tennessee State University (Tennessee State, Tenn State, or TSU) is a public historically black land-grant university in Nashville, Tennessee. ID 6117
Ransomware	Encompass Technologies id6116 View details	2023-04-13	—	IT		pending
Cloud-native ERP, CRM, eCommerce, & data-driven insights for the beverage industry. At Encompass, we’re revolutionizing the beverage supply chain as no other provider has before. By digitally connecting producers, distributors, and retailers, our ERP SaaS and technology solutions streamline operations, simplify decision-making, and equip businesses for success in a fast-changing market. ID 6116
Ransomware	IDEXX id6115 View details	2023-04-13	—	Agriculture / Food		pending
IDEXX Laboratories, Inc. is an American multinational corporation engaged in the development, manufacture, and distribution of products and services for the companion animal veterinary, livestock and poultry, water testing, and dairy markets. ID 6115
Ransomware	Retina and Vitreous of Texas id6114 View details	2023-04-13	—	Healthcare / Pharma		pending
Retina Vitreous Associates is a specialty ophthalmology practice devoted to diseases and surgery of the retina and vitreous. Our primary office is located in the Texas Medical Center adjacent to Park Plaza Hospital. ID 6114
Ransomware	Flensburger Schiffbau Gesellschaft mbH and Co. and Nobiskrug Yachts GmbH id6093 View details	2023-04-11	—	Other	—	pending
No additional victim description available. ID 6093
Ransomware	Lawadami id6090 View details	2023-04-11	—	Finance / Legal / Insurance		pending
No additional victim description available. ID 6090