Ransomware Group intelligence
Metaencryptor
ActiveTrack Metaencryptor with 109 published victims and 2 known leak locations in a single intelligence view.
DARK EYE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Overview
Metaencryptor is tracked by Dark Eye as a ransomware group with 109 published victims.
United States is currently the most targeted country in this dataset.
2 known leak locations are currently associated with this group.
Leak Status Distribution
108
- Leaked 19 17.6%
- Pending 89 82.4%
- Deleted 0 0.0%
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (2)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 1 | Onion service | Up checked 5h ago | metacrptmytukkj7ajwjovdpjqzd7esg5v3sg344uzhigagpezcqlpyd.onion |
| Leak location 2 | Onion service | Up checked 5h ago | metacrpttdfpbm4qoxzcrqqgr6e6zafpazgxm72knmujw2mwvi34rwad.onion |
Top Activity Sectors (13)
Typical Attacks (10)
▼MITRE ATT&CK does not currently catalogue Metaencryptor, so this is our assessment of the techniques it uses, drawn from public reporting. The techniques themselves, and every "what that means" definition below, come from MITRE ATT&CK v20.0. Confidence: medium. Treat it as orientation, not attribution.
-
T1059.001 PowerShell Execution
What they do: metaencryptor uses PowerShell scripts to execute payload deployment and system modifications on compromised hosts.
What that means: Adversaries may abuse PowerShell commands and scripts for execution.
-
T1106 Native API Execution
What they do: metaencryptor leverages native API calls to interact with Windows services and evade behavioral detection.
What that means: Adversaries may interact with the native OS application programming interface (API) to execute behaviors.
-
What they do: metaencryptor modifies Windows Registry Run Keys to ensure malware persistence across reboots.
What that means: Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key.
-
T1685 Disable or Modify Tools Defense Impairment
What they do: metaencryptor disables antivirus tools and security software using registry modifications and service termination commands.
What that means: Adversaries may disable, degrade, or tamper with security tools or applications (e.g., endpoint detection and response (EDR) tools, intrusion detection systems (IDS), antivirus, logging agents, sensors, etc.) to impair or reduce visibility of defensive capabilities.
-
T1027.016 Junk Code Insertion Stealth
What they do: metaencryptor inserts junk code into legitimate binaries to evade static analysis and detection.
What that means: Adversaries may use junk code / dead code to obfuscate a malware’s functionality.
-
T1070.004 File Deletion Stealth
What they do: metaencryptor deletes Volume Shadow Copies and backup directories via command-line utilities to prevent recovery.
What that means: Adversaries may delete files left behind by the actions of their intrusion activity.
-
T1021.002 SMB/Windows Admin Shares Lateral Movement
What they do: metaencryptor moves laterally through SMB/Windows Admin Shares to access additional networked systems.
What that means: Adversaries may use Valid Accounts to interact with a remote network share using Server Message Block (SMB).
-
T1560.001 Archive via Utility Collection
What they do: metaencryptor archives stolen data using utility tools prior to exfiltration for extortion leverage.
What that means: Adversaries may use utilities to compress and/or encrypt collected data prior to exfiltration.
-
T1486 Data Encrypted for Impact Impact
What they do: metaencryptor encrypts victim files using symmetric encryption algorithms targeting critical business data.
What that means: Adversaries may encrypt data on target systems or on large numbers of systems in a network to interrupt availability to system and network resources.
-
T1490 Inhibit System Recovery Impact
What they do: metaencryptor calls system shutdown commands to inhibit recovery processes and maximize disruption.
What that means: Adversaries may delete or remove built-in data and turn off services designed to aid in the recovery of a corrupted system to prevent recovery.
Victims (109)
Search, filter and paginate the victim timeline for Metaencryptor. Showing 1–100 of 109.
| Type | Target | Discovered | Country | Business Category | Intel Link | Leak status |
|---|---|---|---|---|---|---|
| Ransomware | Münchner Verlagsgruppe GmbH id34267 | Germany | Other | pending | ||
|
Münchner Verlagsgruppe GmbH NEW Münchner Verlagsgruppe GmbH is a company that operates in the Publishing industry. It has $36M of revenue. The company is headquartered in Munich, Bavaria, Germany. Data size 0 Country Germany Deadline 00 d : 00 h : 00 m : 00 s 3 years ago Files |
||||||
| Ransomware | Schwälbchen Molkerei AG id34266 | Germany | Communication / Marketing | pending | ||
|
Schwälbchen Molkerei AG NEW Schwälbchen Molkerei AG is a company that operates in the Consumer Services industry. It is a German manufacturer and wholesaler of dairy products. It operates in two business segments: milk production and merchandise. The Company's range of products includes fresh milk, homogenized milk, cream and yogurt, butter, cheese manufactures as well as curd, among others. The company is headquartered in Bad Schwalbach, Hessen, Germany. Revenue: $211M Year 2022 Data size 0 Country Germany Deadline 00 d : 00 h : 00 m : 00 s 3 years ago Files |
||||||
| Ransomware | Heilmann Gruppe id34265 | Germany | Transportation / Travel / Logistics | pending | ||
|
Heilmann Gruppe NEW Heilmann Gruppe. The purchase and sale of potatoes and onions, as well as all related activities not subject to authorisation. The following companies belong to Heilmann Gruppe: Heilmann AG, Agricola, Heilmann Logistics. Revenue: $134M Year 2021 Data size 0 Country Germany Deadline 00 d : 00 h : 00 m : 00 s 1 day ago Files |
||||||
| Ransomware | ICON Creative Studio id34264 | United States | Communication / Marketing | pending | ||
|
ICON Creative Studio NEW ICON Creative Studio is Canada’s largest independently owned CG Animation Studio, located in the historic Gastown district of Vancouver, BC Canada, housing over 950 talented creatives ranging from design, storyboarding, modeling, rigging, animation, shot finaling, lighting, visual effects and compositing artists alongside creative and management teams.Revenue: $410M Data size 0 Country Canada Deadline 00 d : 00 h : 00 m : 00 s 3 years ago Files |
||||||
| Ransomware | CVO Antwerpen id34263 | Belgium | Education | pending | ||
|
CVO Antwerpen NEW Education for adults.Revenue: $72M Data size 0 Country Belgium Deadline 00 d : 00 h : 00 m : 00 s 3 years ago Files |
||||||
| Ransomware | Autohaus Ebert GmbH id34262 | Germany | Telecommunications | pending | ||
|
Autohaus Ebert GmbH NEW Autohaus Ebert GmbH & Co.KG has been there for its customers for more than 120 years. At 12 locations around the Weinheim headquarters, the company offers a wide range of new and used cars as well as commercial vehicles. In addition, Autohaus Ebert GmbH & Co.KG offers comprehensive services related to automobiles. Revenue: $200M Data size 0 Country Germany Deadline 00 d : 00 h : 00 m : 00 s 3 years ago Files |
||||||
| Ransomware | Kraiburg Austria GmbH id34261 | Austria | Communication / Marketing | pending | ||
|
Kraiburg Austria GmbH NEW Kraiburg Austria GmbH Lösungen für die Reifenrunderneuerung. Bei KRAIBURG Retreading Materials vereinen wir über 70 Jahre Erfahrung im Umgang mit Compounding mit einer qualitätsorientierten Unternehmenspolitik – unsere Basis für beste Produkte und zufriedene Kunden.Revenue: $76M Year 2021 Data size 0 Country Austria Deadline 00 d : 00 h : 00 m : 00 s 3 years ago Files |
||||||
| Ransomware | Seoul Semiconductor id34260 | Korea, Republic of | Manufacturing / Engineering | pending | ||
|
Seoul Semiconductor NEW Seoul Semiconductor is the top LED manufacturing company in Korea and No. 3 in the world. Over the past 30 years, Seoul has devoted itself to R&D with a vast patent portfolio and is leading second generation LED technology. Stock: Korea Exchange. Revenue: $842 M Year 2022 Data size 0 Deadline 00 d : 00 h : 00 m : 00 s 3 years ago Files |
||||||
| Ransomware | BOB Automotive Group id34259 | United States | Manufacturing / Engineering | pending | ||
|
BOB Automotive Group NEW Die BOB Automotive Group mit Hauptsitz in Essen ist eine Holding für renommierte und starke Automobilunternehmen in Nordrhein-Westfalen. Derzeit ist die BOB-Gruppe mit 20 Autohäusern im Ruhrgebiet, im Rheinland und im Bergischen Land vertreten. 21. Standort ist die Verwaltung, in der die gesamten Querschnittsfunktionen wie zum Beispiel das Personalwesen, Buchhaltung und Controlling, die IT, die Fahrzeugdisposition oder das Marketing gebündelt sind und die administrative Unterstützung für die operativen Standorte leisten. Revenue: 240 M EUR Year 2022 Data size 0 Deadline 00 d : 00 h : 00 m : 00 s 3 years ago Files |
||||||
| Ransomware | Coswell id34258 | — | Healthcare / Pharma | pending | ||
|
Coswell NEW The Company Coswell is an italian family run group of companies specialized in manufacturing and distribution of body and oral care products, health foods, masstige and selective fragrances, skin care and cosmetics in the mass market, perfumeries and pharmacies. Revenue: $157M Year 2021 Data size 0 Deadline 00 d : 00 h : 00 m : 00 s 3 years ago Files |
||||||
| Ransomware | Epicure id34257 | United States | Healthcare / Pharma | pending | ||
|
Epicure NEW Epicure is a online shop with healthy eating. The company is primarily focused on educating the community on healthy eating. Revenue: $117 M Year 2021 Data size 0 Deadline 00 d : 00 h : 00 m : 00 s 3 years ago Files |
||||||
| Ransomware | Dillon Supply id34256 | United States | Manufacturing / Engineering | pending | ||
|
Dillon Supply NEW Established in 1914, Dillon Supply distributes industrial products. They are heaquartered in Raleigh, North Carolina. Parent company Descours & Cabaud. D&C is a 200-year old company that is the European leader in MRO, Industrial and Construction Supply with over 650 locations worldwide. Sales: $313,865,000 Year 2021 Data size 0 Deadline 00 d : 00 h : 00 m : 00 s 3 years ago Files |
||||||
| Ransomware | Belzona UK Ltd id34255 | United Kingdom | Manufacturing / Engineering | pending | ||
|
Belzona UK Ltd NEW Specialising in erosion, corrosion and chemical protection, Belzona is a world leader in the design and manufacture of repair composite materials and protective coatings for machinery, equipment, buildings and structures. Data size 0 Country United Kingdom Deadline 00 d : 00 h : 00 m : 00 s 3 years ago Files |
||||||
| Ransomware | TANATEX Chemicals id34254 | Brazil | Manufacturing / Engineering | pending | ||
|
TANATEX Chemicals NEW TANATEX Chemicals is an international organisation that sells, develops, and produces chemicals for the textile industry. The company have been leading innovative solutions for textile processing for almost 60 years. It has worldwide network of offices and distributors, support customers all over the world.Revenue: $117M Year 2022 Data size 0 Deadline 00 d : 00 h : 00 m : 00 s 3 years ago Files |
||||||
| Ransomware | JD Sprinter Holdings 2010 SL id34253 | — | Communication / Marketing | pending | ||
|
JD Sprinter Holdings 2010 SL NEW JD Sprinter Holdings 2010 SL retails sportswear, outdoor clothing, and related equipment. over 7500 employees 109 M EUR EBITDA Data size 0 Deadline 00 d : 00 h : 00 m : 00 s 3 years ago Files |
||||||
| Ransomware | Garda id34252 | Germany | Other | pending | ||
|
Garda NEW Garda Data size 0 Deadline 00 d : 00 h : 00 m : 00 s 3 years ago Files |
||||||
| Ransomware | stormtech id34251 | — | IT | pending | ||
|
stormtech NEW stormtech Data size 0 Deadline 00 d : 00 h : 00 m : 00 s 3 years ago Files |
||||||
| Ransomware | Max Wild GmbH id34248 | Germany | Services | pending | ||
|
Max Wild GmbH NEW Max Wild GmbH, based in Berkheim, has been responsible for the professional and sustainable implementation of numerous services in the field of construction, demolition, environment & recycling and logistics since 1955. As a family business, Max Wild offers its customers consistency and conversion strength combined with great regional connectivity. Customers receive innovative and tailor-made solutions for small and large projects and are supported with an individual service package from all divisions. Data size 85 Gb Country — Revenue 0 Deadline 00 d : 00 h : 00 m : 00 s 2 years ago Files |
||||||
| Ransomware | Vega Reederei GmbH & Co. KG id34249 | Germany | Transportation / Travel / Logistics | pending | ||
|
Vega Reederei GmbH & Co. KG NEW Headquartered at the Port of Hamburg, Vega is one of the world's fastest-growing shipping companies. Vega offers its customers a wide range of services that include shipbuilding, shipping operations, chartering, ship disposal and financial services. Read less Revenue: EUR 19M Year 2022 Data size 32 Gb Country — Revenue 0 Deadline 00 d : 00 h : 00 m : 00 s 2 years ago Files |
||||||
| Ransomware | Jetson Specialty Marketing Services, Inc. id34250 | — | Communication / Marketing | pending | ||
|
Jetson Specialty Marketing Services, Inc. NEW JSM is a full-service direct marketing communications company steadfast in assisting clients acquire new customers and build profitable, long-term relationships with those customers. From Analytics and Database Management to Direct Mail, Critical Communications, Digital Variable Print Production to Postal Optimization, Piece-level Tracking and Response Processing, JSM has a suite of solutions to assist in growing client's business. Data size 103 Gb Country — Revenue 5000000 Deadline 00 d : 00 h : 00 m : 00 s 2 years ago Files |
||||||
| Ransomware | Elbers GmbH & Co. KG id34247 | Germany | Retail / E-commerce | pending | ||
|
Elbers GmbH & Co. KG NEW Wholesale and retail trade, import and export of flowers, plants, vegetables and horticultural necessities. Revenue: $ 3 M Data size 0 Country Germany Deadline 00 d : 00 h : 00 m : 00 s 2 years ago Files |
||||||
| Ransomware | MBE CPA id34246 | United States | Services | pending | ||
|
MBE CPA NEW MBE CPA is accounting service and business services company, provide financial solutions for individual and business. Revenue: $25 M Data size 176 Gb Country — Revenue 25000000 Deadline 00 d : 00 h : 00 m : 00 s 2 years ago Files |
||||||
| Ransomware | Carlex Glass Luxembourg S.A. id34245 | Luxembourg | Communication / Marketing | pending | ||
|
Carlex Glass Luxembourg S.A. NEW Carlex Glass Luxembourg SA in Grevenmacher is a part of Webasto, the world leader in roof systems and convertible roofs as well as parking heaters. Carlex produces glass elements for passenger cars, counts many international car manufacturers among its customers and was formerly part of Carlex Glass America, LLC, headquartered in Nashville, Tennessee (USA). Data size 4 Gb Country — Revenue 0 Deadline 00 d : 00 h : 00 m : 00 s 2 years ago Files |
||||||
| Ransomware | MBS Radio id34244 | South Africa | Communication / Marketing | pending | ||
|
MBS Radio NEW MBS Radio is a locally owned and operated group of 24 radio stations across Nova Scotia, New Brunswick and Prince Edward Island. Data size 130 Mb Country — Revenue 58000000 Deadline 00 d : 00 h : 00 m : 00 s 2 years ago Files |
||||||
| Ransomware | Life University id34243 | United States | Education | pending | ||
|
Life University PUBLISHED Life University is a private university Leading Chiropractic and Holistic Health University located in Marietta, Georgia, USA. Data size 18.2 GB Country United States Revenue USD 80000000M Deadline 00 d : 00 h : 00 m : 00 s 2 years ago Files |
||||||
| Ransomware | Saeilo id34242 | United States | Manufacturing / Engineering | pending | ||
|
Saeilo NEW Saeilo is a diversified manufacturing company consisting of three operating divisions. SMI is a national network specializing in contract precision metalworking and other manufacturing services. Kahr Arms designs and manufactures quality firearms, primarily for personal protection and law enforcement back-up and off-duty carry. Revenue $44 M Data size 0 Country Germany Deadline 00 d : 00 h : 00 m : 00 s 2 years ago Files |
||||||
| Ransomware | Lee Hartman & Sons id34241 | — | Communication / Marketing | pending | ||
|
Lee Hartman & Sons PUBLISHED Lee Hartman & Sons, Inc., provides design, engineering, installation, service and rental services of audiovisual, presentation, videoconferencing, video-streaming, digital signage, video-production, and broadcast solutions in the Mid Atlantic Region of United States. The company was established in 1936. Revenue $18.5 Million Data size 4.5 Gb Country — Revenue 18000000 Deadline 00 d : 00 h : 00 m : 00 s 2 years ago Files |
||||||
| Ransomware | Third Avenue Management id34240 | United States | Services | pending | ||
|
Third Avenue Management NEW Third Avenue Management is a New York City-based asset manager that utilizes a disciplined, value-oriented, and asset-based approach to investing in publicly traded securities. Revenue $48 M Data size 0 Country United States Deadline 00 d : 00 h : 00 m : 00 s 2 years ago Files |
||||||
| Ransomware | Groupe Devimco id34239 | France | Construction / Real Estate | pending | ||
|
Groupe Devimco PUBLISHED As a leader in real estate development in Quebec, Groupe Devimco has been designing and creating unique and mixed-use living environments for 30 years. Revenue 2024 : $ 44 M Data size 370 GB Country Canada Revenue USD 5000000M Deadline 00 d : 00 h : 00 m : 00 s 1 year ago Files |
||||||
| Ransomware | The Lowell Hotel New York id34235 | United States | Hospitality / Food & Beverage / Tourism | pending | ||
|
The Lowell Hotel New York PUBLISHED The Lowell is a New York legacy and a landmark luxury hotel, located near Central Park and all the wonderful shops of Madison Avenue. Established in 1927. Data size 53 GB Country United States Revenue USD 30M Deadline 00 d : 00 h : 00 m : 00 s 7 months ago Files |
||||||
| Ransomware | Woodlore International Inc. id34238 | United States | Services | pending | ||
|
Woodlore International Inc. PUBLISHED Woodlore is manufacturer specializes in laminate casegood production for furniture. Revenue $ 30 M Data size 68 Gb Country — Revenue 32000000 Deadline 00 d : 00 h : 00 m : 00 s 1 year ago Files |
||||||
| Ransomware | Trailer Transit Inc id34231 | United States | Transportation / Travel / Logistics | pending | ||
|
Trailer Transit Inc NEW Nationwide power-only transport services with 40+ years of experience. Trust Trailer Transit for dependable and accurate trailer transport solutions. Revenue: $22 M Data size 0 Country United States Deadline 00 d : 00 h : 00 m : 00 s 2 months ago Files |
||||||
| Ransomware | Weber Water Resources id34237 | United States | Services | pending | ||
|
Weber Water Resources PUBLISHED Founded in 1910, Weber Water Resources has been providing the widest range of water resource solutions at the lowest available risk to clients for over a century. Through our superior problem solving ability, Weber Water Resources partners with public and private clients to achieve the most equitable outcome possible on each project. revenue $25 M Data size 38 GB Country United States Revenue USD 25M Deadline 00 d : 00 h : 00 m : 00 s 1 year ago Files |
||||||
| Ransomware | MPA Pharma GmbH id34236 | Germany | Healthcare / Pharma | pending | ||
|
MPA Pharma GmbH NEW MPA Pharma GmbH is an internationally active, rapidly growing company specializing in the import and trade of high-quality pharmaceuticals, including both patented and generic products. With over 35 years of expertise in the pharmaceutical market, they also provide contract manufacturing services for third parties. Their primary clients include pharmacies and businesses in need of reliable pharmaceutical and medical products. Revenue $614 Million Data size 14 TB Country Germany Revenue USD 615M Deadline 00 d : 00 h : 00 m : 00 s 7 months ago Files |
||||||
| Ransomware | Aquamar Inc id34232 | United States | Agriculture / Food | pending | ||
|
Aquamar Inc NEW Aquamar, Inc. specializes in providing high-quality, wild-caught seafood products that are both delicious and nutritious. The company targets markets in the U.S., Canada, and Latin America, focusing on retail and foodservice sectors. Data size 0 Country United States Deadline 00 d : 00 h : 00 m : 00 s 2 months ago Files |
||||||
| Ransomware | Corona Corporation id34234 | — | Retail / E-commerce | pending | ||
|
Corona Corporation NEW The company specializes in creating a comfortable home environment, focusing on heating, cooling and hot water technologies. It was founded at April 1937, and now have more than 2000 employee. Corona Corporation is stock listed, ticker 5909.T at Tokyo Stock Exchange (Standard) Data size 320 GB Country Japan Revenue USD 571M Deadline 00 d : 00 h : 00 m : 00 s 7 months ago Files |
||||||
| Ransomware | FactoryFive id34233 | United States | IT | pending | ||
|
FactoryFive PUBLISHED Factory Five Racing Inc — kit-car manufacturer (Cobra replicas, GTM, Type 65 Coupe, 33 Hot Rod). 9 Tow Road, Wareham MA 02571-1086. ~90 employees, 158 endpoints. Revenue $5.5-6.5M/yr (credit card processing ~$4.3M, avg ticket $1245). Exfiltrated data categories (~130GB): correspondence (PST archives), CRM contacts (GoldMine), ERP/pricing, engineering CAD (SolidWorks/Rhino), banking statements, insurance policies, tax documentation, legal contracts/NDAs, database backups. Includes detailed materials on several ongoing lawsuits — parties, witnesses, testimonies, and related case files, alongside private correspondence. Risk zones: PCI DSS (card processing $4.3M/yr), MA 201 CMR 17.00 (Massachusetts personal data protection), GDPR (EU clients), CCPA (California clients), active IRS audit, active MA Sales Tax audit, FTC Safeguards Rule. Reputational: customer warranties, partner contracts (SEMA supplier), licenses, litigation exposure. CEO: David T. Smith. Data size 780 GB Country United States Revenue USD 6M Deadline 00 d : 00 h : 00 m : 00 s 3 months ago Files |
||||||
| Ransomware | EllisDon Corporation id34228 | United States | Services | pending | ||
|
EllisDon Corporation PUBLISHED EllisDon Corporation is a leading Canadian construction and infrastructure services company. Founded in 1951, the company provides construction management, engineering, project development, and facilities management services across a wide range of sectors, including healthcare, transportation, commercial, industrial, government, and defense infrastructure. EllisDon operates across Canada and internationally. Data size 1.4 TB Country Canada Revenue USD 8B Deadline 00 d : 00 h : 00 m : 00 s 1 month ago Files |
||||||
| Ransomware | Nippon Steel Corporation id34227 | Japan | Manufacturing / Engineering | pending | ||
|
Nippon Steel Corporation NEW Nippon Steel Corporation is Japan's largest steelmaker and one of the world's leading steel producers, headquartered in Tokyo. The company operates across steelmaking and steel fabrication, engineering, chemicals, and systems solutions. Data size 109 GB Country Japan Revenue USD 67B Deadline 10 d : 02 h : 33 m : 20 s 3 weeks ago Files |
||||||
| Ransomware | Beckman Coulter, Inc id34229 | United States | Services | pending | ||
|
Beckman Coulter, Inc NEW Beckman Coulter is a manufacturer of biomedical testing instrument systems and clinical diagnostics headquartered in Brea, California. A subsidiary of Danaher Corporation, it develops products that simplify and automate complex biomedical testing. Data size 213 GB Country United States Revenue USD 3.66B Deadline 10 d : 02 h : 33 m : 28 s 3 weeks ago Files |
||||||
| Ransomware | AECOM id34226 | United States | Services | leaked | ||
|
AECOM PUBLISHED UPDATE: Files uploaded. AECOM is a leading U.S.-based global infrastructure consulting and engineering company. It provides design, engineering, construction management, and advisory services for major infrastructure projects across transportation, water, energy, buildings, environmental services, and government markets. AECOM operates worldwide and serves public- and private-sector clients. Data size 1.2 TB Country United States Revenue USD 16B Deadline 00 d : 00 h : 00 m : 00 s 3 weeks ago Files |
||||||
| Ransomware | Hudson MD Group, LLC id34223 | United States | Services | pending | ||
|
Hudson MD Group, LLC NEW Hudson MD Group, LLC is a U.S.-based multispecialty medical group headquartered in West Orange, New Jersey. Established in 2019, the organization brings together physicians and healthcare professionals across multiple medical specialties and operates a network of outpatient medical practices and care centers throughout New Jersey. The group provides a broad range of healthcare services, including primary and internal medicine, cardiology, gastroenterology, neurology, obstetrics and gynecology, nephrology, urology, and other specialized medical services. Its integrated practice model allows participating physicians to operate within a shared organizational and administrative infrastructure while maintaining their clinical practices. Data size 0 GB Country United States Deadline 10 d : 03 h : 01 m : 25 s 3 weeks ago Files |
||||||
| Ransomware | Flex Ltd id34224 | — | IT | leaked | ||
|
Flex Ltd PUBLISHED Flex Ltd. is a global technology manufacturing and supply-chain company headquartered in Austin, Texas. It provides design, engineering, electronics manufacturing, supply-chain management, and infrastructure solutions for customers across the data center, AI, automotive, healthcare, industrial, communications, and consumer technology sectors. Flex operates more than 100 facilities worldwide and employs approximately 150,000 people. Data size 365 GB Country United States Revenue USD 28B Deadline 00 d : 00 h : 00 m : 00 s 3 weeks ago Files |
||||||
| Ransomware | Visual Intelligence, Inc. id34225 | United States | IT | leaked | ||
|
Visual Intelligence, Inc. PUBLISHED Visual Intelligence is a managed services company that applies advances in drones, computing, and AI to assess and cleanse existing Telecom company databases, generate critical intelligence, and inform teams with a new digital core. Data size 135 GB Country United States Deadline 00 d : 00 h : 00 m : 00 s 3 weeks ago Files |
||||||
| Ransomware | Astemo, Ltd. id34230 | United States | Manufacturing / Engineering | pending | ||
|
Astemo, Ltd. NEW Astemo operates worldwide as a global mega-supplier of automotive parts, with approximately 80,000 employees across the United States, Asia, China, Europe, and Japan. Through operations in three business segments (Electrification Business, Vehicle Business, and Motorcycle Business), we develop, manufacture, sell and service automotive parts, transportation and industrial machinery, equipment and systems. Data size 18.109 TB Country Japan Revenue USD 15B Deadline 09 d : 22 h : 23 m : 54 s 3 weeks ago Files |
||||||
| Ransomware | GE Vernova Inc. id34222 | United States | IT | pending | ||
|
GE Vernova Inc. NEW GE Vernova Inc. is a global energy equipment manufacturing and services company headquartered in Cambridge, Massachusetts. Formed from General Electric's energy businesses, it operates across Power, Wind, and Electrification segments, with its technology helping generate roughly a quarter of the world's electricity. Data size — Country United States Revenue USD 41.368B Deadline 10 d : 02 h : 36 m : 32 s 3 weeks ago Files |
||||||
| Ransomware | PKF Hadiwinata id34221 | Indonesia | Manufacturing / Engineering | pending | ||
|
PKF Hadiwinata NEW PKF Hadiwinata is a top-10 accounting and professional services firm in Indonesia, headquartered in the financial district of Jakarta. Founded in 1987, it is a member of PKF International and provides audit, tax, business solutions, and consulting services. Data size 1.4 TB Country Indonesia Revenue USD 45M Deadline 05 d : 02 h : 35 m : 09 s 3 weeks ago Files |
||||||
| Ransomware | Platinum Healthcare Staffing id34219 | United States | Healthcare / Pharma | pending | ||
|
Platinum Healthcare Staffing NEW Platinum Healthcare Staffing is a healthcare staffing agency headquartered in Lafayette, USA, founded in 2005. It provides nursing and allied healthcare professionals, including RNs, LPNs, and CNAs, to hospitals, clinics, and medical facilities. Data size 50 GB Country United States Revenue USD 80M Deadline 10 d : 02 h : 37 m : 24 s 3 weeks ago Files |
||||||
| Ransomware | MyMichigan Health id34218 | United States | — | pending | ||
|
MyMichigan Health NEW MyMichigan Health provides a full continuum of care across a wide array of settings, including urgent care centers, home health, virtual care, as well as medical offices. Their expertise spans 85 specialties and subspecialties, including behavioral health, cardiology, primary care, hematology/oncology, neurosciences, orthopedics, women and children services, and vascular surgery among others. Data size — Country United States Revenue USD 5.1B Deadline 17 d : 22 h : 23 m : 05 s 3 days ago Files |
||||||
| Ransomware | VIATechnik id34217 | Russian Federation | — | pending | ||
|
VIATechnik NEW VIATechnik is a digital transformation leader in the AEC industry. Data size 12.5 TB Country United States Deadline 10 d : 22 h : 20 m : 21 s 3 days ago Files |
||||||
| Ransomware | BRUKER CORPORATION id34220 | United States | Manufacturing / Engineering | leaked | ||
|
BRUKER CORPORATION PUBLISHED Bruker Corporation is a leading manufacturer of scientific instruments and analytical solutions headquartered in Billerica, Massachusetts. The company develops high-performance systems for molecular and materials research, including mass spectrometry, NMR, and X-ray technologies. Data size 121 GB Country United States Revenue USD 3.45B Deadline 00 d : 00 h : 00 m : 00 s 3 weeks ago Files |
||||||
| Ransomware | MyMichigan Health id33744 View details | United States | — | leaked | ||
|
MyMichigan Health provides a full continuum of care across a wide array of settings, including urgent care centers, home health, virtual care, as well as medical offices. Their expertise spans 85 specialties and subspecialties, including behavioral health, cardiology, primary care, hematology/oncology, neurosciences, orthopedics, women and children services, and vascular surgery among others. Data size: — Revenue: USD 5.1B |
||||||
| Ransomware | VIATechnik id33745 View details | United States | — | pending | ||
|
VIATechnik is a digital transformation leader in the AEC industry. Data size: 12.5 TB |
||||||
| Ransomware | GE Vernova Inc. id33181 View details | United States | IT | pending | ||
|
GE Vernova Inc. is a global energy equipment manufacturing and services company headquartered in Cambridge, Massachusetts. Formed from General Electric's energy businesses, it operates across Power, Wind, and Electrification segments, with its technology helping generate roughly a quarter of the world's electricity. |
||||||
| Ransomware | PKF Hadiwinata id33182 View details | Indonesia | Manufacturing / Engineering | leaked | ||
|
PKF Hadiwinata is a top-10 accounting and professional services firm in Indonesia, headquartered in the financial district of Jakarta. Founded in 1987, it is a member of PKF International and provides audit, tax, business solutions, and consulting services. |
||||||
| Ransomware | Platinum Healthcare Staffing id33183 View details | United States | Healthcare / Pharma | pending | ||
|
Platinum Healthcare Staffing is a healthcare staffing agency headquartered in Lafayette, USA, founded in 2005. It provides nursing and allied healthcare professionals, including RNs, LPNs, and CNAs, to hospitals, clinics, and medical facilities. |
||||||
| Ransomware | Astemo, Ltd. id33046 View details | Japan | Manufacturing / Engineering | pending | ||
|
Astemo operates worldwide as a global mega-supplier of automotive parts, with approximately 80,000 employees across the United States, Asia, China, Europe, and Japan. Through operations in three business segments (Electrification Business, Vehicle Business, and Motorcycle Business), we develop, manufacture, sell and service automotive parts, transportation and industrial machinery, equipment and systems. |
||||||
| Ransomware | Hudson MD Group, LLC id33031 View details | United States | Services | pending | ||
|
Hudson MD Group, LLC is a U.S.-based multispecialty medical group headquartered in West Orange, New Jersey. Established in 2019, the organization brings together physicians and healthcare professionals across multiple medical specialties and operates a network of outpatient medical practices and care centers throughout New Jersey. The group provides a broad range of healthcare services, including primary and internal medicine, cardiology, gastroenterology, neurology, obstetrics and gynecology, nephrology, urology, and other specialized medical services. Its integrated practice model allows participating physicians to operate within a shared organizational and administrative infrastructure while maintaining their clinical practices. |
||||||
| Ransomware | Bruker Corporation id33032 View details | United States | Manufacturing / Engineering | pending | ||
|
Bruker Corporation is a global scientific technology company headquartered in Massachusetts, USA. It develops and manufactures advanced analytical and diagnostic instruments used in life sciences, pharmaceuticals, healthcare, materials science, semiconductor research, and industrial applications. Its technologies include mass spectrometry, NMR, microscopy, X-ray analysis, and molecular diagnostics. Bruker serves pharmaceutical companies, biotech firms, hospitals, universities, government research institutions, and industrial customers worldwide. |
||||||
| Ransomware | Flex Ltd id33033 View details | United States | IT | leaked | ||
|
Flex Ltd. is a global technology manufacturing and supply-chain company headquartered in Austin, Texas. It provides design, engineering, electronics manufacturing, supply-chain management, and infrastructure solutions for customers across the data center, AI, automotive, healthcare, industrial, communications, and consumer technology sectors. Flex operates more than 100 facilities worldwide and employs approximately 150,000 people. |
||||||
| Ransomware | HyVision System. Inc id33034 View details | Korea, Republic of | IT | pending | ||
|
Hyvision System Inc is a Korea-based company principally engaged in the manufacture of automatic test and measurement equipment for mobile camera modules. Its products include testing and measuring system for camera modules, ccm tester, smart comp. tester, vision inspector tester, secondary batteries, and smart components. |
||||||
| Ransomware | Visual Intelligence, Inc. id33035 View details | United States | IT | pending | ||
|
Visual Intelligence is a managed services company that applies advances in drones, computing, and AI to assess and cleanse existing Telecom company databases, generate critical intelligence, and inform teams with a new digital core. |
||||||
| Ransomware | Beckman Coulter, Inc id32925 View details | United States | Services | pending | ||
|
Beckman Coulter Diagnostics is a leading U.S.-based medical diagnostics company and a Danaher company. It develops and manufactures clinical laboratory instruments, diagnostic systems, and testing solutions used by hospitals, laboratories, and healthcare providers worldwide. The company’s technologies support areas such as hematology, immunoassay, clinical chemistry, microbiology, and laboratory automation. |
||||||
| Ransomware | AECOM id32926 View details | United States | Services | leaked | ||
|
AECOM is a leading U.S.-based global infrastructure consulting and engineering company. It provides design, engineering, construction management, and advisory services for major infrastructure projects across transportation, water, energy, buildings, environmental services, and government markets. AECOM operates worldwide and serves public- and private-sector clients. |
||||||
| Ransomware | Promantra, Inc id32927 View details | United States | IT | pending | ||
|
ProMantra is a U.S.-based healthcare technology and business process services company specializing in Revenue Cycle Management (RCM), medical billing, healthcare data processing, and automation. Founded in 2003, the company provides technology-enabled services designed to help healthcare providers manage the financial and administrative processes associated with patient care |
||||||
| Ransomware | SFA Engineering Corporation id32861 View details | Korea, Republic of | IT | pending | ||
|
SFA Engineering Corporation is a South Korean high-tech engineering company specializing in industrial automation, robotics, and manufacturing equipment. The company provides advanced solutions for the semiconductor, OLED display, battery, and smart factory industries, serving major global manufacturers. |
||||||
| Ransomware | Nippon Steel Corporation id32862 View details | Japan | Manufacturing / Engineering | pending | ||
|
Nippon Steel Corporation is Japan’s largest steelmaker and one of the world’s leading steel producers. Headquartered in Tokyo, the company manufactures and supplies advanced steel products for the automotive, construction, energy, infrastructure, and industrial sectors. Nippon Steel operates globally through a large network of subsidiaries and production facilities, with annual revenue of approximately $67 billion and more than 138,000 employees. |
||||||
| Ransomware | EllisDon Corporation id32635 View details | Canada | Services | leaked | ||
|
EllisDon Corporation is a leading Canadian construction and infrastructure services company. Founded in 1951, the company provides construction management, engineering, project development, and facilities management services across a wide range of sectors, including healthcare, transportation, commercial, industrial, government, and defense infrastructure. EllisDon operates across Canada and internationally. |
||||||
| Ransomware | SIFCO Industries INC. id32630 View details | United States | Manufacturing / Engineering | pending | ||
|
SIFCO Industries is a world-wide provider of highly engineered forged components to the Aerospace, Energy and Defense markets. We supply flight-critical forged components and machined assemblies to all of the leading aircraft and engine manufacturers in the world. These components can be found on virtually all of the commercial and military fixed-wing aircraft as well as helicopters and business jets. Our products are also supplied to the leading steam and gas turbine manufacturers and oil producers serving the energy sector. |
||||||
| Ransomware | ST Engineering id32631 View details | Singapore | Other | pending | ||
|
Singapore Technologies Engineering or ST Engineering (ST Engg.) is a Singapore-based multinational technology, defence and engineering group with a diverse portfolio of businesses across the aerospace, smart city, defence and public security segments. |
||||||
| Ransomware | Hologic, Inc. id32632 View details | United States | Healthcare / Pharma | leaked | ||
|
Hologic, Inc. is a U.S.-based medical technology company specializing in women’s health. It develops and manufactures diagnostic, imaging, and surgical products, with a strong focus on breast health, gynecology, diagnostics, and osteoporosis assessment. |
||||||
| Ransomware | Woodlore International Inc. id32028 View details | Canada | Services | pending | ||
|
Woodlore is manufacturer specializes in laminate casegood production for furniture. Revenue $ 30 M |
||||||
| Ransomware | Trailer Transit Inc id32029 View details | United States | Transportation / Travel / Logistics | pending | ||
|
Nationwide power-only transport services with 40+ years of experience. Trust Trailer Transit for dependable and accurate trailer transport solutions. Revenue: $22 M |
||||||
| Ransomware | Weber Water Resources id32030 View details | United States | Services | pending | ||
|
Founded in 1910, Weber Water Resources has been providing the widest range of water resource solutions at the lowest available risk to clients for over a century. Through our superior problem solving ability, Weber Water Resources partners with public and private clients to achieve the most equitable outcome possible on each project. revenue $25 M |
||||||
| Ransomware | MPA Pharma GmbH id32031 View details | Germany | Healthcare / Pharma | pending | ||
|
MPA Pharma GmbH is an internationally active, rapidly growing company specializing in the import and trade of high-quality pharmaceuticals, including both patented and generic products. With over 35 years of expertise in the pharmaceutical market, they also provide contract manufacturing services for third parties. Their primary clients include pharmacies and businesses in need of reliable pharmaceutical and medical products. Revenue $614 Million |
||||||
| Ransomware | Aquamar Inc id32032 View details | United States | Agriculture / Food | pending | ||
|
Aquamar, Inc. specializes in providing high-quality, wild-caught seafood products that are both delicious and nutritious. The company targets markets in the U.S., Canada, and Latin America, focusing on retail and foodservice sectors. |
||||||
| Ransomware | Corona Corporation id32033 View details | Japan | Retail / E-commerce | pending | ||
|
The company specializes in creating a comfortable home environment, focusing on heating, cooling and hot water technologies. It was founded at April 1937, and now have more than 2000 employee. Corona Corporation is stock listed, ticker 5909.T at Tokyo Stock Exchange (Standard) |
||||||
| Ransomware | FactoryFive id32034 View details | United States | IT | pending | ||
|
Factory Five Racing Inc — kit-car manufacturer (Cobra replicas, GTM, Type 65 Coupe, 33 Hot Rod). 9 Tow Road, Wareham MA 02571-1086. ~90 employees, 158 endpoints. Revenue $5.5-6.5M/yr (credit card processing ~$4.3M, avg ticket $1245). Exfiltrated data categories (~130GB): correspondence (PST archives), CRM contacts (GoldMine), ERP/pricing, engineering CAD (SolidWorks/Rhino), banking statements, insurance policies, tax documentation, legal contracts/NDAs, database backups. Includes detailed materials on several ongoing lawsuits — parties, witnesses, testimonies, and related case files, alongside private correspondence. Risk zones: PCI DSS (card processing $4.3M/yr), MA 201 CMR 17.00 (Massachusetts personal data protection), GDPR (EU clients), CCPA (California clients), active IRS audit, active MA Sales Tax audit, FTC Safeguards Rule. Reputational: customer warranties, partner contracts (SEMA supplier), licenses, litigation exposure. CEO: David T. Smith. |
||||||
| Ransomware | The Lowell Hotel New York id20804 View details | United States | Hospitality / Food & Beverage / Tourism | leaked | ||
|
The Lowell is a New York legacy and a landmark luxury hotel, located near Central Park and all the wonderful shops of Madison Avenue. Established in 1927. |
||||||
| Ransomware | Groupe Devimco id20448 View details | Canada | Construction / Real Estate | — | ||
|
As a leader in real estate development in Quebec, Groupe Devimco has been designing and creating unique and mixed-use living environments for 30 years. Revenue 2024 : $ 44 M |
||||||
| Ransomware | Third Avenue Management id19043 View details | United States | Services | pending | ||
|
Third Avenue Management is a New York City-based asset manager that utilizes a disciplined, value-oriented, and asset-based approach to investing in publicly traded securities. Revenue $48 M |
||||||
| Ransomware | Lee Hartman & Sons id16945 View details | United States | Communication / Marketing | leaked | ||
|
Lee Hartman & Sons, Inc., provides design, engineering, installation, service and rental services of audiovisual, presentation, videoconferencing, video-streaming, digital signage, video-production, and broadcast solutions in the Mid Atlantic Region of United States. The company was established in 1936. Revenue $18.5 Million |
||||||
| Ransomware | Saeilo id13957 View details | Germany | Manufacturing / Engineering | leaked | ||
|
Saeilo is a diversified manufacturing company consisting of three operating divisions. SMI is a national network specializing in contract precision metalworking and other manufacturing services. Kahr Arms designs and manufactures quality firearms, primarily for personal protection and law enforcement back-up and off-duty carry. Revenue $44 M |
||||||
| Ransomware | Life University id13955 View details | United States | Education | leaked | ||
|
Life University is a private university Leading Chiropractic and Holistic Health University located in Marietta, Georgia, USA. |
||||||
| Ransomware | MBS Radio id13840 View details | Canada | Communication / Marketing | pending | ||
|
MBS Radio is a locally owned and operated group of 24 radio stations across Nova Scotia, New Brunswick and Prince Edward Island. |
||||||
| Ransomware | Carlex Glass Luxembourg S.A. id13636 View details | Luxembourg | Communication / Marketing | leaked | ||
|
Carlex Glass Luxembourg SA in Grevenmacher is a part of Webasto, the world leader in roof systems and convertible roofs as well as parking heaters. Carlex produces glass elements for passenger cars, counts many international car manufacturers among its customers and was formerly part of Carlex Glass America, LLC, headquartered in Nashville, Tennessee (USA). |
||||||
| Ransomware | MBE CPA id13019 View details | United States | Services | leaked | ||
|
MBE CPA is accounting service and business services company, provide financial solutions for individual and business. Revenue: $25 M |
||||||
| Ransomware | Autohaus Ebert id12371 View details | Germany | Telecommunications | pending | ||
|
Autohaus Ebert GmbH & Co.KG has been there for its customers for more than 120 years. At 12 locations around the Weinheim headquarters, the company offers a wide range of new and used cars as well as commercial vehicles. In addition, Autohaus Ebert GmbH & Co.KG offers comprehensive services related to automobiles. Revenue: $200M |
||||||
| Ransomware | Elbers GmbH & Co. KG id12370 View details | Germany | Retail / E-commerce | pending | ||
|
Wholesale and retail trade, import and export of flowers, plants, vegetables and horticultural necessities. Revenue: $ 3 M |
||||||
| Ransomware | Jetson Specialty Marketing Services, Inc. id12369 View details | United States | Communication / Marketing | leaked | ||
|
JSM is a full-service direct marketing communications company steadfast in assisting clients acquire new customers and build profitable, long-term relationships with those customers. From Analytics and Database Management to Direct Mail, Critical Communications, Digital Variable Print Production to Postal Optimization, Piece-level Tracking and Response Processing, JSM has a suite of solutions to assist in growing client's business. |
||||||
| Ransomware | Vega Reederei GmbH & Co. KG id12368 View details | Germany | Transportation / Travel / Logistics | pending | ||
|
Headquartered at the Port of Hamburg, Vega is one of the world's fastest-growing shipping companies. Vega offers its customers a wide range of services that include shipbuilding, shipping operations, chartering, ship disposal and financial services. Read less Revenue: EUR 19M Year 2022 |
||||||
| Ransomware | Max Wild GmbH id12367 View details | Germany | Services | pending | ||
|
Max Wild GmbH, based in Berkheim, has been responsible for the professional and sustainable implementation of numerous services in the field of construction, demolition, environment & recycling and logistics since 1955. As a family business, Max Wild offers its customers consistency and conversion strength combined with great regional connectivity. Customers receive innovative and tailor-made solutions for small and large projects and are supported with an individual service package from all divisions. |
||||||
| Ransomware | stormtech id9893 View details | — | IT | pending | ||
|
stormtech |
||||||
| Ransomware | Garda id9892 View details | — | Other | pending | ||
|
Garda |
||||||
| Ransomware | JD Sprinter Holdings 2010 SL id9737 View details | — | Communication / Marketing | pending | ||
|
JD Sprinter Holdings 2010 SL retails sportswear, outdoor clothing, and related equipment. over 7500 employees 109 M EUR EBITDA |
||||||
| Ransomware | TANATEX Chemicals id9319 View details | — | Manufacturing / Engineering | pending | ||
|
TANATEX Chemicals is an international organisation that sells, develops, and produces chemicals for the textile industry. The company have been leading innovative solutions for textile processing for almost 60 years. It has worldwide network of offices and distributors, support customers all over the world.Revenue: $117M Year 2022 |
||||||
| Ransomware | Belzona UK Ltd id8901 View details | United Kingdom | Manufacturing / Engineering | pending | ||
|
Specialising in erosion, corrosion and chemical protection, Belzona is a world leader in the design and manufacture of repair composite materials and protective coatings for machinery, equipment, buildings and structures. |
||||||
| Ransomware | Dillon Supply id8167 View details | — | Manufacturing / Engineering | leaked | ||
|
Established in 1914, Dillon Supply distributes industrial products. They are heaquartered in Raleigh, North Carolina. Parent company Descours & Cabaud. D&C is a 200-year old company that is the European leader in MRO, Industrial and Construction Supply with over 650 locations worldwide. Sales: $313,865,000 Year 2021 |
||||||
| Ransomware | Epicure id8166 View details | — | Healthcare / Pharma | pending | ||
|
Epicure is a online shop with healthy eating. The company is primarily focused on educating the community on healthy eating. Revenue: $117 M Year 2021 |
||||||
| Ransomware | Coswell id8165 View details | — | Healthcare / Pharma | pending | ||
|
The Company Coswell is an italian family run group of companies specialized in manufacturing and distribution of body and oral care products, health foods, masstige and selective fragrances, skin care and cosmetics in the mass market, perfumeries and pharmacies. Revenue: $157M Year 2021 |
||||||