We've just wrapped up the new design, along with a ton of other improvements. Check them all out in the Changelog.

Ransomware Group intelligence

Orova

Active

Track Orova with 56 published victims and 4 known leak locations in a single intelligence view.

DARK EYE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Victims 56 Known published victims in this dataset
First discovered 2026-08-04 Earliest victim discovery date
Last discovered 2026-10-23 Latest victim discovery date
Inactive since 8 days Days since the latest known victim
Top country United States 25 victims
Known locations 4 Leak or negotiation infrastructure tracked

Overview

Orova is tracked by Dark Eye as a ransomware group with 56 published victims.

United States is currently the most targeted country in this dataset.

4 known leak locations are currently associated with this group.

Leak Status Distribution

  • Leaked 23 41.1%
  • Pending 32 57.1%
  • Deleted 1 1.8%

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (4)

    Label Type Availability Links
    Leak location 2 Onion service Up checked 4h ago mll5ddmdzgiq2siv3qnocmmqyiigfpajtc663xtf32qtp6weycyx2hyd.onion
    Leak location 4 Onion service Up checked 4h ago maa2yprc5pldyr5hjn246hw7i66wdhglnostqgqkcbuh4vyyeos4xxyd.onion
    Leak location 3 Onion service Up checked 4h ago ns7y6bxawualjj5rpo5num6syejd7hgaowrndk3r4duxu2iyinzv6hid.onion
    Leak location 1 Onion service Up checked 4h ago mzlajyncb2rafn5bsb7esmo73kyawjxeirunba27n6nermmafzlcp4qd.onion

    Top Activity Sectors (13)

    Victims (56)

    Search, filter and paginate the victim timeline for Orova. Showing 1–56 of 56.

    Type Target Discovered Country Business Category Intel Link Leak status
    Ransomware Wah Chan Consolidated Sdn Bhd id35462 View details Malaysia Services leaked
    Ransomware Trevi Technology id35463 View details Taiwan, Province of China Transportation / Travel / Logistics leaked
    Ransomware Durga Bearings id33813 View details India — pending
    Ransomware Codar (Pte) Ltd id33814 View details Singapore — pending
    Ransomware Alfameli Group id33815 View details Malaysia — pending
    Ransomware The Park Lane Hong Kong id33789 View details Hong Kong — pending
    Ransomware Libre Wireless Technologies id33790 View details India — pending
    Ransomware Amantya Technologies id33791 View details India — pending
    Ransomware Gatetech Technology id33792 View details Taiwan, Province of China — pending
    Ransomware Siddhi Green Excellence Pvt. Ltd id33014 View details India Education leaked
    Ransomware Euramex Management Group id33011 View details United States IT leaked
    Ransomware ASYS Corporation id32354 View details Taiwan, Province of China Manufacturing / Engineering leaked
    Ransomware Fu Sheng Industrial Co., Ltd id32355 View details Hong Kong IT leaked
    Ransomware ITC Properties Group Limited id32261 View details Hong Kong Construction / Real Estate leaked
    Ransomware South Pacific Hotel Limited id32259 View details Hong Kong Hospitality / Food & Beverage / Tourism leaked
    Ransomware Central Florida Civil LLC id32131 View details United States Construction / Real Estate deleted
    Ransomware Arich Enterprise Co., Ltd. id32132 View details Taiwan, Province of China IT leaked
    Ransomware Bai-chi CPA Firm id32133 View details Taiwan, Province of China IT leaked
    Ransomware DL HOLDINGS GROUP id31889 View details Hong Kong — leaked
    Ransomware Smartsoft id31741 View details Taiwan, Province of China IT leaked
    Ransomware Ganzhou Xinye Craft Co., Ltd. id31572 View details Hong Kong Manufacturing / Engineering leaked
    Ransomware First Baptist Church of Belleview id31373 View details United States NGOs / Associations leaked
    Ransomware Hilliard's Air Conditioning & Heating Inc id31368 View details United States Construction / Real Estate leaked
    Ransomware Gemstone UK id31369 View details United States Retail / E-commerce leaked
    Ransomware St Theresa Catholic Church id31358 View details United States Education pending
    Ransomware Stoneybrook West Master Association, Inc id31359 View details United States Construction / Real Estate leaked
    Ransomware Stonecrest POA id31360 View details United States Construction / Real Estate leaked
    Ransomware Magnolia Dental id31362 View details United States Healthcare / Pharma leaked
    Ransomware Country Oaks Veterinary Clinic id31363 View details United States Retail / E-commerce leaked
    Ransomware David King Architect id31364 View details United States Construction / Real Estate leaked
    Ransomware Woodside Ranch id31365 View details United States Construction / Real Estate leaked
    Ransomware FixIT Tek id31246 View details United States IT pending
    Ransomware ADG Healthcare id31224 View details Egypt Healthcare / Pharma pending
    Ransomware eSysTech id31225 View details Brazil IT pending
    Ransomware Northeastern Communications & Electrical id31226 View details United States Construction / Real Estate pending
    Ransomware Apollo Office System id31227 View details Japan IT pending
    Ransomware EMPYREAN INT’L TECHNO DEVICES id31228 View details Taiwan, Province of China IT pending
    Ransomware Texas Medical Screening id31229 View details United States Healthcare / Pharma pending
    Ransomware Sc Regional Housing Authority id31230 View details United States NGOs / Associations pending
    Ransomware Bjs Insurance & Financial id31231 View details United States Finance / Legal / Insurance pending
    Ransomware Wisdom Oral Surgery id31232 View details United States Healthcare / Pharma pending
    Ransomware SURE TRAVEL COMPANY id31233 View details Hong Kong Transportation / Travel / Logistics pending
    Ransomware SBI Manufacturing id31208 View details United States Manufacturing / Engineering pending
    Ransomware Agricultural Chemical Solutions id31209 View details United States Agriculture / Food pending
    Ransomware DBM Reflex id31210 View details Taiwan, Province of China Manufacturing / Engineering pending
    Ransomware Ultra Fame id31211 View details Taiwan, Province of China Manufacturing / Engineering pending
    Ransomware Cardiology Associates id31212 View details United States Healthcare / Pharma pending
    Ransomware Yost Home Improvements id31213 View details United States Construction / Real Estate pending
    Ransomware KINGSSON id31214 View details Taiwan, Province of China Manufacturing / Engineering pending
    Ransomware SSI HOLDING (FAR EAST) LIMITED id31215 View details Hong Kong Other pending
    Ransomware Sanrio Hong Kong Co., Ltd id31216 View details Hong Kong Retail / E-commerce pending
    Ransomware Tat Fung Textile Co., Ltd. id31217 View details Hong Kong Manufacturing / Engineering leaked
    Ransomware Integrated Site Management id31218 View details United States Education pending
    Ransomware Conceptual Designs, Inc. id31219 View details United States Construction / Real Estate pending
    Ransomware JK Capital Management Limited id31220 View details Hong Kong Finance / Legal / Insurance pending
    Ransomware Global Friction Products, Inc id31221 View details United States Manufacturing / Engineering pending