Ransomware Group intelligence

Orova

Active

Track Orova with 90 published victims and 4 known leak locations in a single intelligence view.

DARK EYE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Victims 90 Known published victims in this dataset
First discovered 2026-08-04 Earliest victim discovery date
Last discovered 2026-08-31 Latest victim discovery date
Inactive since 15 days Days since the latest known victim
Top country United States 48 victims
Known locations 4 Leak or negotiation infrastructure tracked

Overview

Orova is tracked by Dark Eye as a ransomware group with 90 published victims.

United States is currently the most targeted country in this dataset.

4 known leak locations are currently associated with this group.

Leak Status Distribution

  • Leaked 29 93.5%
  • Pending 1 3.2%
  • Deleted 1 3.2%

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (4)

    Label Type Availability Links
    Leak location 4 Onion service Up checked 3h ago maa2yprc5pldyr5hjn246hw7i66wdhglnostqgqkcbuh4vyyeos4xxyd.onion
    Leak location 3 Onion service Up checked 3h ago ns7y6bxawualjj5rpo5num6syejd7hgaowrndk3r4duxu2iyinzv6hid.onion
    Leak location 1 Onion service Up checked 3h ago mzlajyncb2rafn5bsb7esmo73kyawjxeirunba27n6nermmafzlcp4qd.onion
    Leak location 2 Onion service Down checked 3h ago mll5ddmdzgiq2siv3qnocmmqyiigfpajtc663xtf32qtp6weycyx2hyd.onion

    Top Activity Sectors (12)

    Victims (90)

    Search, filter and paginate the victim timeline for Orova. Showing 1–90 of 90.

    Type Target Discovered Country Business Category Intel Link Leak status
    Ransomware ASYS Corporation id32354 View details Taiwan, Province of China Manufacturing / Engineering leaked
    Ransomware ASYS Corporation id32354 View details Taiwan, Province of China Manufacturing / Engineering leaked
    Ransomware Fu Sheng Industrial Co., Ltd id32355 View details Hong Kong IT leaked
    Ransomware Fu Sheng Industrial Co., Ltd id32355 View details Hong Kong IT leaked
    Ransomware ITC Properties Group Limited id32261 View details Hong Kong Construction / Real Estate leaked
    Ransomware ITC Properties Group Limited id32261 View details Hong Kong Construction / Real Estate leaked
    Ransomware South Pacific Hotel Limited id32259 View details Hong Kong Hospitality / Food & Beverage / Tourism leaked
    Ransomware South Pacific Hotel Limited id32259 View details Hong Kong Hospitality / Food & Beverage / Tourism leaked
    Ransomware Central Florida Civil LLC id32131 View details United States Construction / Real Estate deleted
    Ransomware Central Florida Civil LLC id32131 View details United States Construction / Real Estate deleted
    Ransomware Arich Enterprise Co., Ltd. id32132 View details Taiwan, Province of China IT leaked
    Ransomware Arich Enterprise Co., Ltd. id32132 View details Taiwan, Province of China IT leaked
    Ransomware Bai-chi CPA Firm id32133 View details Taiwan, Province of China IT leaked
    Ransomware Bai-chi CPA Firm id32133 View details Taiwan, Province of China IT leaked
    Ransomware DL HOLDINGS GROUP id31889 View details Hong Kong leaked
    Ransomware Smartsoft id31741 View details Taiwan, Province of China IT leaked
    Ransomware Smartsoft id31741 View details Taiwan, Province of China IT leaked
    Ransomware Ganzhou Xinye Craft Co., Ltd. id31572 View details Hong Kong Manufacturing / Engineering leaked
    Ransomware Ganzhou Xinye Craft Co., Ltd. id31572 View details Hong Kong Manufacturing / Engineering leaked
    Ransomware First Baptist Church of Belleview id31373 View details United States NGOs / Associations leaked
    Ransomware First Baptist Church of Belleview id31373 View details United States NGOs / Associations leaked
    Ransomware Hilliard's Air Conditioning & Heating Inc id31368 View details United States Construction / Real Estate leaked
    Ransomware Hilliard's Air Conditioning & Heating Inc id31368 View details United States Construction / Real Estate leaked
    Ransomware Gemstone UK id31369 View details United States Retail / E-commerce leaked
    Ransomware Gemstone UK id31369 View details United States Retail / E-commerce leaked
    Ransomware St Theresa Catholic Church id31358 View details United States Education
    Ransomware St Theresa Catholic Church id31358 View details United States Education
    Ransomware Stoneybrook West Master Association, Inc id31359 View details United States Construction / Real Estate leaked
    Ransomware Stoneybrook West Master Association, Inc id31359 View details United States Construction / Real Estate leaked
    Ransomware Stonecrest POA id31360 View details United States Construction / Real Estate leaked
    Ransomware Stonecrest POA id31360 View details United States Construction / Real Estate leaked
    Ransomware Magnolia Dental id31362 View details United States Healthcare / Pharma leaked
    Ransomware Magnolia Dental id31362 View details United States Healthcare / Pharma leaked
    Ransomware Country Oaks Veterinary Clinic id31363 View details United States Retail / E-commerce leaked
    Ransomware Country Oaks Veterinary Clinic id31363 View details United States Retail / E-commerce leaked
    Ransomware David King Architect id31364 View details United States Construction / Real Estate leaked
    Ransomware David King Architect id31364 View details United States Construction / Real Estate leaked
    Ransomware Woodside Ranch id31365 View details United States Construction / Real Estate leaked
    Ransomware Woodside Ranch id31365 View details United States Construction / Real Estate leaked
    Ransomware FixIT Tek id31246 View details United States IT leaked
    Ransomware FixIT Tek id31246 View details United States IT leaked
    Ransomware ADG Healthcare id31224 View details Egypt Healthcare / Pharma
    Ransomware ADG Healthcare id31224 View details Egypt Healthcare / Pharma
    Ransomware eSysTech id31225 View details Brazil IT
    Ransomware eSysTech id31225 View details Brazil IT
    Ransomware Northeastern Communications & Electrical id31226 View details United States Construction / Real Estate
    Ransomware Northeastern Communications & Electrical id31226 View details United States Construction / Real Estate
    Ransomware Apollo Office System id31227 View details Japan IT
    Ransomware Apollo Office System id31227 View details Japan IT
    Ransomware EMPYREAN INT’L TECHNO DEVICES id31228 View details Taiwan, Province of China IT
    Ransomware EMPYREAN INT’L TECHNO DEVICES id31228 View details Taiwan, Province of China IT
    Ransomware Texas Medical Screening id31229 View details United States Healthcare / Pharma
    Ransomware Texas Medical Screening id31229 View details United States Healthcare / Pharma
    Ransomware Sc Regional Housing Authority id31230 View details United States NGOs / Associations
    Ransomware Sc Regional Housing Authority id31230 View details United States NGOs / Associations
    Ransomware Bjs Insurance & Financial id31231 View details United States Finance / Legal / Insurance
    Ransomware Bjs Insurance & Financial id31231 View details United States Finance / Legal / Insurance
    Ransomware Wisdom Oral Surgery id31232 View details United States Healthcare / Pharma
    Ransomware Wisdom Oral Surgery id31232 View details United States Healthcare / Pharma
    Ransomware SURE TRAVEL COMPANY id31233 View details Hong Kong Transportation / Travel / Logistics leaked
    Ransomware SURE TRAVEL COMPANY id31233 View details Hong Kong Transportation / Travel / Logistics leaked
    Ransomware SURE TRAVEL COMPANY id31233 View details Hong Kong Transportation / Travel / Logistics leaked
    Ransomware SBI Manufacturing id31208 View details United States Manufacturing / Engineering leaked
    Ransomware SBI Manufacturing id31208 View details United States Manufacturing / Engineering leaked
    Ransomware Agricultural Chemical Solutions id31209 View details United States Agriculture / Food
    Ransomware Agricultural Chemical Solutions id31209 View details United States Agriculture / Food
    Ransomware DBM Reflex id31210 View details Taiwan, Province of China Manufacturing / Engineering
    Ransomware DBM Reflex id31210 View details Taiwan, Province of China Manufacturing / Engineering
    Ransomware Ultra Fame id31211 View details Taiwan, Province of China Manufacturing / Engineering
    Ransomware Ultra Fame id31211 View details Taiwan, Province of China Manufacturing / Engineering
    Ransomware Cardiology Associates id31212 View details United States Healthcare / Pharma leaked
    Ransomware Cardiology Associates id31212 View details United States Healthcare / Pharma leaked
    Ransomware Yost Home Improvements id31213 View details United States Construction / Real Estate leaked
    Ransomware Yost Home Improvements id31213 View details United States Construction / Real Estate leaked
    Ransomware KINGSSON id31214 View details Taiwan, Province of China Manufacturing / Engineering pending
    Ransomware KINGSSON id31214 View details Taiwan, Province of China Manufacturing / Engineering pending
    Ransomware SSI HOLDING (FAR EAST) LIMITED id31215 View details Hong Kong Other leaked
    Ransomware SSI HOLDING (FAR EAST) LIMITED id31215 View details Hong Kong Other leaked
    Ransomware Sanrio Hong Kong Co., Ltd id31216 View details Hong Kong Retail / E-commerce leaked
    Ransomware Sanrio Hong Kong Co., Ltd id31216 View details Hong Kong Retail / E-commerce leaked
    Ransomware Tat Fung Textile Co., Ltd. id31217 View details Hong Kong Manufacturing / Engineering leaked
    Ransomware Tat Fung Textile Co., Ltd. id31217 View details Hong Kong Manufacturing / Engineering leaked
    Ransomware Integrated Site Management id31218 View details United States Education leaked
    Ransomware Integrated Site Management id31218 View details United States Education leaked
    Ransomware Conceptual Designs, Inc. id31219 View details United States Construction / Real Estate leaked
    Ransomware Conceptual Designs, Inc. id31219 View details United States Construction / Real Estate leaked
    Ransomware JK Capital Management Limited id31220 View details Hong Kong Finance / Legal / Insurance
    Ransomware JK Capital Management Limited id31220 View details Hong Kong Finance / Legal / Insurance
    Ransomware Global Friction Products, Inc id31221 View details United States Manufacturing / Engineering leaked
    Ransomware Global Friction Products, Inc id31221 View details United States Manufacturing / Engineering leaked