Ransomware Group intelligence
Cloak
ActiveTrack Cloak with 166 published victims and 1 known leak locations in a single intelligence view.
Overview
Cloak is tracked by Breach House as a ransomware group with 166 published victims.
United States is currently the most targeted country in this dataset.
1 known leak locations are currently associated with this group.
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (1)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 1 | Onion service | Unknown | cloak7jpvcb73rtx2ff7kaw2kholu7bdiivxpzbhlny4ybz75dpxckqd.onion |
Top Activity Sectors
No sector intelligence available.
Ransom Notes (0)
▼No ransom notes available for this group.
Tools Used
▼No tools used available.
YARA Rules (0)
▼No YARA rules available.
Indicators of Compromise (0)
▼No IoCs available for this group.
Negotiation Chats (0)
▼No negotiation chats available.
Research Sources
No external research sources linked yet.
Victims (166)
Search, filter and paginate the victim timeline for Cloak. Showing 1–100 of 166.
| Type | Target | Discovered | Country | Business Category | Intel Link |
|---|---|---|---|---|---|
| Ransomware | ra-vogeler.de id29987 View details | Germany | Finance / Legal / Insurance | — | |
|
Country: germany | Size: 1.1TB | Private | Views: 1 |
|||||
| Ransomware | ra-*******e id29944 View details | Manufacturing / Engineering | — | ||
|
Country: *** | Size: 1.1TB | Private | Views: 1 |
|||||
| Ransomware | d**********e id29945 View details | IT | — | ||
|
Country: *** | Size: 359GB | Private | Views: 0 |
|||||
| Ransomware | W******S*******D id29946 View details | Finance / Legal / Insurance | — | ||
|
Country: *** | Size: 102GB | Private | Views: 0 |
|||||
| Ransomware | suffolkva.us id26779 View details | United States | Other | — | |
|
[AI generated] N/A |
|||||
| Ransomware | ****el-p*****.de id26778 View details | Germany | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | Dinnebiergruppe.de id26657 View details | Germany | Construction / Real Estate | — | |
|
[AI generated] "Dinnebiergruppe.de" is a German company incorporated into the automobile industry. They are authorized dealers for major car brands including Mercedes-Benz, smart, Audi, Porsche, and Volkswagen Commercial Vehicles. The company offers a broad range of services including car sales, leasing, financing, insurance, and extensive car maintenance. Moreover, they are also involved in real estate management, hotel industry, and operate petrol stations. |
|||||
| Ransomware | ****ne*i***pe.de id26086 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Fitzpatrickhotels.com id25221 View details | United States | Hospitality / Food & Beverage / Tourism | — | |
|
[AI generated] Fitzpatrick Hotels operates two boutique hotels in New York City, providing Irish-style hospitality to guests. Established in the late 20th century, the family-owned business primarily caters to those who value warmth, charm, and a touch of old-world elegance. Their hotels, Fitzpatrick Manhattan and Fitzpatrick Grand Central, boast a strategic location, iconic Irish pub-style restaurants, sophisticated amenities, and rooms. |
|||||
| Ransomware | ****patr**h**s.com id24923 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | *****l*****.us id24922 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Con*******.com id23969 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | ****e-det**.de id23968 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | *****.com id23148 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | L********den.com id23147 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | TuftsMedicine id22164 View details | United States | Healthcare / Pharma | — | |
|
[AI generated] N/A |
|||||
| Ransomware | Wstg-steuerberater.de id21636 View details | Germany | Other | — | |
|
Seit über dreißig Jahren betreuen Frank Hoffmann und Stephan Hofmann zuverlässig Mandanten an Rhein und Ruhr und aus dem Bergischen Land. |
|||||
| Ransomware | Tu*******ne id21635 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Go********l id21634 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | *********.bh id21633 View details | Bahrain | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | *******roup.ro id21632 View details | Romania | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | Nos********om.br id21011 View details | Brazil | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | Ws*******.de id21010 View details | Germany | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | Pensions.gov.lk id20854 View details | Sri Lanka | Other | — | |
|
[AI generated] N/A |
|||||
| Ransomware | Productionsaw.com id20493 View details | United States | Manufacturing / Engineering | — | |
|
Country: USA Views: 161 |
|||||
| Ransomware | **********li.com id19767 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Bosshard-farben.ch id19248 View details | Switzerland | Communication / Marketing | — | |
|
[AI generated] "Bosshard-farben.ch" is a Swiss company specializing in the sale of floor and wall paints. In addition to interior and exterior paints, they offer lacquers, glazes, plasters, and other painting supplies. They also provide additional products for floor, wall and ceiling design. Renowned for their comprehensive selection, they cater to both professional painters and DIY enthusiasts. |
|||||
| Ransomware | Pe*************.lk id19247 View details | Sri Lanka | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | Orl***********.com id19246 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | pea**********.uk id19245 View details | United Kingdom | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | Pc***********.org id19244 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Bosshard-Farben AG id18990 View details | Switzerland | Communication / Marketing | — | |
|
[IA generated] Swiss company specializing in the production of paints, varnishes, and glazes for building and wood protection, |
|||||
| Ransomware | Oag.state.va.us id18550 View details | United States | Public Sector | — | |
|
[AI generated] N/A |
|||||
| Ransomware | Wr-recht.de id18549 View details | Germany | Finance / Legal / Insurance | — | |
|
[AI generated] "Wr-recht.de" is a German legal advisory firm that specializes in matters of insolvency law, commercial law, and general civil law. The company caters to both private individuals and businesses, offering effective and efficient legal services. They possess extensive experience in guiding clients through legal proceedings, ensuring optimal client representation. |
|||||
| Ransomware | Baltimorecityschools id18548 View details | United States | Education | — | |
|
[AI generated] Baltimore City Public Schools, also known as City Schools, is a public school district in Baltimore, Maryland, United States. It serves the youth of Baltimore and is committed to providing a comprehensive, high-quality education. The district includes elementary, middle, and high schools, and offers specialized programs and initiatives to support students' growth and development. |
|||||
| Ransomware | Fi***************.pa id18547 View details | Panama | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | St***********.nl id18546 View details | Netherlands | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | ba**********.org id17781 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Waggonereng.com id17673 View details | United States | Services | — | |
|
[AI generated] Waggoner Engineering, founded in 1976, is a professional services firm with a focus on engineering, geospatial and consulting services. Their team of multidisciplinary professionals serve clients within sectors like government agencies, industrial organizations, and private sector clients. The key industries they work in include energy, environment, infrastructure, and technology. Their headquarters are in Jackson, Mississippi. |
|||||
| Ransomware | op*********.eu id17672 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | wr********.de id17671 View details | Germany | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | pen********.de id17670 View details | Germany | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | oa*************.us id17669 View details | United States | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | Ad***********.ca id17139 View details | Canada | Other | — | |
|
No additional victim description available. |
|||||
| Ransomware | Centromedicoenova id17021 View details | Spain | Public Sector | — | |
|
Country: Spain Views: 69 View more /enova Public <100GB |
|||||
| Ransomware | Premierautocredit.com id17001 View details | United States | Finance / Legal / Insurance | — | |
|
Country: USA Views: 53 View more /pac Public 156GB |
|||||
| Ransomware | Kaisersbach.de id16953 View details | Germany | Public Sector | — | |
|
Country: germany Views: 106 View more /kaiser Public <100GB |
|||||
| Ransomware | Neovita.de id16952 View details | Germany | Public Sector | — | |
|
Country: germany Views: 88 View more /neovita Public 227GB |
|||||
| Ransomware | Bwfg.at id16783 View details | Austria | Public Sector | — | |
|
Bwfg.at Country: austria Views: 16 View more /bwfg Public 102GB |
|||||
| Ransomware | pre*************.com id16742 View details | Communication / Marketing | — | ||
|
Country: USA Views: 0 View more /hidden_113 Private 156GB |
|||||
| Ransomware | Wa**********.com id16741 View details | Communication / Marketing | — | ||
|
Country: USA Views: 0 View more /hidden_114 Private |
|||||
| Ransomware | ge*******.com id16740 View details | Communication / Marketing | — | ||
|
Country: Italy Views: 0 View more /hidden_115 Private 271GB |
|||||
| Ransomware | Mai***********.de id16461 View details | Germany | Communication / Marketing | — | |
|
Mai***********.de Country: germany Views: 1 View more /hidden_112 Private <100GB |
|||||
| Ransomware | bac***********.com.au id16460 View details | Australia | Communication / Marketing | — | |
|
bac***********.com.au Country: Australia Views: 2 View more /hidden_111 Private <100GB |
|||||
| Ransomware | Town of Ponoka id16459 View details | Canada | Public Sector | — | |
|
Ponoka.ca Country: Canada Views: 52073 View more /ponoka Public 110GB |
|||||
| Ransomware | Kai*************.de id16220 View details | Germany | Communication / Marketing | — | |
|
Kai*************.de Country: germany Views: 0 View more /hidden_109 Private <100GB |
|||||
| Ransomware | Ne***********.de id16219 View details | Germany | Communication / Marketing | — | |
|
Country: germany Views: 0 View more /hidden_110 Private 227GB |
|||||
| Ransomware | Fmp.gob.pe id16218 View details | Peru | Communication / Marketing | — | |
|
[AI generated] Fmp.gob.pe refers to the Fondo MIVIVIENDA, a Peruvian government initiative aimed at facilitating access to affordable housing. It provides financial products and services to support homeownership, particularly for low- and middle-income families. The organization focuses on promoting sustainable urban development and improving living conditions through accessible mortgage loans and housing programs. |
|||||
| Ransomware | Ukh-hof.de id15964 View details | Germany | Public Sector | — | |
|
Ukh-hof.de Country: Germany Views: 56 View more /ukh Public <100GB |
|||||
| Ransomware | Orthopaedie-hof.de id15965 View details | Germany | Public Sector | — | |
|
Orthopaedie-hof.de Country: Germany Views: 51 View more /ortho Public <100GB |
|||||
| Ransomware | N************.uk id15966 View details | United Kingdom | Communication / Marketing | ||
|
N************.uk Country: United Kingdom Views: 0 View more /hidden_108 Private 125GB |
|||||
| Ransomware | Donnewalddistributing id15866 View details | United States | Public Sector | ||
|
Country: USA Views: 61 View more /donne Public <100GB |
|||||
| Ransomware | o******************v id15772 View details | Other | |||
|
No additional victim description available. |
|||||
| Ransomware | Glo**************.com id15773 View details | Other | |||
|
No additional victim description available. |
|||||
| Ransomware | SCAFF'HOLDING id15774 View details | France | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Globalresultspr.com id15775 View details | United States | Communication / Marketing | ||
|
Globalresultspr.com Country: USA Public 123GB |
|||||
| Ransomware | don****************.com id15776 View details | United States | Communication / Marketing | ||
|
don****************.com Country: USA Private <100GB |
|||||
| Ransomware | F************.pe id15777 View details | Peru | Communication / Marketing | ||
|
F************.pe Country: Peru Private 221GB |
|||||
| Ransomware | Uk***********.de id15778 View details | Germany | Communication / Marketing | ||
|
Country: Germany Views: 0 Private <100GB |
|||||
| Ransomware | Or*************.de id15779 View details | Germany | Communication / Marketing | ||
|
Country: Germany Views: 0 Private <100GB |
|||||
| Ransomware | Ma************.de id15780 View details | Germany | Communication / Marketing | ||
|
Country: Germany Views: 0 Private 134GB |
|||||
| Ransomware | Bw**********.at id15781 View details | Austria | Communication / Marketing | ||
|
Country: Austria Views: 0 Private 122GB |
|||||
| Ransomware | mm********.com id14900 View details | Ireland | Other | — | |
|
Country: Ireland |
|||||
| Ransomware | Ful************.com id14466 View details | United States | Other | — | |
|
Country: USA |
|||||
| Ransomware | Te***************.net id14465 View details | Italy | Other | — | |
|
Country: italy |
|||||
| Ransomware | Pennvet.com id14452 View details | United States | Other | — | |
|
Country: USA |
|||||
| Ransomware | Wertachkliniken.de id14387 View details | Germany | Other | — | |
|
Country: germany |
|||||
| Ransomware | Pen*****************.com id14154 View details | United States | Other | — | |
|
Country: USA |
|||||
| Ransomware | El**********.hu id14153 View details | United States | Other | — | |
|
Country: USA |
|||||
| Ransomware | we****************.de id14152 View details | Germany | Other | — | |
|
Country: germany |
|||||
| Ransomware | Stjamesplace.org id13958 View details | United States | Other | — | |
|
Country: USA |
|||||
| Ransomware | Dunlop Aircraft Tyres id13927 View details | United Kingdom | Other | — | |
|
Country: United Kingdom |
|||||
| Ransomware | Vibo.dk id13926 View details | Denmark | Other | — | |
|
Country: Denmark |
|||||
| Ransomware | Hvb-ingenieure.de id13925 View details | Germany | Other | — | |
|
Country: germany |
|||||
| Ransomware | Westermans.com id13924 View details | United Kingdom | Other | — | |
|
Country: United Kingdom |
|||||
| Ransomware | Entr**************.fr id13835 View details | France | Other | — | |
|
Country: France |
|||||
| Ransomware | Cb**********.com id13834 View details | Cyprus | Communication / Marketing | — | |
|
Country: Cyprus |
|||||
| Ransomware | St**************.org id13693 View details | United States | Other | — | |
|
Country: USA |
|||||
| Ransomware | Dd*******uk id13645 View details | United Kingdom | Other | — | |
|
Country: United Kingdom |
|||||
| Ransomware | Kalaswire.com id13584 View details | United States | Other | — | |
|
Country: USA |
|||||
| Ransomware | Hv*************.de id13468 View details | Germany | Other | — | |
|
Country: germany |
|||||
| Ransomware | We*******.com id13467 View details | United Kingdom | Other | — | |
|
Country: United Kingdom |
|||||
| Ransomware | Ka******.com id13466 View details | United States | Other | — | |
|
Country: USA |
|||||
| Ransomware | upcli.com id13349 View details | United States | Other | — | |
|
Country: USA |
|||||
| Ransomware | Vi*********.dk id13348 View details | Denmark | Other | — | |
|
Country: Denmark |
|||||
| Ransomware | Abileneisd.org id13253 View details | United States | Other | — | |
|
Country: USA |
|||||
| Ransomware | Dun*****************uk id13252 View details | United Kingdom | Other | — | |
|
Country: United Kingdom |
|||||
| Ransomware | P********.pl id13211 View details | Poland | Other | — | |
|
Country: Poland |
|||||
| Ransomware | Unit*****************.com id13210 View details | United States | Other | — | |
|
Country: USA |
|||||
| Ransomware | Longviewbridge.com id13172 View details | United States | Other | — | |
|
Country: USA |
|||||