Ransomware Group intelligence

Cloak

Active

Track Cloak with 166 published victims and 1 known leak locations in a single intelligence view.

Victims 166 Known published victims in this dataset
First discovered 2023-08-24 Earliest victim discovery date
Last discovered 2026-06-18 Latest victim discovery date
Inactive since 30 days Days since the latest known victim
Top country United States 42 victims
Known locations 1 Leak or negotiation infrastructure tracked

Overview

Cloak is tracked by Breach House as a ransomware group with 166 published victims.

United States is currently the most targeted country in this dataset.

1 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (1)

    Label Type Availability Links
    Leak location 1 Onion service Unknown cloak7jpvcb73rtx2ff7kaw2kholu7bdiivxpzbhlny4ybz75dpxckqd.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (166)

    Search, filter and paginate the victim timeline for Cloak. Showing 101–166 of 166.

    Type Target Discovered Country Business Category Intel Link
    Ransomware Ruland-viersen.de id13171 View details Germany Other —
    Ransomware Mundocar.eu id13014 View details Spain Other —
    Ransomware ab*******.org id13013 View details United States Other —
    Ransomware lo***********.com id12921 View details United States Other —
    Ransomware Rul**********.de id12646 View details Germany Other —
    Ransomware Baeckerei-raddatz.de id12580 View details Germany Other —
    Ransomware cli*********.com id12271 View details Colombia Other —
    Ransomware bae************.de id12270 View details Germany Other —
    Ransomware B*****.hu id12182 View details Hungary Other —
    Ransomware Ce***.com id12168 View details Switzerland Other —
    Ransomware Sev********.com id11657 View details United States Other —
    Ransomware Wencor.com id11614 View details United States Other —
    Ransomware Theharriscenter.org id11613 View details United States Other —
    Ransomware Speditionweise.de id11546 View details Germany Other —
    Ransomware Mu*****.eu id11545 View details Spain Other —
    Ransomware Cv*****.com id11544 View details United Kingdom Other —
    Ransomware Vhs-vaterstetten.de id11351 View details Germany Other —
    Ransomware Gascontec.com id11350 View details Germany Energy —
    Ransomware Equatorial Energia id11349 View details Brazil Other —
    Ransomware ****************** id11272 View details Other —
    Ransomware Hu********.ca id11200 View details Canada Other —
    Ransomware Ponoka.ca id11078 View details Canada Other —
    Ransomware Po****.ca id10948 View details Canada Other —
    Ransomware we****.com id10917 View details United States Other —
    Ransomware The************.org id10916 View details United States Other —
    Ransomware Sped**********.de id10915 View details Germany Other —
    Ransomware Forgepresion.com id10800 View details United States Communication / Marketing —
    Ransomware bv*********.com id10799 View details United States Other —
    Ransomware ga*******.com id10798 View details Germany Other —
    Ransomware vh********en.de id10645 View details Germany Other —
    Ransomware For**********.com id10553 View details United States Other —
    Ransomware Maas911.com id10364 View details United States Other —
    Ransomware M********org id10312 View details United States Other —
    Ransomware Ma******.com id10311 View details United States Other —
    Ransomware Gaido-fintzen.com id10023 View details United States Other —
    Ransomware Ga***********.com id9937 View details United States Other —
    Ransomware farwickgrote.de id9815 View details Germany Other —
    Ransomware skncustoms.com id9814 View details Saint Kitts and Nevis Other —
    Ransomware euro2000-spa.it id9813 View details Italy Other —
    Ransomware Thenewtrongroup.com id9812 View details United States Services —
    Ransomware Bankofceylon.co.uk id9811 View details United Kingdom Finance / Legal / Insurance
    Ransomware carranza.on.ca id9810 View details Canada Other —
    Ransomware Arus-gmbh id8275 View details Germany Other —
    Ransomware Sportlab-srl id8274 View details Other —
    Ransomware BONI-PASSAU.DE id8273 View details Germany Other —
    Ransomware lusis-avocats.com id8272 View details France Other —
    Ransomware werk33.com id8271 View details Germany Other —
    Ransomware GRIDINSTALLERS.com id8270 View details Other —
    Ransomware surapon.com id8269 View details Thailand Other —
    Ransomware mps-24.com id8268 View details Germany Other —
    Ransomware gruppomoba.com id8267 View details Other —
    Ransomware stshcpa.com.tw id8266 View details Taiwan, Province of China Other —
    Ransomware ihopmexico.com id8265 View details Mexico Other —
    Ransomware Nicer technology id8264 View details Taiwan, Province of China IT —
    Ransomware binhamoodah.ae id8263 View details United Arab Emirates Other —
    Ransomware first-resources-ltd id8262 View details Indonesia Services —
    Ransomware Sbs-Berlin id8261 View details Germany Other —
    Ransomware imtmro.com id8260 View details United States Other —
    Ransomware INCOBEC id8259 View details Canada Services —
    Ransomware still95.it id8258 View details Italy Other —
    Ransomware gsh-cargo.com id8257 View details Transportation / Travel / Logistics —
    Ransomware flamewarestudios.com id8256 View details United Kingdom Other —
    Ransomware ALEZZELPOWER.com id8255 View details Bahrain Energy —
    Ransomware Notaires.fr id8254 View details France Other
    Ransomware Sonabhy.bf id8253 View details Burkina Faso Other
    Ransomware KVFCU.ORG id8252 View details United States Other