Ransomware Group intelligence
Cmdorganization
ActiveTrack Cmdorganization with 51 published victims and 2 known leak locations in a single intelligence view.
Overview
Cmdorganization is tracked by Breach House as a ransomware group with 51 published victims.
United States is currently the most targeted country in this dataset.
2 known leak locations are currently associated with this group.
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (2)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 1 | Onion service | Unknown | cmdnkiqjije2tllr3biee2sjgj3i4robg2cbtilbnytdhh2wy3syrlyd.onion |
| Leak location 2 | Web location | Unknown | cmdofficial.com |
Top Activity Sectors
No sector intelligence available.
Ransom Notes (0)
▼No ransom notes available for this group.
Tools Used
▼No tools used available.
YARA Rules (0)
▼No YARA rules available.
Indicators of Compromise (0)
▼No IoCs available for this group.
Negotiation Chats (0)
▼No negotiation chats available.
Research Sources
No external research sources linked yet.
Victims (51)
Search, filter and paginate the victim timeline for Cmdorganization. Showing 1–51 of 51.
| Type | Target | Discovered | Country | Business Category | Intel Link |
|---|---|---|---|---|---|
| Ransomware | Saint George's School id30587 View details | Colombia | Education | — | |
|
SGS Educo is an educational institution based in Colombia, providing various academic programs and services to students. As part of the education sector in Colombia, SGS Educo plays a significant role in the country's educational landscape. It was listed as a ransomware victim associated with cmdorganization. |
|||||
| Ransomware | Saint George's School id30587 View details | Colombia | Education | — | |
|
Saint George's School: a bilingual school in Bogotá with a Cambridge curriculum and EFQM-certified quality. A well-rounded education that helps your child thrive. |
|||||
| Ransomware | Target Energy Solutions id30539 View details | United States | Energy | — | |
|
Target Energy Solutions operates in the energy sector in the US, providing various energy solutions. The company is involved in the energy industry, offering services tailored to meet the needs of its clients. It was listed as a ransomware victim associated with cmdorganization |
|||||
| Ransomware | Target Energy Solutions id30539 View details | United States | Energy | — | |
|
TARGET is a rapidly growing digital oilfield services and solutions company, providing advanced web-based visualization, collaboration and workflow tools to the petrotechnical community. The MEERA platform and its associated products set a new benchmark for the industry, giving teams the ability to work effectively together using the same data sources, regardless of their device, location or domain. |
|||||
| Ransomware | Els for Autism id30511 View details | United States | NGOs / Associations | — | |
|
Els for Autism is a US-based non-governmental organization focused on providing services and support for individuals with autism. The organization operates in the NGOs and associations sector, offering various programs and resources. Els for Autism was listed as a ransomware victim associated with cmdorganization. |
|||||
| Ransomware | Els for Autism id30511 View details | United States | NGOs / Associations | — | |
|
Els for Autism Foundation, founded by Liezl and Ernie Els, offers programs and resources for adults and children with autism spectrum disorder (ASD). The Els Center of Excellence campus is a world-class site hosting leading-edge programs and services for individuals with autism. Based in Jupiter, Florida, The Els Center of Excellence is on track to be a global leader in the field of autism and a leading example of what can be available to individuals on the spectrum. |
|||||
| Ransomware | Golden Star Resources id30494 View details | Ghana | Finance / Legal / Insurance | — | |
|
GSR operates in the finance, legal, and insurance sector in Ghana, providing various services to its clients. As a financial institution, it plays a crucial role in the country's economy. GSR was listed as a ransomware victim associated with cmdorganization. |
|||||
| Ransomware | Golden Star Resources id30494 View details | Ghana | Finance / Legal / Insurance | — | |
|
Wassa is located in south-western Ghana. Golden Star commenced production from the surface operation at Wassa in 2005 and commercial production was achieved at Wassa Underground on January 1, 2017. In early 2018 Wassa transitioned into an underground-focused operation. Thanks to the scale of the historical open pit mining operation the processing plant has significant excess capacity and is currently only running at 70-80% (based on 2020 actuals) utilization. Development of the large inferred mineral resource which comprises the southern Extension zone, was the subject of a Preliminary Economic Assessment which was included in the March 2021 Technical Report. Given the scale of the resource at Wassa, the Company is exploring the potential to increase the mining rate in order to fill the mill. |
|||||
| Ransomware | Finance Yorkshire id30383 View details | United Kingdom | Finance / Legal / Insurance | — | |
|
Finance Yorkshire is a financial services organization based in Yorkshire, GB, operating in the finance, legal, and insurance sector. The company provides financial solutions and support to individuals and businesses. Finance Yorkshire was listed as a ransomware victim associated with cmdorganization. |
|||||
| Ransomware | Finance Yorkshire id30383 View details | United Kingdom | Finance / Legal / Insurance | — | |
|
Finance Yorkshire provides funding solutions for small and medium-sized enterprises (SMEs) located in or planning to relocate to Yorkshire. Their offerings include business loans ranging from £25,000 to £250,000, equity-linked investments, and seedcorn startup finance, with a focus on supporting growth and innovation. The organization aims to invest over £50 million in the region over the next five years, targeting businesses that seek to expand, create jobs, and enhance productivity. With a legacy of successful investments, Finance Yorkshire is dedicated to fostering the development of technology and knowledge-based companies. |
|||||
| Ransomware | Mount Royal University id30317 View details | Canada | Education | — | |
|
The library at Mount Royal University in Calgary, Canada, provides educational resources and services to students and faculty in the education sector. As a key part of the university, the library offers a wide range of materials, research assistance, and study spaces. Mount Royal University library was listed as a ransomware victim associated with cmdorganization |
|||||
| Ransomware | Mount Royal University id30317 View details | Canada | Education | — | |
|
The university was established in 1910. Mount Royal University is a public university in Calgary, Canada. Its programs include bachelor of arts, bachelor of communication, bachelor of health & physical education, bachelor of interior design, bachelor of nursing, and bachelor of science.More than 10TB of data!!! |
|||||
| Ransomware | Medlink Georgia id30111 View details | Georgia | NGOs / Associations | — | |
|
Medlinkga org is a non-governmental organization based in Georgia, providing various services to its community. As an NGO, it operates in the sector of associations, likely focusing on healthcare and medical support. Medlinkga org was listed as a ransomware victim associated with cmdorganization. |
|||||
| Ransomware | Medlink Georgia id30111 View details | Georgia | NGOs / Associations | — | |
|
We have proudly been serving northeast Georgia since 1976. As a federally qualified health center, we are able to offer uninsured and underinsured patients a sliding fee scale. No one is denied services due to lack of income or insurance status.At MedLink Georgia, we strive to provide comprehensive, coordinated, and continuous care to all our patients. We offer a broad array of primary and preventive care services for patients of all ages, including screening, diagnosis, and management of chronic illnesses. |
|||||
| Ransomware | Medlink Georgia id30111 View details | United States | NGOs / Associations | — | |
|
We have proudly been serving northeast Georgia since 1976. As a federally qualified health center, we are able to offer uninsured and underinsured patients a sliding fee scale. No one is denied services due to lack of income or insurance status.At MedLink Georgia, we strive to provide comprehensive, coordinated, and continuous care to all our patients. We offer a broad array of primary and preventive care services for patients of all ages, including screening, diagnosis, and management of chronic illnesses. |
|||||
| Ransomware | Port Angeles Composite id30110 View details | United States | Manufacturing / Engineering | — | |
|
Pacomposite is a US-based company operating in the manufacturing and engineering sector, providing various products and services. The company is involved in the production of composite materials and related engineering solutions. Pacomposite was listed as a ransomware victim associated with cmdorganization. |
|||||
| Ransomware | Port Angeles Composite id30110 View details | United States | Manufacturing / Engineering | — | |
|
Port Angeles Composite LLC (PAC) is a leading supplier of advanced structural composite assemblies and components, serving the global commercial and business aerospace markets. Originally founded in 1996 as Angeles Composite Technologies, PAC was acquired by Honda Aircraft Company in October 2025. The company operates from a state-of-the-art manufacturing facility on Washington State’s Olympic Peninsula, supporting customers such as Boeing, Bombardier, and Honda Aircraft with high-quality composite structures for new aircraft systems. PAC's advanced manufacturing processes and technology ensure the highest quality composite products, offering tailored solutions to meet the unique requirements of each aerospace customer. |
|||||
| Ransomware | Lørenskog kommune id30099 View details | Norway | Public Sector | — | |
|
Lorenskog kommune is a municipality in the county of Viken, Norway, providing various public services to its residents. As a public sector entity, it is responsible for a range of functions, including education, healthcare, and infrastructure. Lorenskog kommune no was listed as a ransomware victim associated with cmdorganization |
|||||
| Ransomware | Lørenskog kommune id30099 View details | Norway | Public Sector | — | |
|
Lørenskog kommune offers a range of services including education, health care, social services, and community development. Their intended clients include residents seeking information on property tax, childcare, and various cultural and recreational activities. The municipality also engages with the public through political meetings and community involvement initiatives. Additionally, Lørenskog kommune celebrates local events and milestones, fostering a sense of community among its residents. |
|||||
| Ransomware | METCO Services, Metco Southeast id30091 View details | United States | Manufacturing / Engineering | — | |
|
Metco Services is a company operating in the manufacturing and engineering sector, based in the United States. The company provides various services to its clients. Metco Services was listed as a ransomware victim associated with cmdorganization |
|||||
| Ransomware | METCO Services, Metco Southeast id30091 View details | United States | Manufacturing / Engineering | — | |
|
Metco Services is a multi-disciplined consulting firm specializing in engineering services for the water and wastewater industry. They provide study, design, and construction engineering services to publicly owned water and wastewater collection and treatment systems. With over 100 years of combined industry experience, their team focuses on efficient system utilization to optimize value. Their clientele includes municipalities in Michigan, Ohio, Pennsylvania, and Florida. |
|||||
| Ransomware | Fidelity Security Group id30051 View details | Colombia | Finance / Legal / Insurance | — | |
|
Fidelitysecurity.co is a Colombian company operating in the finance, legal, and insurance sectors, providing security services. The company is based in Colombia and offers various financial and insurance products. Fidelitysecurity.co was listed as a ransomware victim associated with cmdorganization. |
|||||
| Ransomware | Fidelity Security Group id30051 View details | Colombia | Finance / Legal / Insurance | — | |
|
Excellence in service delivery and implementation are fundamental to our impressive track record. By keeping abreast of the latest trends and technological developments globally, and continuously evolving and innovating, the Group remains a front-runner in the security solutions market. Through a bouquet of services and related products the Group can tailor make a solution for any requirement. |
|||||
| Ransomware | Kohinoor Mills id30033 View details | India | Manufacturing / Engineering | — | |
|
Kohinoor Mills is a manufacturing and engineering company based in India, providing various products and services to its customers. The company operates in the manufacturing sector, catering to the needs of its clients. Kohinoor Mills was listed as a ransomware victim associated with cmdorganization. |
|||||
| Ransomware | Kohinoor Mills id30033 View details | India | Manufacturing / Engineering | — | |
|
Kohinoor Mills Limited is a leading textile manufacturer in Pakistan, established in 1948, specializing in premium fabrics for global brands. The company offers a diverse range of products including western, ethnic, workwear, technical textiles, and upholstery, all produced with a commitment to sustainability and ethical practices. With innovative solutions like 'Showroom in a Box' and the 'FabriK' app, they provide clients with easy access to their extensive fabric library. Kohinoor Mills is dedicated to responsible production, ensuring high-quality standards while advancing sustainability initiatives. |
|||||
| Ransomware | Coldstat Refrigeration id29996 View details | United Kingdom | Transportation / Travel / Logistics | — | |
|
Coldstat is a company operating in the transportation sector in Great Britain, providing services related to travel and logistics. The company is involved in various activities within this sector. Coldstat was listed as a ransomware victim associated with cmdorganization. |
|||||
| Ransomware | Coldstat Refrigeration id29996 View details | United Kingdom | Transportation / Travel / Logistics | — | |
|
Coldstat Refrigeration offers a full range of industry-proven refrigeration services. From large restaurant chains to individual stores and cafes—Coldstat is ready to meet all your needs. The company’s qualified staff will help you determine the best solution based on your individual needs. Coldstat’s refrigeration services include: sales of commercial refrigeration equipment, installation, maintenance and repair, layout planning, custom system design, and removal of old equipment.Translated with DeepL.com (free version) |
|||||
| Ransomware | EON Meditech Pvt id30097 View details | India | Healthcare / Medicine | — | |
|
EON Meditech specializes in innovative medical technology solutions aimed at enhancing patient care and improving healthcare outcomes. Their product offerings include advanced medical devices and software solutions tailored for healthcare providers. The company primarily serves hospitals, clinics, and healthcare professionals looking for cutting-edge technology to streamline operations and enhance patient experiences. EON Meditech is committed to driving advancements in the medical field through research and development. |
|||||
| Ransomware | Union Tractor id30083 View details | United States | Agriculture / Food | — | |
|
Union Tractor Ltd. is an independent business selling aftermarket parts and accessories for construction and transportation equipment. It engages in the distribution of undercarriage components, ground engaging tools, engine and drive train parts, hydraulic system parts, exchange compoUnion Tractor Ltd. is an independent business selling aftermarket parts and accessories for construction and transportation equipment. It engages in the distribution of undercarriage components, ground engaging tools, engine and drive train parts, hydraulic system parts, exchange components, and used parts. The company was founded in 1927 and is headquartered in Nisku, Canada.nents, and used parts. The company was founded in 1927 and is headquartered in Nisku, Canada. |
|||||
| Ransomware | Wall ISD id30077 View details | United States | Other | — | |
|
Wall ISD is an educational institution that serves students in the Wall, Texas area, providing a range of programs and activities for elementary, middle, and high school students. The district emphasizes inclusivity and equal access to education, ensuring that all students, regardless of their background, have the opportunity to participate in school activities. Wall ISD is committed to fostering a supportive learning environment and offers resources for both new and returning students. The intended clients are students and their families within the Wall community. |
|||||
| Ransomware | Pinnacle Re-Tec id30056 View details | United States | Retail / E-commerce | — | |
|
Pinnacle Re-Tec Ltd is a UK-based company specializing in the service, maintenance, repair, reverse engineering, and supply of spare parts for centrifugal pumps and gearboxes. With over 16 years of experience, they provide bespoke solutions focused on cost efficiency and quality assurance across various industries, including oil and gas, power, petrochemical, and water. Their services include pump repairs, testing, and commissioning, catering to both domestic and international clients. Pinnacle Re-Tec is committed to delivering independent advice and support for all brands and types of industrial pumps. |
|||||
| Ransomware | Southern design RV id30054 View details | Australia | — | — | |
|
Southern Design RV is an award-winning caravan dealer located in Ballarat, specializing in both new and used Australian-made caravans. They offer a comprehensive range of services including caravan servicing, spare parts, insurance repairs, and upgrades, ensuring customers receive top-notch support. With a focus on quality and customer satisfaction, their expert team provides competitive finance options and industry-leading warranties. Their product lineup includes various caravan brands such as Design RV, Traveller, York, and Olympic, catering to diverse client needs for adventure and comfort on the road. |
|||||
| Ransomware | New FACOM Co., Ltd. id29806 View details | Japan | Manufacturing / Engineering | — | |
|
Shin FACOM Co., Ltd. supports the efficiency of manufacturing and logistics industries by utilizing automation technology and cutting-edge technologies. We contribute to the realization of next-generation factories by providing production line optimization, robot system implementation, and automation solutions in the medical field. |
|||||
| Ransomware | SeeWriteHear id29593 View details | United Kingdom | Education | — | |
|
SeeWriteHear specializes in providing print and digital accessibility solutions, including Braille, large print, and web accessibility services. Their offerings cater to various industries such as education, government, and publishing, ensuring compliance with usability standards. The company focuses on innovative technology to enhance accessibility for individuals with disabilities. With a commitment to information equality, SeeWriteHear serves clients by creating accessible content and providing consulting and training services. |
|||||
| Ransomware | Lake Washington School District id29367 View details | United States | Education | — | |
|
Founded in 1914, Lake Washington School District is the administrative body responsible for planning and managing public education for 33 elementary, 14 middle, and 9 high schools. It serves communities of Kirkland, Redmond and about half of Sammamish. The company is headquartered in Redmond, Washington. |
|||||
| Ransomware | Lee Law Offices id29381 View details | United States | Finance / Legal / Insurance | — | |
|
Lee Law Offices is a well-established law firm serving clients in North and South Carolina for over 30 years, specializing in personal injury, workers compensation, and social security disability cases. The firm is dedicated to advocating for individuals affected by auto accidents, workplace injuries, and other forms of negligence, ensuring that clients receive the compensation they deserve. With a no-fee guarantee, they focus on representing the best interests of their clients rather than insurance companies or corporations. |
|||||
| Ransomware | Capital Family Physicians id29397 View details | United States | Healthcare / Pharma | — | |
|
Capital Family Physicians provides quality healthcare services for families, focusing on comprehensive care for all ages. They offer same-day appointments and a patient portal for convenient access to medical records and billing. The practice emphasizes pediatric services, ensuring that children's health is prioritized. With over 15 years of experience, they are dedicated to supporting patients through every stage of life. |
|||||
| Ransomware | Hospice Savannah id29447 View details | United States | Healthcare / Pharma | — | |
|
Hospice Savannah provides comprehensive hospice and palliative care services to individuals facing serious illnesses, including specialized programs for pediatric patients and advanced cardiac care. Their services extend to in-home care, nursing home assistance, and inpatient hospice units, ensuring a dignified and comfortable end-of-life experience. |
|||||
| Ransomware | North Dallas Shared Ministries id29518 View details | United States | Education | — | |
|
Now-Forward is a non-profit organization based in Dallas that provides a range of essential services such as financial aid, medical and dental care, food, clothing, and ESL classes to low-income families. Established to effectively serve the urgent needs of the community, they have been a trusted resource for over 40 years, assisting residents facing unexpected life challenges. The organization supports their mission through donations, volunteer work, and partnerships with local entities, ensuring that 96% of their funds are directed toward client services. Their extensive offerings also include tax preparation and school supply assistance, enabling families to achieve greater stability and self-sufficiency. |
|||||
| Ransomware | Stonehenge Therapeutic Community id29223 View details | United Kingdom | Services | — | |
|
Stonehenge Therapeutic Community is dedicated to providing expert services to individuals, families, and communities affected by substance use. Their offerings include addiction medicine and withdrawal support, supportive housing, integrated support and justice, and residential services. The organization emphasizes partnership, support, and advocacy, aiming to help clients learn to live effectively and contribute to society. With a history dating back to 1971, Stonehenge has evolved to offer a full spectrum of residential and community-based programs. |
|||||
| Ransomware | Holy Name of Jesus id29206 View details | United States | Services | — | |
|
The Holy Name of Jesus Catholic Community is a Roman Catholic parish located in Redlands, California, serving over 3,500 families from 14 cities in the East Valley and Banning Pass area. The community focuses on glorifying Christ’s Holy Name by inviting, nourishing, and forming disciples to share the Gospel through prayer, service, and financial support. They offer a variety of worship services, sacraments, and faith programs for all ages, including youth and adult enrichment. The parish is committed to building a future home for their community and engaging in social concerns and creation care initiatives. |
|||||
| Ransomware | Raise the Bottom id29168 View details | United States | Services | — | |
|
Raise The Bottom is an opioid treatment center in Idaho, offering outpatient medication-assisted treatment (MAT) programs and therapy. The center provides services including Suboxone, Methadone, and Vivitrol, with locations in Boise, Nampa, and Pocatello. Their mission is to support Idaho residents in reclaiming their lives from opioid addiction through comprehensive care that involves family and community. With a focus on personalized treatment and a whole-person approach, Raise The Bottom aims to foster lasting recovery and stability for individuals and their families. |
|||||
| Ransomware | WholeHealth Chicago id29162 View details | United States | Healthcare / Pharma | — | |
|
WholeHealth Chicago is a leading healthcare practice specializing in integrative, functional, and alternative medicine. They offer a wide range of services including internal medicine, chiropractic care, nutritional counseling, and various therapies aimed at promoting overall health and well-being. Their intended clients include individuals seeking personalized and holistic approaches to health, particularly those interested in combining conventional and alternative treatments. The practice is known for its patient-centered care, where providers work collaboratively with patients to develop tailored treatment plans. |
|||||
| Ransomware | Houston Eye Associates id29153 View details | United States | Healthcare / Pharma | — | |
|
Houston Eye Associates is a team of board-certified ophthalmologists and board-licensed optometrists with advanced fellowship and specialty training in the fields of ophthalmology and optometry. With 20 locations across Greater Houston, there is a location near you. |
|||||
| Ransomware | Goodstone Group id29143 View details | Australia | Services | — | |
|
Goldberg Coins & Collectibles Inc. is a family-owned business specializing in numismatic auctions and collectibles, with a legacy dating back to 1930. The company offers expert auction services, personal consultations, and has a strong reputation for achieving record-breaking prices for consignors. Their intended clients include coin collectors and investors looking to sell or acquire high-quality numismatic items. With over 80 years of combined experience, Ira and Larry Goldberg provide a professional and personalized service, ensuring client satisfaction and exceptional results. |
|||||
| Ransomware | Ira & Larry Goldberg Coins & Collectibles id29145 View details | United States | Services | — | |
|
Goldberg Coins & Collectibles Inc. is a family-owned business specializing in numismatic auctions and collectibles, with a legacy dating back to 1930. The company offers expert auction services, personal consultations, and has a strong reputation for achieving record-breaking prices for consignors. Their intended clients include coin collectors and investors looking to sell or acquire high-quality numismatic items. With over 80 years of combined experience, Ira and Larry Goldberg provide a professional and personalized service, ensuring client satisfaction and exceptional results. |
|||||
| Ransomware | Advanced Software Products Group id29054 View details | United States | Public Sector | — | |
|
ASPG Inc. specializes in enterprise and mainframe software solutions that focus on secure access, data protection, and system management. Their product offerings include comprehensive cryptography tools, access management solutions, and systems administration utilities tailored for various industries such as education, government, healthcare, and finance. Since 1986, ASPG has been dedicated to providing the IT community with cutting-edge software and support services. |
|||||
| Ransomware | PennEastern Architects id28951 View details | United States | Public Sector | — | |
|
The principals of PennEastern Engineers, LLC are Paul Pasonick, Andrew Pasonick, Michael Amato and Daryl Pawlush. All principals have extensive experience in commercial and residential land developments, municipal projects, sanitary sewer projects, storm water projects, pavement projects, flood control projects and soil erosion and sedimentation control plans. In addition, each has assisted in design, specification writing, cost estimating, project bidding and bid review, construction observation and project management of the various projects. The Principals of PennEastern Architects, LLC are Andrew Pasonick, Emil Jarolen and Norman Manovsky. Design Principal Emil Jarolen has been practicing Architecture since 1974 and has been a Registered Architect in the State of Pennsylvania since 1978. In addition, Mr. Jarolen is Registered as an Architect in the States of Maryland, New York, New Jersey and the District of Columbia. |
|||||
| Ransomware | JG Stewart Construction id28318 View details | Canada | Construction / Real Estate | — | |
|
JG Stewart Construction specializes in providing expert services for the quarry industry, focusing on the crushing, washing, and classifying of aggregates. They offer a wide range of equipment for rent or sale, including crushers, screening plants, and washing gear, catering to the needs of their clients in the aggregate sector. The company is committed to safety, quality, and integrity, ensuring exceptional service and products while also being community-minded. Additionally, they provide safety training seminars to enhance the skills of personnel in the industry. |
|||||
| Ransomware | Cytek Biosciences id28319 View details | United States | Healthcare / Medicine | — | |
|
A biotechnology firm that develops and supplies advanced, cost-effective flow cytometry instruments and related services used worldwide by researchers and clinicians. Its compact systems and streamlined workflows enable high-throughput, single-cell analysis for applications such as cancer immunology, leukemia and lymphoma diagnosis, and transplant monitoring. Distinguished by offering high-end capabilities at lower cost, the company accelerates scientific discovery through technical innovation, exceptional customer support, and a commitment to ethical practices and community engagement. Headquartered in Fremont, California, it has been publicly traded on NASDAQ since 2021. We have 7.36 TB of downloaded data. |
|||||
| Ransomware | Zampell id28320 View details | Italy | Construction / Real Estate | — | |
|
Zampell Ltd is a leading provider of refractory services, offering comprehensive solutions from design to ongoing maintenance. They cater to various industries, including power generation, biomass, fossil fuel, and petrochemicals, ensuring safety and efficiency in their operations. The company specializes in both standard and bespoke refractory products, delivering tailored services to meet client needs. With a commitment to quality and safety, Zampell aims to exceed customer expectations in all aspects of their service. |
|||||