Ransomware Group intelligence

Coinbasecartel

Active

Track Coinbasecartel with 213 published victims and 1 known leak locations in a single intelligence view.

BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Victims 213 Known published victims in this dataset
First discovered 2025-09-15 Earliest victim discovery date
Last discovered 2026-08-23 Latest victim discovery date
Inactive since 54 days Days since the latest known victim
Top country United States 78 victims
Known locations 1 Leak or negotiation infrastructure tracked

Overview

Coinbasecartel is tracked by Breach House as a ransomware group with 213 published victims.

United States is currently the most targeted country in this dataset.

1 known leak locations are currently associated with this group.

Leak Status Distribution

  • Leaked 6 2.8%
  • Pending 206 96.7%
  • Deleted 1 0.5%

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (1)

    Label Type Availability Links
    Leak location 1 Onion service Down checked 3h ago fjg4zi4opkxkvdz7mvwp7h6goe4tcby3hhkrz43pht4j3vakhy75znyd.onion

    Top Activity Sectors (17)

    Victims (213)

    Search, filter and paginate the victim timeline for Coinbasecartel. Showing 1–100 of 213.

    Type Target Discovered Country Business Category Intel Link Leak status
    Ransomware Westwing Group SE id32061 View details Germany Services pending
    Ransomware Integrated Health Systems id31938 View details United States — pending
    Ransomware RXPE Group id31939 View details China — leaked
    Ransomware Tower Insurance id31940 View details New Zealand — pending
    Ransomware Flecha Bus id31941 View details Argentina — pending
    Ransomware OTEIS Conseil & Ingénierie id31942 View details France — pending
    Ransomware Longhorn Investments id31943 View details — pending
    Ransomware Kessler Creative id31944 View details United States — pending
    Ransomware Klasko Immigration Law Partners id31945 View details United States — pending
    Ransomware Patel id31946 View details United States — pending
    Ransomware Abacus Advisors id31947 View details — pending
    Ransomware LifeBank Microfinance Foundation id31948 View details Philippines — pending
    Ransomware PT Perusahaan Jamu Air Mancur id31949 View details Indonesia — pending
    Ransomware PT. Bank Perekonomian Rakyat Bintan id31950 View details Indonesia — pending
    Ransomware Crowe id31884 View details United States — leaked
    Ransomware Advanced Engineering Consultants id31885 View details — pending
    Ransomware Turner and Townsend id31713 View details United Kingdom Construction / Real Estate pending
    Ransomware Serruya private equity id31714 View details United States Finance / Legal / Insurance pending
    Ransomware Sweet Water Holdings id31715 View details United States — pending
    Ransomware Hitachi High-Tech id31667 View details Japan Manufacturing / Engineering pending
    Ransomware CEN and Cenelec id31129 View details Belgium NGOs / Associations pending
    Ransomware MIM Fertility id31130 View details United Kingdom Healthcare / Pharma pending
    Ransomware M. B. Kahn Construction Co. id31131 View details United States Construction / Real Estate pending
    Ransomware Xs Cad id31132 View details United States IT pending
    Ransomware Accesso id31017 View details United Kingdom IT deleted
    Ransomware Caterpillar id30706 View details United States Manufacturing / Engineering pending
    Ransomware Colliers Real Estate id30700 View details United States Construction / Real Estate pending
    Ransomware PanasonicAero id30584 View details Japan Manufacturing / Engineering pending
    Ransomware Axiom GlobalNEW id30559 View details United States Finance / Legal / Insurance pending
    Ransomware Demand.io id29833 View details United States IT pending
    Ransomware Cambridge Mobile Telematics id29834 View details United States IT pending
    Ransomware Demand.ioNEW id29655 View details IT pending
    Ransomware Cambridge Mobile TelematicNEW id29656 View details United States IT pending
    Ransomware Cambridge Mobile TelematicsNEW id29570 View details United States IT pending
    Ransomware Siveco - id29374 View details France Finance / Legal / Insurance pending
    Ransomware Openmind networks id29375 View details United Kingdom Telecommunications pending
    Ransomware Pragmatic Solutions id29376 View details Services pending
    Ransomware Zywave id29184 View details United States Finance / Legal / Insurance pending
    Ransomware Grafana id29185 View details United States Other pending
    Ransomware Buenos Aires Software id29119 View details Argentina Other pending
    Ransomware Jozef Stefan Institute (IJS) id29050 View details Slovenia Manufacturing / Engineering pending
    Ransomware Alpinion id29051 View details Korea, Republic of Healthcare / Pharma pending
    Ransomware Tab Service id29052 View details Germany Other pending
    Ransomware Cass information Systems id29053 View details United States Telecommunications pending
    Ransomware Dreyfuss Williams & Associates CO LPA id23755 View details United States Finance / Legal / Insurance pending
    Ransomware Marlborough Partners id28028 View details United Kingdom Finance / Legal / Insurance pending
    Ransomware Kementerian Pertanian id28671 View details Indonesia Public Sector pending
    Ransomware Sea Telecom Br id28672 View details Brazil Telecommunications pending
    Ransomware Precision Coating id28673 View details United States Manufacturing / Engineering pending
    Ransomware Integer Holdings id28674 View details United States IT pending
    Ransomware Sanna Web id28401 View details Peru — pending
    Ransomware Peru LNG (Hunt LNG Operating Company) id28675 View details Peru Energy pending
    Ransomware Aptim id28676 View details United States Energy pending
    Ransomware SIG.biz id28724 View details Switzerland Manufacturing / Engineering pending
    Ransomware Commscope id28725 View details United States Telecommunications pending
    Ransomware Playmates Toys id28726 View details Hong Kong Manufacturing / Engineering pending
    Ransomware Engie id28727 View details France Energy pending
    Ransomware ASTM Group id28290 View details United States Manufacturing / Engineering pending
    Ransomware Securitevolfeu id28288 View details France Services pending
    Ransomware Altpro id28287 View details Croatia Manufacturing / Engineering pending
    Ransomware McCuaig and associates Engineering id28286 View details Canada Manufacturing / Engineering pending
    Ransomware Evict them for me id28285 View details United States Finance / Legal / Insurance pending
    Ransomware Canada Goose - with id28232 View details Canada Retail / E-commerce pending
    Ransomware Lacoste - with id28231 View details France Retail / E-commerce pending
    Ransomware The Epoch Times id28235 View details United States Other pending
    Ransomware UOM University id28230 View details Malta Education pending
    Ransomware Vluznet id28229 View details United States IT pending
    Ransomware Epoch Times id28228 View details United States Other pending
    Ransomware Superintendency of territorial planning id28227 View details Ecuador Public Sector pending
    Ransomware GL Steel id28226 View details Poland Manufacturing / Engineering pending
    Ransomware Wayne Brothers Construction id28225 View details United States Construction / Real Estate pending
    Ransomware Questivity id28224 View details United States IT pending
    Ransomware Millenium Packaging id28223 View details United States Manufacturing / Engineering pending
    Ransomware Kemenpppa id28222 View details Indonesia Public Sector pending
    Ransomware Rogiken / institute of Science Tokyo id28221 View details Japan Other pending
    Ransomware La Maison Bleue France id28220 View details France Education pending
    Ransomware Sampol id28219 View details Spain Energy pending
    Ransomware Astreya id28218 View details United States IT pending
    Ransomware Cognizant id28217 View details United States IT pending
    Ransomware Flash Charm INC - (IDERA) id28209 View details United States IT pending
    Ransomware Helzberg id28095 View details United States Retail / E-commerce pending
    Ransomware Ralph Lauren id28094 View details United States Retail / E-commerce pending
    Ransomware Carters id28093 View details United States Retail / E-commerce pending
    Ransomware Scholle IPN id28027 View details United States Manufacturing / Engineering pending
    Ransomware Balfour Beatty id28026 View details United Kingdom Construction / Real Estate pending
    Ransomware KEB id28025 View details Germany Manufacturing / Engineering pending
    Ransomware Correios id28024 View details Brazil Transportation / Travel / Logistics pending
    Ransomware EasTech id28023 View details Taiwan, Province of China Manufacturing / Engineering pending
    Ransomware Idera - id28022 View details IT pending
    Ransomware JBS Brazil - Sample uploaded id28012 View details Brazil Agriculture / Food pending
    Ransomware Marlborough Partners - 1 TB data id28011 View details United Kingdom Finance / Legal / Insurance pending
    Ransomware Scholle IPN - 1.7 TB Data id28010 View details Switzerland Manufacturing / Engineering pending
    Ransomware Idera - 1.5 TB data id28009 View details United States IT pending
    Ransomware RAKS Sp. z o.o. b Leaked id27837 View details Poland IT pending
    Ransomware PC SOFT FRANCE - Leaked id27836 View details France IT pending
    Ransomware PC SOFT FRANCE - Leaked data id27752 View details France IT pending
    Ransomware Net Solace id27751 View details United States IT pending
    Ransomware Posiflex id27750 View details Taiwan, Province of China Manufacturing / Engineering pending
    Ransomware Dronena id27749 View details Spain Services pending
    Ransomware Siveco id27748 View details Romania IT pending