Ransomware Group intelligence
Coinbasecartel
ActiveTrack Coinbasecartel with 228 published victims and 1 known leak locations in a single intelligence view.
Overview
Coinbasecartel is tracked by Breach House as a ransomware group with 228 published victims.
United States is currently the most targeted country in this dataset.
1 known leak locations are currently associated with this group.
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (1)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 1 | Onion service | Down checked 56m ago | fjg4zi4opkxkvdz7mvwp7h6goe4tcby3hhkrz43pht4j3vakhy75znyd.onion |
Top Activity Sectors (17)
- IT 33
- Services 22
- Communication / Marketing 22
- Manufacturing / Engineering 21
- Not identified 20
- Finance / Legal / Insurance 16
- Construction / Real Estate 12
- Healthcare / Pharma 11
- Telecommunications 8
- Transportation / Travel / Logistics 8
- Energy 7
- Retail / E-commerce 7
- Public Sector 4
- Education 2
- NGOs / Associations 1
- Agriculture / Food 1
- Hospitality / Food & Beverage / Tourism 1
Typical Attacks (10)
▼MITRE ATT&CK does not currently catalogue Coinbasecartel, so this is our assessment of the techniques it uses, drawn from public reporting. The techniques themselves, and every "what that means" definition below, come from MITRE ATT&CK v19.2. Confidence: medium. Treat it as orientation, not attribution.
-
T1059.001 PowerShell Execution
What they do: coinbasecartel uses PowerShell scripts to execute malicious commands and stage ransomware payloads across compromised systems.
What that means: Adversaries may abuse PowerShell commands and scripts for execution.
-
What they do: coinbasecartel modifies registry run keys to ensure ransomware execution persists across reboots.
What that means: Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key.
-
T1685 Disable or Modify Tools Defense Impairment
What they do: coinbasecartel disables security tools like EDR and AV by terminating processes or modifying system configurations to evade detection.
What that means: Adversaries may disable, degrade, or tamper with security tools or applications (e.g., endpoint detection and response (EDR) tools, intrusion detection systems (IDS), antivirus, logging agents, sensors, etc.) to impair or reduce visibility of defensive capabilities.
-
T1027.013 Encrypted/Encoded File Stealth
What they do: coinbasecartel encodes victim data with symmetric encryption keys before exfiltration to protect stolen information.
What that means: Adversaries may encrypt or encode files to obfuscate strings, bytes, and other specific patterns to impede detection.
-
T1070.004 File Deletion Stealth
What they do: coinbasecartel deletes Volume Shadow Copies and backup directories via system commands to prevent data recovery.
What that means: Adversaries may delete files left behind by the actions of their intrusion activity.
-
T1018 Remote System Discovery Discovery
What they do: coinbasecartel uses remote system discovery to map network topology and identify additional targets for infection.
What that means: Adversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for Lateral Movement from the current system.
-
T1135 Network Share Discovery Discovery
What they do: coinbasecartel performs network share discovery to identify accessible SMB shares for lateral movement and victim targeting.
What that means: Adversaries may look for folders and drives shared on remote systems as a means of identifying sources of information to gather as a precursor for Collection and to identify potential systems of interest for Lateral Movement.
-
T1560.001 Archive via Utility Collection
What they do: coinbasecartel archives victim data using utility tools prior to encryption to facilitate exfiltration and extortion.
What that means: Adversaries may use utilities to compress and/or encrypt collected data prior to exfiltration.
-
T1486 Data Encrypted for Impact Impact
What they do: coinbasecartel encrypts victim files using custom ransomware binaries to maximize impact and force ransom payments.
What that means: Adversaries may encrypt data on target systems or on large numbers of systems in a network to interrupt availability to system and network resources.
-
T1491.001 Internal Defacement Impact
What they do: coinbasecartel performs internal defacement by replacing victim files with ransom notes and altered content.
What that means: An adversary may deface systems internal to an organization in an attempt to intimidate or mislead users, thus discrediting the integrity of the systems.
Victims (228)
Search, filter and paginate the victim timeline for Coinbasecartel. Showing 1–100 of 228.
| Type | Target | Discovered | Country | Business Category | Intel Link |
|---|---|---|---|---|---|
| Ransomware | Westwing Group SE id32061 View details | Germany | Services | ||
|
Westwing Group SE is a German services-sector organization operating within the professional and service industries, with business activities focused on enterprise service delivery and related operational support. The entity is cataloged in this threat-intelligence index under the listing type ransomware victim, associated with the threat actor coinbasecartel. This designation reflects the intelligence assessment linking Westwing Group SE to a ransomware incident involving coinbasecartel, without disclosing unverified technical details such as stolen data, ransom terms, or confirmed breach specifics. The record provides context for security teams monitoring service-sector entities in Germany and assessing risks tied to identified threat actors. Neutral treatment ensures factual representation aligned with available intelligence sources. |
|||||
| Ransomware | Westwing Group SE id32061 View details | Germany | Services | ||
|
[AI generated] Westwing Group SE is a German e-commerce company specializing in home and living products. Founded in 2011 and headquartered in Munich, Germany, it operates an online platform offering curated furniture, décor, and lifestyle products. The company serves customers across multiple European markets and combines an inspiration-driven shopping experience with a members-only model, targeting design-conscious consumers seeking premium home furnishings. |
|||||
| Ransomware | Integrated Health Systems id31938 View details | United States | — | ||
|
[AI generated] N/A |
|||||
| Ransomware | RXPE Group id31939 View details | China | — | ||
|
[AI generated] N/A |
|||||
| Ransomware | Tower Insurance id31940 View details | New Zealand | — | ||
|
[AI generated] Tower Insurance is a New Zealand-based insurance company offering a range of personal and business insurance products, including home, contents, car, travel, and commercial coverage. Founded in 1869, it operates primarily in New Zealand and the Pacific Islands. Tower is listed on the New Zealand Stock Exchange and is known for its digital-first approach, providing customers with online policy management and claims services. |
|||||
| Ransomware | Flecha Bus id31941 View details | Argentina | — | ||
|
[AI generated] Flecha Bus is an Argentine intercity bus company operating in the passenger transportation industry. Founded in the mid-20th century, it provides long-distance coach services connecting Buenos Aires with various provinces across Argentina. Known for offering multiple service categories including standard and premium seating options, Flecha Bus is one of the prominent operators in Argentina's extensive national road transport network. |
|||||
| Ransomware | OTEIS Conseil & Ingénierie id31942 View details | France | — | ||
|
[AI generated] OTEIS Conseil & Ingénierie is a French engineering and consulting firm specializing in building and infrastructure design. Operating in France, the company provides technical expertise across disciplines including structural engineering, fluids, electricity, and project management. It serves sectors such as real estate, public works, and urban development, supporting both public and private clients throughout project lifecycle phases. |
|||||
| Ransomware | Longhorn Investments id31943 View details | — | |||
|
[AI generated] N/A |
|||||
| Ransomware | Kessler Creative id31944 View details | United States | — | ||
|
[AI generated] N/A |
|||||
| Ransomware | Klasko Immigration Law Partners id31945 View details | United States | — | ||
|
[AI generated] Klasko Immigration Law Partners is a US-based immigration law firm headquartered in Philadelphia, Pennsylvania. The firm specializes in business immigration law, assisting corporations and individuals with employment-based visas, green cards, and compliance matters. It serves multinational companies, healthcare organizations, and academic institutions, providing legal counsel on navigating US immigration regulations and workforce mobility challenges. |
|||||
| Ransomware | Patel id31946 View details | United States | — | ||
|
[AI generated] N/A The name "Patel" is too generic to identify a specific company with reliable information. It is a common surname and business name used by numerous unrelated entities across many industries and countries. Please provide additional context such as the full company name, industry, or country to allow for an accurate description. |
|||||
| Ransomware | Abacus Advisors id31947 View details | — | |||
|
[AI generated] N/A |
|||||
| Ransomware | LifeBank Microfinance Foundation id31948 View details | Philippines | — | ||
|
[AI generated] LifeBank Microfinance Foundation is a nonprofit microfinance institution operating in the Philippines. It provides financial services, including small loans, savings programs, and livelihood assistance, primarily to low-income individuals and underserved communities. The organization aims to promote financial inclusion and economic empowerment by offering accessible credit and support to micro-entrepreneurs who lack access to traditional banking services. |
|||||
| Ransomware | PT Perusahaan Jamu Air Mancur id31949 View details | Indonesia | — | ||
|
[AI generated] PT Perusahaan Jamu Air Mancur is an Indonesian company operating in the traditional herbal medicine industry. Based in Solo, Central Java, it manufactures and distributes jamu, a traditional Indonesian herbal remedy, along with related health and wellness products. Founded in 1963, the company is one of Indonesia's well-known herbal medicine producers, serving both domestic and export markets across Southeast Asia. |
|||||
| Ransomware | PT. Bank Perekonomian Rakyat Bintan id31950 View details | Indonesia | — | ||
|
[AI generated] PT. Bank Perekonomian Rakyat Bintan is an Indonesian rural bank, known as a Bank Perkreditan Rakyat or BPR, operating in the Bintan regency of Riau Islands province, Indonesia. It provides basic financial services including savings, deposits, and credit facilities primarily to local communities, small businesses, and micro-enterprises. As a rural bank, it operates under supervision of the Indonesian Financial Services Authority, OJK, serving the local economy. |
|||||
| Ransomware | Crowe id31884 View details | United States | — | ||
|
[AI generated] Crowe is a public accounting, consulting, and technology firm headquartered in the United States. It provides audit, tax, advisory, risk, and performance services to clients across various industries, including financial services, healthcare, and government. Crowe operates globally through its membership in Crowe Global, a network of independent accounting and advisory firms spanning over 140 countries. |
|||||
| Ransomware | Advanced Engineering Consultants id31885 View details | — | |||
|
[AI generated] N/A |
|||||
| Ransomware | Turner and Townsend id31713 View details | United Kingdom | Construction / Real Estate | ||
|
Turner and Townsend is a global consultancy business operating in the construction and real estate sector, providing services in the United Kingdom. The company offers a range of services including project management, cost management and consulting. Turner and Townsend was listed as a ransomware victim associated with coinbasecartel. |
|||||
| Ransomware | Turner and Townsend id31713 View details | United Kingdom | Construction / Real Estate | ||
|
[AI generated] Turner and Townsend is a global professional services company headquartered in the United Kingdom. Founded in 1946, it operates in the construction, real estate, infrastructure, and natural resources sectors. The firm provides project management, cost management, and programme management services. It operates in over 50 countries, serving both public and private sector clients across major capital investment programmes worldwide. |
|||||
| Ransomware | Serruya private equity id31714 View details | Israel | Finance / Legal / Insurance | ||
|
Serruya private equity is a private equity firm based in Israel, operating in the finance, legal, and insurance sectors. The company provides investment and financial services to its clients. Serruya private equity was listed as a ransomware victim associated with coinbasecartel. |
|||||
| Ransomware | Serruya private equity id31714 View details | Israel | Finance / Legal / Insurance | ||
|
[AI generated] Serruya Private Equity is a Canadian private equity firm based in Toronto, Ontario. Founded by the Serruya family, known for their background in the franchise and consumer goods industry, the firm focuses on investments in consumer brands, retail, and food and beverage sectors. The company acquires and grows established brands, leveraging operational expertise to drive value creation across its portfolio companies in North America. |
|||||
| Ransomware | Serruya private equity id31714 View details | United States | Finance / Legal / Insurance | ||
|
[AI generated] Serruya Private Equity is a Canadian private equity firm based in Toronto, Ontario. Founded by the Serruya family, known for their background in the franchise and consumer goods industry, the firm focuses on investments in consumer brands, retail, and food and beverage sectors. The company acquires and grows established brands, leveraging operational expertise to drive value creation across its portfolio companies in North America. |
|||||
| Ransomware | Sweet Water Holdings id31715 View details | — | |||
|
[AI generated] N/A |
|||||
| Ransomware | Sweet Water Holdings id31715 View details | United States | — | ||
|
[AI generated] N/A |
|||||
| Ransomware | Hitachi High-Tech id31667 View details | Japan | Manufacturing / Engineering | ||
|
Hitachi High-Tech is a Japanese company that operates in the manufacturing and engineering sector, offering a range of products and services. The company is headquartered in Japan and has a global presence. Hitachi High-Tech was listed as a ransomware victim associated with coinbasecartel |
|||||
| Ransomware | Hitachi High-Tech id31667 View details | Japan | Manufacturing / Engineering | ||
|
[AI generated] Hitachi High-Tech is a Japanese technology company headquartered in Tokyo, Japan, and a subsidiary of Hitachi Ltd. It operates in the high-technology and precision equipment industry, specializing in semiconductor manufacturing equipment, analytical and medical instruments, and industrial systems. The company serves sectors including healthcare, electronics, and scientific research, supplying solutions globally across manufacturing and laboratory environments. |
|||||
| Ransomware | CEN and Cenelec id31129 View details | Belgium | NGOs / Associations | ||
|
CEN and Cenelec are European organizations that develop and publish standards for various industries. Located in Belgium, they operate in the sector of NGOs and associations, offering standardization services to their members. CEN and Cenelec were listed as ransomware victims associated with coinbasecartel. |
|||||
| Ransomware | CEN and Cenelec id31129 View details | Belgium | NGOs / Associations | ||
|
[AI generated] CEN (European Committee for Standardization) and CENELEC (European Committee for Electrotechnical Standardization) are European standardization organizations headquartered in Brussels, Belgium. They develop and publish voluntary technical standards across industries including engineering, manufacturing, energy, and electrotechnical sectors. Their standards facilitate trade, safety, and interoperability across European Union and European Economic Area member states. |
|||||
| Ransomware | MIM Fertility id31130 View details | United Kingdom | Healthcare / Pharma | ||
|
MIM Fertility is a healthcare organization based in the United Kingdom, operating within the medicine sector. The entity provides fertility services, supporting individuals and families in their reproductive health journeys. MIM Fertility was listed as a ransomware victim associated with coinbasecartel |
|||||
| Ransomware | MIM Fertility id31130 View details | United Kingdom | Healthcare / Pharma | ||
|
[AI generated] MIM Fertility is a US-based fertility clinic network specializing in reproductive medicine and assisted reproductive technologies. The company provides services such as in vitro fertilization, egg freezing, preimplantation genetic testing, and fertility preservation. Operating within the healthcare and reproductive medicine industry, MIM Fertility focuses on personalized patient care and works with fertility specialists to help individuals and couples achieve pregnancy. |
|||||
| Ransomware | M. B. Kahn Construction Co. id31131 View details | United States | Construction / Real Estate | ||
|
M. B. Kahn Construction Co. is a US-based construction company operating in the construction and real estate sector, providing various services. The company is involved in construction projects across the United States. M. B. Kahn Construction Co. was listed as a ransomware victim associated with coinbasecartel. |
|||||
| Ransomware | M. B. Kahn Construction Co. id31131 View details | United States | Construction / Real Estate | ||
|
[AI generated] M. B. Kahn Construction Co. is a general contracting and construction management firm based in the United States, headquartered in Columbia, South Carolina. Founded in 1926, the company operates primarily across the southeastern United States. It serves sectors including commercial, industrial, healthcare, education, and government markets, delivering services such as design-build, preconstruction planning, and facility construction. |
|||||
| Ransomware | Xs Cad id31132 View details | United States | IT | ||
|
Xs Cad is an IT company based in the US, offering various services. The company operates in the information technology sector, providing solutions to its clients. Xs Cad was listed as a ransomware victim associated with coinbasecartel |
|||||
| Ransomware | Xs Cad id31132 View details | United States | IT | ||
|
[AI generated] N/A |
|||||
| Ransomware | Accesso id31017 View details | United Kingdom | IT | ||
|
Accesso is a technology company based in the United Kingdom, operating in the IT sector. The company provides various technology solutions and services. Accesso was listed as a ransomware victim associated with coinbasecartel. |
|||||
| Ransomware | Accesso id31017 View details | United Kingdom | IT | ||
|
[AI generated] Accesso is a UK-based technology company specializing in ticketing, queuing, and guest experience solutions for the leisure, entertainment, and attractions industry. It provides software platforms that help theme parks, ski resorts, cultural venues, and live events manage ticket sales, virtual queuing, and visitor engagement. The company operates globally, serving clients across North America, Europe, and beyond. |
|||||
| Ransomware | Caterpillar id30706 View details | United States | Manufacturing / Engineering | ||
|
Caterpillar is a leading American manufacturer of heavy equipment, machinery, and engines, operating globally from its headquarters in the United States. The company offers a wide range of products and services to various sectors, including construction, mining, and energy. Caterpillar was listed as a ransomware victim associated with coinbasecartel |
|||||
| Ransomware | Caterpillar id30706 View details | United States | Manufacturing / Engineering | ||
|
[AI generated] Caterpillar Inc. is an American multinational corporation headquartered in Irving, Texas. It is the world's leading manufacturer of construction and mining equipment, diesel and natural gas engines, industrial gas turbines, and diesel-electric locomotives. Operating in over 190 countries, Caterpillar serves industries including construction, mining, energy, and transportation through its equipment, financial services, and aftermarket parts divisions. |
|||||
| Ransomware | Colliers Real Estate id30700 View details | United States | Construction / Real Estate | ||
|
Colliers Real Estate is a global commercial real estate services company operating in the US, providing services such as property management, leasing, and investment sales to the construction and real estate sector. The company offers a wide range of services to its clients, including advisory and transaction services. Colliers Real Estate was listed as a ransomware victim associated with coinbasecartel |
|||||
| Ransomware | Colliers Real Estate id30700 View details | United States | Construction / Real Estate | ||
|
[AI generated] Colliers International is a global commercial real estate services company headquartered in Toronto, Canada. It operates across more than 60 countries, offering services including property management, investment sales, leasing, valuation, and advisory. The firm serves corporate, institutional, and private clients across office, industrial, retail, and residential property sectors, making it one of the largest real estate services firms worldwide. |
|||||
| Ransomware | PanasonicAero id30584 View details | Japan | Manufacturing / Engineering | ||
|
Panasonic.aero is a subsidiary of Panasonic, a Japanese multinational company, operating in the manufacturing and engineering sector. The company is based in Japan and offers various products and services. Panasonic.aero is involved in the development and manufacturing of aviation-related products. It was listed as a ransomware victim associated with coinbasecartel |
|||||
| Ransomware | PanasonicAero id30584 View details | Japan | Manufacturing / Engineering | ||
|
[AI generated] Panasonic Avionics Corporation, commonly known as Panasonic Aero, is a US-based subsidiary of Panasonic Corporation specializing in in-flight entertainment and connectivity systems for commercial airlines. The company designs and supplies seatback screens, Wi-Fi connectivity, and cabin management solutions. Headquartered in Lake Forest, California, it serves major global airlines and operates within the aerospace and aviation technology industry. |
|||||
| Ransomware | Axiom GlobalNEW id30559 View details | United States | Finance / Legal / Insurance | ||
|
Axiomglobal.com is a US-based company operating in the finance, legal, and insurance sectors, offering various services to its clients. The company is headquartered in the United States and provides a range of financial and legal solutions. Axiomglobal.com was listed as a ransomware victim associated with coinbasecartel |
|||||
| Ransomware | Axiom GlobalNEW id30559 View details | United States | Finance / Legal / Insurance | ||
|
[AI generated] N/A |
|||||
| Ransomware | Demand.io id29833 View details | United States | IT | ||
|
[AI generated] Demand.io is a technology company based in the United States that operates in the e-commerce and artificial intelligence space. It develops AI-powered shopping tools and browser extensions designed to help consumers find deals, coupons, and product recommendations while shopping online. The company focuses on enhancing the online shopping experience through data-driven insights and personalized assistance for retail consumers. |
|||||
| Ransomware | Cambridge Mobile Telematics id29834 View details | United States | IT | ||
|
[AI generated] Cambridge Mobile Telematics (CMT) is an American telematics technology company headquartered in Cambridge, Massachusetts. It provides mobile-based driving analytics and safety solutions to insurers, rideshares, fleets, and enterprises. Using smartphone sensors and AI, CMT measures driving behavior to help reduce accidents and improve road safety. Its DriveWell platform is widely used in the insurance telematics industry globally. |
|||||
| Ransomware | Demand.ioNEW id29655 View details | IT | |||
|
[AI generated] N/A |
|||||
| Ransomware | Cambridge Mobile TelematicNEW id29656 View details | United States | IT | ||
|
[AI generated] Cambridge Mobile Telematics (CMT) is a US-based telematics technology company headquartered in Cambridge, Massachusetts. It develops mobile sensing and data analytics platforms that measure driving behavior to improve road safety and reduce vehicle crashes. Its technology is used by insurers, rideshare companies, and fleets to assess risk and reward safe driving through usage-based insurance and fleet management solutions. |
|||||
| Ransomware | Cambridge Mobile TelematicsNEW id29570 View details | United States | IT | ||
|
[AI generated] Cambridge Mobile Telematics (CMT) is a US-based technology company headquartered in Cambridge, Massachusetts. It operates in the telematics and insurtech industry, providing mobile sensing and data analytics solutions. CMT specializes in measuring driving behavior using smartphone sensors and AI to help insurers, fleets, and enterprises improve road safety and reduce risk through usage-based insurance and driver safety programs. |
|||||
| Ransomware | Siveco - id29374 View details | France | Finance / Legal / Insurance | ||
|
[AI generated] Siveco is a French software company specializing in computerized maintenance management systems (CMMS) and enterprise asset management (EAM) solutions. Founded in France, the company operates internationally, offering software and services to help organizations manage industrial maintenance, infrastructure, and assets. Its clients span sectors such as energy, transportation, manufacturing, and public utilities across Europe, Africa, and Asia. |
|||||
| Ransomware | Openmind networks id29375 View details | United Kingdom | Telecommunications | ||
|
[AI generated] Openmind Networks is an Irish telecommunications software company specializing in signaling and messaging solutions for mobile network operators. Founded in Dublin, Ireland, the company develops products for SS7, Diameter, and SMS firewall technologies, helping carriers manage and secure signaling traffic. Their solutions address roaming, fraud prevention, and network interoperability, serving telecom operators globally while maintaining headquarters in Ireland. |
|||||
| Ransomware | Pragmatic Solutions id29376 View details | Services | |||
|
[AI generated] N/A |
|||||
| Ransomware | Zywave id29184 View details | United States | Finance / Legal / Insurance | ||
|
[AI generated] Zywave is a US-based software company headquartered in Milwaukee, Wisconsin. It operates in the insurance technology sector, providing cloud-based software solutions to insurance brokers, carriers, and agencies. Its platform offers tools for sales enablement, client delivery, analytics, and agency management. Zywave serves thousands of insurance professionals across North America, helping them streamline operations and improve client engagement. |
|||||
| Ransomware | Grafana id29185 View details | United States | Other | ||
|
We can cause you more damage then you would ever imagine,contact us. |
|||||
| Ransomware | Buenos Aires Software id29119 View details | Argentina | Other | ||
|
[AI generated] N/A |
|||||
| Ransomware | Jozef Stefan Institute (IJS) id29050 View details | Slovenia | Manufacturing / Engineering | ||
|
[AI generated] Jozef Stefan Institute (IJS) is Slovenia's leading research institution, headquartered in Ljubljana. It operates across multiple scientific disciplines including physics, chemistry, biochemistry, electronics, information technology, and environmental sciences. Founded in 1949, it conducts fundamental and applied research, hosts numerous national and international projects, and collaborates with academic and industrial partners. It also plays a key role in educating postgraduate researchers in Slovenia. |
|||||
| Ransomware | Alpinion id29051 View details | Korea, Republic of | Healthcare / Pharma | ||
|
[AI generated] Alpinion is a South Korean medical device company specializing in the development and manufacture of ultrasound imaging systems and transducers. Founded in 2010 as a spin-off from Samsung, the company serves healthcare providers globally, offering diagnostic ultrasound solutions for radiology, cardiology, and point-of-care applications. Alpinion is headquartered in Seoul, South Korea, and operates internationally across multiple markets. |
|||||
| Ransomware | Tab Service id29052 View details | Germany | Other | ||
|
[AI generated] N/A |
|||||
| Ransomware | Cass information Systems id29053 View details | United States | Telecommunications | ||
|
[AI generated] Cass Information Systems is a US-based company specializing in payment and information services. It provides freight invoice processing, auditing, and payment solutions, along with utility and telecom expense management. Operating primarily in the financial technology and business process outsourcing industry, Cass serves large corporations across North America and globally, helping clients manage and analyze invoice data to optimize spending and operational efficiency. |
|||||
| Ransomware | Dreyfuss Williams & Associates CO LPA id23755 View details | United States | Finance / Legal / Insurance | ||
|
[AI generated] N/A |
|||||
| Ransomware | Marlborough Partners id28028 View details | United Kingdom | Finance / Legal / Insurance | ||
|
[AI generated] Marlborough Partners is a UK-based independent corporate finance advisory firm specialising in mergers and acquisitions, private equity transactions, and strategic advisory services. The firm primarily works with mid-market companies, providing guidance on buyouts, disposals, fundraising, and growth strategies. It operates within the financial services and investment banking sector, serving clients across Europe and beyond. |
|||||
| Ransomware | Kementerian Pertanian id28671 View details | Indonesia | Public Sector | ||
|
[AI generated] Kementerian Pertanian is the Ministry of Agriculture of Indonesia, a government institution responsible for formulating and implementing agricultural policies. It oversees food crop production, horticulture, livestock, and plantation sectors. The ministry aims to achieve national food security, improve farmer welfare, and boost agricultural exports. It operates under the Indonesian central government and coordinates with regional agricultural agencies across the country. |
|||||
| Ransomware | Sea Telecom Br id28672 View details | Brazil | Telecommunications | ||
|
[AI generated] N/A |
|||||
| Ransomware | Precision Coating id28673 View details | United States | Manufacturing / Engineering | ||
|
[AI generated] N/A There are multiple companies operating under the name "Precision Coating" across various industries and countries, and without additional context such as location or sector, I cannot reliably identify a specific organization to provide an accurate and factual description without risking confusion or misinformation. |
|||||
| Ransomware | Integer Holdings id28674 View details | United States | IT | ||
|
[AI generated] Integer Holdings is a US-based medical device manufacturer headquartered in Frisco, Texas. The company specializes in producing advanced technologies for the medical, non-medical, and portable medical markets, including batteries, power systems, and implantable components. It serves original equipment manufacturers across cardiac, neuromodulation, and vascular sectors, making it a key supplier in the global medical device industry. |
|||||
| Ransomware | Sanna Web id28401 View details | Peru | — | ||
|
[AI generated] N/A |
|||||
| Ransomware | Peru LNG (Hunt LNG Operating Company) id28675 View details | Peru | Energy | ||
|
[AI generated] Peru LNG, operated by Hunt LNG Operating Company, is an energy company engaged in the liquefaction and export of natural gas in Peru. It operates a liquefied natural gas plant in Pampa Melchorita on the Peruvian coast, processing gas from the Camisea fields. The company exports LNG primarily to international markets, making it a key player in Peru's hydrocarbon and energy export sector. |
|||||
| Ransomware | Aptim id28676 View details | United States | Energy | ||
|
$krb5pa$23$APTIM.COM$APTIM.COM$$9936cd67a6d3d8560aaa25bb4a7a03b0bb8dfbbdbac8fed06e9262c41dce5ee567d0f7b52928d3626e43c0a7cfac4fb1a9b90887 $krb5pa$23$aptim.com$aptim.com$f7a8e75a2c6d3610fe9f4b34bec2a... |
|||||
| Ransomware | SIG.biz id28724 View details | Switzerland | Manufacturing / Engineering | ||
|
[AI generated] N/A |
|||||
| Ransomware | Commscope id28725 View details | United States | Telecommunications | ||
|
[AI generated] CommScope is an American telecommunications infrastructure company headquartered in Hickory, North Carolina. It designs and manufactures network infrastructure solutions including cables, connectivity systems, wireless equipment, and data center infrastructure. The company serves telecommunications providers, enterprises, and government clients worldwide. Founded in 1976, CommScope operates globally across the broadband, wireless, and enterprise networking industries. |
|||||
| Ransomware | Playmates Toys id28726 View details | Hong Kong | Manufacturing / Engineering | ||
|
[AI generated] Playmates Toys is a Hong Kong-based toy manufacturer and distributor founded in 1966. The company operates in the consumer goods and toy industry, specializing in the design, production, and marketing of action figures, dolls, and interactive toys. It is widely recognized for producing licensed products based on popular entertainment franchises, including Teenage Mutant Ninja Turtles and Star Trek, distributing its products globally across major retail markets. |
|||||
| Ransomware | Engie id28727 View details | France | Energy | ||
|
[AI generated] Engie is a French multinational energy company headquartered in Paris, France. It operates across the electricity generation, natural gas distribution, and renewable energy sectors. The company provides energy services to individuals, businesses, and local authorities worldwide, with activities spanning power production, infrastructure management, and energy efficiency solutions. Engie is active in over 70 countries globally. |
|||||
| Ransomware | ASTM Group id28290 View details | United States | Manufacturing / Engineering | ||
|
[AI generated] N/A |
|||||
| Ransomware | Securitevolfeu id28288 View details | France | Services | ||
|
[AI generated] N/A |
|||||
| Ransomware | Altpro id28287 View details | Croatia | Manufacturing / Engineering | ||
|
[AI generated] N/A |
|||||
| Ransomware | McCuaig and associates Engineering id28286 View details | Canada | Manufacturing / Engineering | ||
|
[AI generated] N/A |
|||||
| Ransomware | Evict them for me id28285 View details | United States | Finance / Legal / Insurance | ||
|
[AI generated] N/A |
|||||
| Ransomware | Canada Goose - with id28232 View details | Canada | Retail / E-commerce | ||
|
www.canadagoose.com is the official website of Canada Goose Inc., a Canadian retail apparel and fashion company headquartered in Toronto, Ontario, Canada. The brand sells luxury performance outerwear and related clothing for men, women, and children, including parkas, lightweight jackets, rainwear, and other seasonal apparel. Its site also supports direct e-commerce, store information, and brand communications for customers in Canada and other markets. The company was listed as a ransomware victim associated with coinbasecartel. |
|||||
| Ransomware | Lacoste - with id28231 View details | France | Retail / E-commerce | ||
|
Lacoste.com is the official online platform of Lacoste S.A., a French designer fashion brand founded in 1933 and headquartered in Paris, Ile-de-France. The site offers men's, women's, and kids' polos, clothing, shoes, watches, bags, fragrances, and sportswear for global customers. As a leading retail and e-commerce entity in the fashion sector, Lacoste serves nearly 100 countries with its signature green crocodile logo. The company was listed as a ransomware victim associated with the threat actor coinbasecartel. |
|||||
| Ransomware | The Epoch Times id28235 View details | United States | Other | ||
|
[AI generated] The Epoch Times is a American media company founded in 2000 by John Tang and other Falun Gong practitioners. It operates as a multi-platform news outlet publishing print and digital content in multiple languages across numerous countries. The company is known for promoting conservative viewpoints and has been associated with spreading misinformation. It operates primarily in the United States with a significant global reach. |
|||||
| Ransomware | UOM University id28230 View details | Malta | Education | ||
|
[AI generated] N/A |
|||||
| Ransomware | Vluznet id28229 View details | United States | IT | ||
|
[AI generated] N/A |
|||||
| Ransomware | Epoch Times id28228 View details | United States | Other | ||
|
[AI generated] Epoch Times is an American media company founded in 2000 by Chinese-American Falun Gong practitioners. It operates newspapers, websites, and video content across multiple countries, publishing in numerous languages. The company covers news, politics, health, and culture, but has drawn scrutiny from researchers and platforms for spreading misinformation and promoting far-right narratives. It is headquartered in New York, USA. |
|||||
| Ransomware | Superintendency of territorial planning id28227 View details | Ecuador | Public Sector | ||
|
[AI generated] N/A |
|||||
| Ransomware | GL Steel id28226 View details | Poland | Manufacturing / Engineering | ||
|
[AI generated] N/A |
|||||
| Ransomware | Wayne Brothers Construction id28225 View details | United States | Construction / Real Estate | ||
|
[AI generated] N/A |
|||||
| Ransomware | Questivity id28224 View details | United States | IT | ||
|
[AI generated] N/A |
|||||
| Ransomware | Millenium Packaging id28223 View details | United States | Manufacturing / Engineering | ||
|
[AI generated] N/A |
|||||
| Ransomware | Kemenpppa id28222 View details | Indonesia | Public Sector | ||
|
[AI generated] Kemenpppa, short for Kementerian Pemberdayaan Perempuan dan Perlindungan Anak, is an Indonesian government ministry responsible for empowering women and protecting children. Operating in Indonesia, it develops and oversees policies related to gender equality, women's rights, child protection, and social welfare. The ministry works to eliminate discrimination, violence, and exploitation affecting women and children across the country. |
|||||
| Ransomware | Rogiken / institute of Science Tokyo id28221 View details | Japan | Other | ||
|
[AI generated] Rogiken is a research organization affiliated with the Institute of Science Tokyo, a Japanese national university formed through the merger of Tokyo Institute of Technology and Tokyo Medical and Dental University. It operates in Japan within the academic and scientific research sector, focusing on advanced engineering, natural sciences, and interdisciplinary studies. The institute supports innovation, technology development, and collaboration between academia and industry. |
|||||
| Ransomware | La Maison Bleue France id28220 View details | France | Education | ||
|
[AI generated] N/A |
|||||
| Ransomware | Sampol id28219 View details | Spain | Energy | ||
|
[AI generated] Sampol is a Spanish engineering and services company headquartered in Mallorca, Spain. It operates in the energy, industrial, and infrastructure sectors, offering services such as electrical installations, renewable energy solutions, facility management, and maintenance. The company works across multiple countries, primarily in Spain and international markets, serving both public and private clients in areas including smart grids, sustainability, and industrial automation. |
|||||
| Ransomware | Astreya id28218 View details | United States | IT | ||
|
[AI generated] Astreya is a US-based IT managed services company headquartered in Sunnyvale, California. It provides technology workforce solutions, IT support, infrastructure management, and digital workplace services to large enterprises. Operating primarily in the information technology services industry, Astreya partners with major technology firms globally, delivering staffing and managed IT services across multiple countries while maintaining its core operations in the United States. |
|||||
| Ransomware | Cognizant id28217 View details | United States | IT | ||
|
[AI generated] Cognizant is a multinational information technology and professional services company headquartered in Teaneck, New Jersey, USA. It operates in the IT services and consulting industry, offering digital transformation, technology, and business process outsourcing services. Founded in 1994, Cognizant serves clients across healthcare, financial services, manufacturing, and retail sectors globally, with major delivery centers in India. |
|||||
| Ransomware | Flash Charm INC - (IDERA) id28209 View details | United States | IT | ||
|
[AI generated] Flash Charm Inc is a software company associated with Idera, Inc., a US-based technology firm headquartered in Houston, Texas. Idera develops and provides database management, developer tools, and test management software solutions. Its products support database administrators and developers across multiple platforms. Flash Charm Inc appears to operate as a subsidiary or affiliated entity within Idera's broader portfolio of software brands serving enterprise IT markets. |
|||||
| Ransomware | Helzberg id28095 View details | United States | Retail / E-commerce | ||
|
[AI generated] Helzberg Diamonds is a American retail jewelry company headquartered in North Kansas City, Missouri. Founded in 1915, it operates a chain of jewelry stores across the United States, selling diamonds, engagement rings, wedding bands, and fine jewelry. The company is a subsidiary of Berkshire Hathaway, having been acquired in 1995. Helzberg operates hundreds of retail locations in shopping malls and centers nationwide. |
|||||
| Ransomware | Ralph Lauren id28094 View details | United States | Retail / E-commerce | ||
|
[AI generated] Ralph Lauren Corporation is an American fashion and lifestyle company headquartered in New York City. Founded in 1967 by designer Ralph Lauren, it designs, markets, and distributes luxury apparel, accessories, home furnishings, and fragrances. Operating globally across North America, Europe, and Asia, its portfolio includes brands such as Polo Ralph Lauren, Ralph Lauren Purple Label, and Lauren Ralph Lauren. |
|||||
| Ransomware | Carters id28093 View details | United States | Retail / E-commerce | ||
|
[AI generated] Carter's is a leading American children's apparel brand headquartered in Atlanta, Georgia. Founded in 1865, the company designs, sources, and markets clothing, accessories, and related products for babies and young children. It operates through multiple retail channels including its own stores, e-commerce platforms, and wholesale partnerships. Carter's also owns the OshKosh B'gosh brand and sells products across the United States, Canada, and internationally. |
|||||
| Ransomware | Scholle IPN id28027 View details | United States | Manufacturing / Engineering | ||
|
[AI generated] Scholle IPN is a global packaging company headquartered in the United States. It specializes in flexible packaging solutions, including bag-in-box systems, spouted pouches, and aseptic packaging primarily for food, beverage, and industrial liquid markets. The company serves customers across multiple industries worldwide and operates manufacturing facilities in North America, Europe, Asia, and beyond. |
|||||
| Ransomware | Balfour Beatty id28026 View details | United Kingdom | Construction / Real Estate | ||
|
[AI generated] Balfour Beatty is a leading international infrastructure group headquartered in the United Kingdom. The company operates in the construction, engineering, and infrastructure services industry, delivering projects across transportation, power, buildings, and civil engineering sectors. It works across the UK, United States, and other international markets, serving government, public sector, and private clients on major infrastructure and construction programs. |
|||||