Daixin

Brand design and packaging solutions agency. ID 22289

Communicare, Inc. has been a premier provider of behavioral health services in Kentucky's heartland since 1967. ID 22288

Insurance Office of America (IOA) is a premier, full-service insurance agency dedicated to delivering bespoke insurance solutions since 1988. We’re one of the USA’s fastest-growing agencies. ID 22287

Established by Larry Gagosian in Los Angeles in 1980, Gagosian is a global gallery specializing in modern and contemporary art that employs more than three hundred people at eighteen exhibition spaces across the United States, Europe, and Asia. ID 22286

acadianambulance.com is the website of Acadian Ambulance Service, an employee-owned private ambulance and medical transport provider based in Louisiana, United States. The company offers emergency and non-emergency patient transport, critical care transport, and related healthcare and support services across a multi-state service area, with operations in Louisiana, Texas, Tennessee, and Mississippi. Its site also includes patient billing, records, and contact resources for customers and referring facilities. In threat-intelligence catalogs, acadianambulance.com was listed as a ransomware victim associated with daixin. ID 13469

Acadian Ambulance is an employee-owner private ambulance service that covers most of the state of Louisiana, a large portion of Texas, two counties in Tennessee, and one county in Mississippi. ID 22284

Dubai Municipality is a government body in Dubai, United Arab Emirates, serving the city through municipal administration and public services. Its website describes it as the home of the Government of Dubai and a municipal authority with jurisdiction over city services, while related pages note offerings such as service centers, veterinary clinics, abattoirs, and recycling centers. It also provides digital access through a mobile app for municipal services and city information. The entity was listed as a ransomware victim associated with daixin. ID 12881

Dubai Municipality is the Government of Dubai municipal body with jurisdiction over city services and the upkeep of facilities in the Emirate of Dubai, United Arab Emirates and reports directly to the Dubai Executive Council. ID 22283

Omni Hotels & Resorts is an American hotel company based in Dallas, Texas, operating more than 50 hotels and resorts across the United States and Canada. Its website promotes stays for vacation, wedding, and business travel, reflecting a hospitality portfolio that serves leisure and commercial guests. The brand spans hotels and resorts in the hospitality, food and beverage, and tourism sectors. It was listed as a ransomware victim associated with daixin. ID 11654

Omni Hotels & Resorts is an American privately held, international luxury hotel company based in Dallas, Texas. The company was founded in 1958 as Dunfey Hotels, and operates 50 properties in the United States, Canada, and formerly had a property in Mexico, totaling over 20,010 rooms and employing more than 23,000 people. ID 22282

gogsg.com is the web domain for GSG, also known as Graphic Solutions Group Inc., a U.S. wholesale distributor serving apparel decorating, digital print, electrical sign, and commercial markets. Company profiles indicate it operates in the Services sector and is based in Dallas, Texas. Its customer-facing site is used to present products, ordering, and company contact information. The domain was listed as a ransomware victim associated with daixin. ID 9948

GSG digital printing technologies with a half a century of knowledge and experience in traditional sign, screen printing, embroidery and textile decorating. ID 22281

North Texas Municipal Water District (NTMWD) is a Texas public sector utility based in Wylie, Texas, serving the North Texas region. It provides wholesale treated water, wastewater, and solid waste management services to more than 2 million people across a multi-city service area. NTMWD also operates major water infrastructure, including treatment plants, transmission pipelines, and pump stations, to support essential municipal services. The entity was listed as a ransomware victim associated with daixin. ID 9731

The North Texas Municipal Water District (NTMWD) provides vital wholesale water, wastewater and solid waste management services to more than two million people who call North Texas their home. ID 22280

Bluewater Health is a hospital in Sarnia, Ontario. The hospital now encompasses about 600,000 square feet (56,000 m2). It employs almost 1,800 staff and physicians, along with over 700 volunteers, and is Sarnia—Lambton's largest public sector employer. ID 9338

crhealthcare.org is the website of Columbus Regional Healthcare System, a not-for-profit healthcare provider in Whiteville, North Carolina, serving patients through a licensed 154-bed system. Its services include a network of medical clinics offering primary care, urology, imaging, OB/GYN, and orthopedics, along with physician recruitment and other patient-facing information. The organization presents itself as a patient-first regional health system with accredited hospital services and specialty care. It was listed as a ransomware victim associated with daixin. ID 6798

Columbus Regional Healthcare System has one of the highest volume and most experienced robotic surgical programs in Southeastern North Carolina. ID 22279

hitpromo.net is the website of Hit Promotional Products, a Largo, Florida-based company in the advertising and marketing services sector. It sells promotional products and branded merchandise, describing itself as a one-stop shop with more than 1,400 items and additional marketing services. The company has operated for decades and is headquartered at 7150 Bryan Dairy Road in Largo. It was listed as a ransomware victim associated with daixin. ID 5969

Hit Promotional Products has been a leader in the promotional product industry. As a family-owned business with a long history, Hit Promotional want to build real relationships. ID 22278

bgfoods.com is the website of B&G Foods, Inc., a Parsippany, New Jersey–based American branded foods company. The company manufactures, sells, and distributes a portfolio of shelf-stable and frozen foods across the United States and Canada, including branded grocery products. Its brand portfolio spans a range of consumer food categories and reflects a multi-brand food manufacturing and distribution business. It was listed as a ransomware victim associated with daixin. ID 5410

B&G Foods, Inc. manufactures, sells, and distributes a portfolio of shelf-stable and frozen foods, and household products in the United States, Canada, and Puerto Rico. ID 22277

guardiananalytics.com is associated with the finance, legal, and insurance sector and appears to operate as a business-focused analytics brand serving regulated industries in the United States. Publicly available search results do not provide a detailed company profile for this exact domain, so a precise description of offerings is not verifiable from the sources provided. In threat-intelligence indexing, it is safest to treat the entity as a sector-relevant organization tied to financial-services operations. It was listed as a ransomware victim associated with Daixin. ID 5272

Guardian Analytics is now a part of NICE Actimize, a business of NICE (Nasdaq:NICE). Consistently ranked as number one in the space, NICE Actimize is the largest and broadest provider of financial crime, risk and compliance solutions for regional and global financial institutions, as well as government regulators. With Guardian Analytics, financial institutions build trust, increase competitiveness, improve their customer experience, and scale operations. ID 22276

Astra Daihatsu Motor (ID) is Indonesia's largest car manufacturer by production output and installed capacity, operating in the Automobile Manufacturing industry within West Java and Jakarta. The company serves as the sole distributor and retailer of Daihatsu vehicles in Indonesia, offering a diverse range of family vehicles including the New Terios, All New Xenia, and New Rocky. It has been incorporated since 1978 and remains the second best-selling car brand behind Toyota in the country. Astra Daihatsu Motor (ID) was listed as a ransomware victim associated with the daixin threat actor. ID 4647

PT Astra Daihatsu Motor is an automobile manufacturing company based in Jakarta, Indonesia. It is a joint venture company between Daihatsu, Astra International and Toyota Tsusho. It is the largest car manufacturer in Indonesia by production output and installed capacity, and has been second best-selling car brand behind ID 22275

AirAsia Group, now Capital A, is a Malaysian multinational holding company operating in Malaysia, Indonesia, and Thailand with a portfolio of synergistic travel and lifestyle businesses. It includes AirAsia, the largest low-cost airline in Malaysia by fleet size, offering scheduled domestic and international flights to over 166 destinations across 25 countries. The group provides enterprise travel solutions through its corporate booking platform with multi-user functionality for business clients. AirAsia Group was listed as a ransomware victim associated with the threat actor daixin. ID 4621

AirAsia is a Malaysian multinational low-cost airline headquartered near Kuala Lumpur, Malaysia. It is the largest airline in Malaysia by fleet size and destinations. AirAsia operates scheduled domestic and international flights to more than 165 destinations. ID 22274

medicine.oakbend refers to OakBend Medical Center, a nonprofit healthcare system serving Fort Bend County in the Greater Houston area of Texas, United States. It operates hospital campuses and outpatient locations in Richmond, Sugar Land, Houston, and Wharton, and offers services ranging from family practice and primary care to cardiology, orthopedics, geriatrics, surgery, and related specialty care. OakBend Medical Group describes itself as a multispecialty physician group supporting inpatient and outpatient needs across the region. It was listed as a ransomware victim associated with daixin. ID 4125

OakBend Medical is passionately focused on patient-centered medicine.OakBend Medical Center: 450 Physicians on staff; 1,200 + Employees; 274 Beds ;50+ Locations; 8,500 Annual inpatients; 100,000 Annual outpatients; 40,000 Annual Emergency Room visits ID 22273

No additional victim description available. ID 4061

ista International GmbH provides submetering and billing of water and energy consumption. The Company offers heat allocation, water, and communication meters, installation systems, and smoke detectors. ista International caters their services to property managers, homeowners, and energy utilities worldwide. (over 6,000 ista employees in 22 countries.) ID 3938

Fitzgibbon Hospital is a not-for-profit community hospital in Marshall, Missouri, serving central Missouri with essential health care services. Its offerings include acute care and a range of patient services such as women’s health, OBGYN, and family care. The hospital describes its mission as improving the health of the community through quality, compassionate care and personal attention. It was listed as a ransomware victim associated with daixin. ID 3901

Fitzgibbon Hospital is a leader in central Missouri in providing quality, compassionate care and personal attention to patients. ID 22272

Trib Total Media is a Pennsylvania-based media company headquartered in Tarentum, serving Southwestern Pennsylvania. It delivers news, information, and advertising across multiple counties and provides newspapers, magazines, direct mail, e-newsletters, commercial printing, and digital services. The company also operates Tribune-Review and TribLIVE-branded publications and platforms for local audiences. Trib Total Media was listed as a ransomware victim associated with daixin. ID 3900

Trib Total Media delivers news, information and advertising to portions of Allegheny, Westmoreland, Armstrong and Butler counties in Southwestern Pennsylvania. ID 22271