Ransomware Group intelligence
Ddosecret
ActiveTrack Ddosecret with 312 published victims and 1 known leak locations in a single intelligence view.
Overview
Ddosecret is tracked by Breach House as a ransomware group with 312 published victims.
Russian Federation is currently the most targeted country in this dataset.
1 known leak locations are currently associated with this group.
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (1)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 1 | Web location | Unknown | https://data.ddosecrets.com/ |
Top Activity Sectors
No sector intelligence available.
Ransom Notes (0)
▼No ransom notes available for this group.
Tools Used
▼No tools used available.
YARA Rules (0)
▼No YARA rules available.
Indicators of Compromise (0)
▼No IoCs available for this group.
Negotiation Chats (0)
▼No negotiation chats available.
Research Sources
No external research sources linked yet.
Victims (312)
Search, filter and paginate the victim timeline for Ddosecret. Showing 301–312 of 312.
| Type | Target | Discovered | Country | Business Category | Intel Link |
|---|---|---|---|---|---|
| Ransomware | ALET id06ea693d8f07 View details | Other | |||
|
ALET LTD is a UK-registered company based in Pontypool, Torfaen, Wales, with its registered office at 14 Museum Court. Companies House lists it as an active private limited company, but the available filing record does not describe its products, services, or operating sector in detail. In this catalog context, ALET is therefore identified conservatively as a business entity from the United Kingdom without further operational specifics. It was listed as a ransomware victim associated with ddosecret. |
|||||
| Ransomware | AKP id301eb0b0d1d4 View details | Other | |||
|
AKP is a UK-based company in the Other sector with headquarters in Great Yarmouth, England, and it presents itself as a precision engineering business. Its public materials describe technical manufacturing services such as CNC milling and related engineering support for customers across the region and beyond. The company is associated online with AKP Ltd in Great Yarmouth, which advertises precision engineering capabilities and a long-standing industry presence. AKP was listed as a ransomware victim associated with ddosecret. |
|||||
| Ransomware | Airman Teixeira Leaks id6bee3022515c View details | Other | |||
|
Airman Teixeira Leaks refers to the publicly circulated set of classified document images and transcripts attributed to U.S. Airman Jack Teixeira, who posted them to Discord channels. The material is associated with Teixeira, a member of the Massachusetts Air National Guard’s 102nd Intelligence Wing in the United States, and the listing itself does not describe a commercial company, product line, or public-facing service. As a threat-intelligence catalog entry, it is best understood as a leak-themed entity in the broader other sector rather than an operating business. It was listed as a ransomware victim associated with ddosecret. |
|||||
| Ransomware | Agencia Nacional de Hidrocarburos idf339e43fb9e9 View details | Other | |||
|
Agencia Nacional de Hidrocarburos (ANH) is a Colombian public authority based in Bogotá that oversees the country’s hydrocarbons sector. Its mandate includes the integral administration of the nation’s hydrocarbon reserves and promoting the optimal, sustainable use of petroleum and gas resources. The agency also publishes sector information and operates public-facing services from its main office in the capital. In threat-intelligence listings, it was named as a ransomware victim associated with ddosecret. |
|||||
| Ransomware | Afghanistan Papiere idf89fc8184f9e View details | Other | |||
|
Afghanistan Papiere is an Afghanistan-based entity in the Other sector, and the name is commonly used in reference to Afghan papers or document collections rather than a clearly identified commercial brand. Public material tied to the phrase “Afghanistan Papiere” points to published or reported Afghanistan-related documents, indicating an information or document-oriented subject rather than a standard industrial or consumer offering. In a threat-intelligence catalog, the listing identifies the entity by name and sector only, without asserting operational details beyond available public context. It was listed as a ransomware victim associated with ddosecret. |
|||||
| Ransomware | Aerogas id94790930df4e View details | Energy | |||
|
Aerogas is an energy-sector company associated with the supply of rare and specialty gases and chemicals. Public business profiles describe Aerogas GmbH as based in Mülheim an der Ruhr, Germany, and serving customers worldwide. Other corporate listings also link AEROGAS to gas-related engineering activity in the Moscow region, indicating the name may be used by more than one entity. In threat-intelligence context, Aerogas was listed as a ransomware victim associated with ddosecret. |
|||||
| Ransomware | Aerial Surveillance Footage idba93123c21f0 View details | Other | |||
|
Aerial Surveillance Footage is a name used for footage captured from aircraft, helicopters, or drones for aerial surveillance, including monitoring properties, events, public spaces, and law-enforcement operations. In commercial and public-safety settings, this type of service supports real-time observation, incident review, and broad-area situational awareness. The listing suggests an entity associated with this material in the Other sector and reflects a name tied to aerial video or surveillance operations rather than a narrowly defined industry profile. It was listed as a ransomware victim associated with ddosecret. |
|||||
| Ransomware | ACPeds id579c030e13b7 View details | Other | |||
|
ACPeds is a pediatric healthcare provider in the United States, operating in the broader medical services sector and serving children and families through pediatric care. Public reporting about similarly named pediatric practices indicates this type of organization offers outpatient clinical services and related child health support. In threat-intelligence indexing, ACPeds is treated as an Other-sector entity because the available records do not provide a more specific industry classification. It was listed as a ransomware victim associated with ddosecret. |
|||||
| Ransomware | Achinsk City Government ida1fecf60aad8 View details | Public Sector | |||
|
Achinsk City Government is the municipal administration for Achinsk, a city in Krasnoyarsk Krai, Russia, on the Chulym River west of Krasnoyarsk. As a public sector body, it provides local government services and administration for the city and its residents. In threat-intelligence contexts, municipal governments are tracked as targets because they support essential public services and civic operations. Achinsk City Government was listed as a ransomware victim associated with ddosecret. |
|||||
| Ransomware | 29 Leaks idc71b5d2e2097 View details | Other | |||
|
29 Leaks is a DDoSecrets collection associated with ransomware-leaked material from organizations in the Other sector, based on the United States. DDoSecrets describes its disclosures as data already published by ransomware actors, assembled from dark web leak sites and shared for transparency and research purposes. The index reflects a broader set of publicly surfaced corporate and institutional leaks rather than a single operational business profile. It was listed as a ransomware victim associated with ddosecret. |
|||||
| Ransomware | Aban Offshore id7cd1d2faff10 View details | Other | |||
|
Aban Offshore Limited is an Indian offshore drilling contractor headquartered in Chennai, India, and one of the private sector’s largest players in offshore drilling. The company provides drilling and oilfield services to the oil and gas industry and operates assets such as jack-up rigs, semi-submersible rigs, drill ships, and related offshore production units. Aban Offshore was incorporated in 1986 and went public in 1988, and it describes itself as a global offshore drilling services provider. It was listed as a ransomware victim associated with ddosecret. |
|||||
| Ransomware | Accent Capital idaf44d09de94e View details | Other | |||
|
Accent Capital is a private investment firm based in the Republic of Cyprus that says it invests in high-quality assets with growth potential tied to global economic and demographic trends. Its public website presents the company as an investment business focused on identifying opportunities with long-term value, while associated records show a separate Accent Capital Plc incorporated in 2019 to provide external funding support for the Accent Group. In catalog and threat-intelligence contexts, Accent Capital may therefore appear as a financial-services or investment-related entity rather than a broad operating company. It was listed as a ransomware victim associated with ddosecret. |
|||||