Ransomware Group intelligence
Direwolf
ActiveTrack Direwolf with 252 published victims and 1 known leak locations in a single intelligence view.
BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Overview
Direwolf is tracked by Breach House as a ransomware group with 252 published victims.
United States is currently the most targeted country in this dataset.
1 known leak locations are currently associated with this group.
Leak Status Distribution
252
- Leaked 116 46.0%
- Pending 135 53.6%
- Deleted 1 0.4%
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (1)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 1 | Onion service | Up checked 3h ago | direwolfcdkv5whaz2spehizdg22jsuf5aeje4asmetpbt6ri4jnd4qd.onion |
Top Activity Sectors (16)
- Manufacturing / Engineering 40
- Services 35
- Finance / Legal / Insurance 30
- IT 24
- Healthcare / Pharma 21
- Transportation / Travel / Logistics 14
- Construction / Real Estate 12
- Communication / Marketing 11
- Retail / E-commerce 10
- Not identified 9
- Agriculture / Food 7
- Education 6
- Telecommunications 3
- Public Sector 2
- Energy 2
- Hospitality / Food & Beverage / Tourism 2
Typical Attacks (10)
▼MITRE ATT&CK does not currently catalogue Direwolf, so this is our assessment of the techniques it uses, drawn from public reporting. The techniques themselves, and every "what that means" definition below, come from MITRE ATT&CK v19.2. Confidence: medium. Treat it as orientation, not attribution.
-
T1059.001 PowerShell Execution
What they do: direwolf executes PowerShell scripts to stage payloads and manipulate system processes before encryption.
What that means: Adversaries may abuse PowerShell commands and scripts for execution.
-
T1106 Native API Execution
What they do: direwolf leverages native API calls to interact with Windows services and evade detection during lateral movement.
What that means: Adversaries may interact with the native OS application programming interface (API) to execute behaviors.
-
What they do: direwolf adds malicious registry run keys to ensure persistence across reboots on compromised hosts.
What that means: Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key.
-
T1685 Disable or Modify Tools Defense Impairment
What they do: direwolf disables antivirus tools and security software using registry modifications and service interference.
What that means: Adversaries may disable, degrade, or tamper with security tools or applications (e.g., endpoint detection and response (EDR) tools, intrusion detection systems (IDS), antivirus, logging agents, sensors, etc.) to impair or reduce visibility of defensive capabilities.
-
T1070.004 File Deletion Stealth
What they do: direwolf deletes Volume Shadow Copies and backup folders via vssadmin and command-line tools to prevent recovery.
What that means: Adversaries may delete files left behind by the actions of their intrusion activity.
-
T1018 Remote System Discovery Discovery
What they do: direwolf performs remote system discovery via Nmap scans to map network topology before deploying ransomware.
What that means: Adversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for Lateral Movement from the current system.
-
T1083 File and Directory Discovery Discovery
What they do: direwolf discovers files and directories using Windows Explorer APIs to identify critical data for encryption.
What that means: Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system.
-
T1021.002 SMB/Windows Admin Shares Lateral Movement
What they do: direwolf moves laterally through SMB shares to access additional systems within the victim network.
What that means: Adversaries may use Valid Accounts to interact with a remote network share using Server Message Block (SMB).
-
T1486 Data Encrypted for Impact Impact
What they do: direwolf encrypts victim files using custom symmetric encryption routines targeting business documents and backups.
What that means: Adversaries may encrypt data on target systems or on large numbers of systems in a network to interrupt availability to system and network resources.
-
T1490 Inhibit System Recovery Impact
What they do: direwolf halts critical system recovery processes and service restarts to maximize operational disruption.
What that means: Adversaries may delete or remove built-in data and turn off services designed to aid in the recovery of a corrupted system to prevent recovery.
Ransom Notes (1)
▼The note this group leaves on a compromised machine. Click a filename to read it.
HowToRecoveryFiles.txt
Dear Mr or Ms,
If you are reading this message, it means that:
- your network infrastructure has been compromised
- critical data was leaked
- We decrypted your encrypted files. The anti-leakage system is useless to us. We can provide proof.
- files are encrypted
--------------------------------------------------------------------------
The best and only thing you can do is to contact us
to settle the matter before any losses occurs.
--------------------------------------------------------------------------
We can maintain confidentiality for 3 days for you, during which we will not disclose any information about your intrusion or data leakage.
We can extend the confidentiality period free of charge until we reach an agreement if you contact us within 3 days and communicate effectively with us.
If the confidentiality period expires, we will disclose the relevant information.
We provide complimentary decryption testing services. For specific details, please contact us.
--------------------------------------------------------------------------
We have provided a sample document as proof of our possession of your files and you can download and check it:
- https://gofile.io/d/[snip]
Please be advised that your files are scheduled for public release after 30 working days.
If you want to secure your files, we urge you to reach out to us at your earliest convenience.
--------------------------------------------------------------------------
Contact Details:
- live chat room:
- url:http://direwolf3ddtab5anvhulcelauvoxu2a7l264hqs6vtxtgrqsjfvodid.onion/
- roomID: [snip]
- username: [snip]
- password: [snip]
--------------------------------------------------------------------------
Our official website:
- url:http://direwolfcdkv5whaz2spehizdg22jsuf5aeje4asmetpbt6ri4jnd4qd.onion/
--------------------------------------------------------------------------
How to access .onion website:
1.Download and install TOR Browser https://torproject.org
2.Open it and try to access our onion address
3.Maybe you need to use VPN if it can not open our onion address
Ransom-note text from RansomLook, licensed CC BY 4.0.
Victims (252)
Search, filter and paginate the victim timeline for Direwolf. Showing 1–100 of 252.
| Type | Target | Discovered | Country | Business Category | Intel Link | Leak status |
|---|---|---|---|---|---|---|
| Ransomware | 🇮🇹 Avv Emilio Marco Casali id34036 View details | Italy | Finance / Legal / Insurance | leaked | ||
|
🇮🇹 Avv Emilio Marco Casali Published: 2025-11-21 Company: Avv Emilio Marco Casali Website: https://avvocatocasali.it Industry: Legal Services GDPR: Yes Data Size: 173GB Read More → Ended |
||||||
| Ransomware | 🇸🇬 Kingsford Group id34037 View details | Singapore | Construction / Real Estate | leaked | ||
|
🇸🇬 Kingsford Group Published: 2025-11-20 Company: Kingsford Group Website: https://kingsford.com.sg Industry: Civil Engineering Construction GDPR: No Data Size: 200GB Read More → Ended |
||||||
| Ransomware | 🇲🇾 HCK Capital Group id34038 View details | Malaysia | Finance / Legal / Insurance | leaked | ||
|
🇲🇾 HCK Capital Group Published: 2025-11-20 Company: HCK Capital Group Website: https://hckgroup.my Industry: Investment GDPR: No Data Size: 173GB Read More → Ended |
||||||
| Ransomware | 🇹🇷 Acarlar Ltd id34039 View details | Türkiye | Retail / E-commerce | leaked | ||
|
🇹🇷 Acarlar Ltd Published: 2025-11-20 Company: Acarlar Ltd Website: https://www.acarlar.com.tr Industry: Trade GDPR: Yes Data Size: 70GB Read More → Ended |
||||||
| Ransomware | 🇵🇭 W.L. FOODS id34040 View details | Philippines | Agriculture / Food | leaked | ||
|
🇵🇭 W.L. FOODS Published: 2025-11-20 Company: W.L. FOODS Website: https://www.wlfoods.com.ph Industry: Food & Beverage GDPR: No Data Size: 500GB Read More → Ended |
||||||
| Ransomware | 🇸🇬 MGI Singapore PAC id34041 View details | Singapore | Finance / Legal / Insurance | leaked | ||
|
🇸🇬 MGI Singapore PAC Published: 2025-11-20 Company: MGI Singapore PAC Website: https://www.mgialliance.sg Industry: Accounting Services GDPR: Yes Data Size: 226GB Read More → Ended |
||||||
| Ransomware | 🇸🇬 Akribis Systems id34042 View details | Greece | Manufacturing / Engineering | leaked | ||
|
🇸🇬 Akribis Systems Published: 2025-11-20 Company: Akribis Systems Website: https://akribis-sys.com Industry: Industrial Machinery GDPR: No Data Size: 650GB Read More → Ended |
||||||
| Ransomware | 🇹🇷 Pergamon Status Diş Ticaret A Ş id34043 View details | Türkiye | Finance / Legal / Insurance | pending | ||
|
🇹🇷 Pergamon Status Diş Ticaret A Ş Published: 2025-11-20 Company: Pergamon Status Diş Ticaret A Ş Website: https://www.psdisticaret.com.tr Industry: Banking GDPR: Yes Data Size: 50GB Read More → Ended |
||||||
| Ransomware | 🇹🇷 Anadolu Hastaneleri id34044 View details | Türkiye | Healthcare / Pharma | pending | ||
|
🇹🇷 Anadolu Hastaneleri Published: 2025-11-20 Company: Anadolu Hastaneleri Website: https://anadoluhastaneleri.com Industry: Physicians Clinics GDPR: Yes Data Size: 240GB Read More → Ended |
||||||
| Ransomware | 🇨🇱 Universidad Mayor id34045 View details | Chile | Education | pending | ||
|
🇨🇱 Universidad Mayor Published: 2025-11-20 Company: Universidad Mayor Website: https://www.umayor.cl Industry: Education GDPR: No Data Size: 50GB Read More → Ended |
||||||
| Ransomware | 🇧🇷 Faria Braga Advogados Associados id34046 View details | Brazil | Finance / Legal / Insurance | leaked | ||
|
🇧🇷 Faria Braga Advogados Associados Published: 2025-11-20 Company: Faria Braga Advogados Associados Website: http://www.fariabraga.com.br Industry: Legal Services GDPR: No Data Size: 193GB Read More → Ended |
||||||
| Ransomware | 🇲🇺 INICIA id34047 View details | Myanmar | Agriculture / Food | leaked | ||
|
🇲🇺 INICIA Published: 2025-11-20 Company: INICIA Website: https://www.inicia.mu Industry: Agriculture GDPR: No Data Size: 8GB Read More → Ended |
||||||
| Ransomware | 🇯🇵 MITACHI id34048 View details | Japan | IT | leaked | ||
|
🇯🇵 MITACHI Published: 2025-11-20 Company: MITACHI Website: https://www.mitachi.co.jp Industry: Trade GDPR: No Data Size: 20GB Read More → Ended |
||||||
| Ransomware | 🇺🇸 UPG Enterprises id34049 View details | United States | Other | leaked | ||
|
🇺🇸 UPG Enterprises Published: 2025-11-20 Company: UPG Enterprises Website: https://upgllc.com Industry: Building Materials GDPR: No Data Size: 260GB Read More → Ended |
||||||
| Ransomware | 🇨🇦 Doak Shirreff Lawyers id34050 View details | — | leaked | |||
|
🇨🇦 Doak Shirreff Lawyers Published: 2025-11-20 Company: Doak Shirreff Lawyers Website: https://www.doakshirreff.com Industry: Legal Services GDPR: No Data Size: 70GB Read More → Ended |
||||||
| Ransomware | 🇺🇸 GB Group id34051 View details | United States | Services | leaked | ||
|
🇺🇸 GB Group Published: 2025-11-20 Company: GB Group Website: https://gbgroup.com Industry: Holding Companies GDPR: No Data Size: 20GB Read More → Ended |
||||||
| Ransomware | 🇹🇭 THAIRUNG GROUP id34052 View details | Thailand | Services | pending | ||
|
🇹🇭 THAIRUNG GROUP Published: 2025-11-20 Company: THAIRUNG GROUP Website: https://www.thairunggroup.co.th Industry: automobile business GDPR: No Data Size: 1TB Read More → Ended |
||||||
| Ransomware | 🇬🇧 Health-Insights id34053 View details | United States | Healthcare / Pharma | pending | ||
|
🇬🇧 Health-Insights Published: 2025-11-20 Company: Health-Insights Website: https://www.health-insights.com Industry: Physicians Clinics GDPR: Yes Data Size: 388GB Read More → Ended |
||||||
| Ransomware | 🇵🇪 Medifarma id34054 View details | Peru | Manufacturing / Engineering | leaked | ||
|
🇵🇪 Medifarma Published: 2025-11-20 Company: Medifarma Website: https://www.medifarma.com.pe Industry: Manufacturing GDPR: No Data Size: 300GB Read More → Ended |
||||||
| Ransomware | 🇹🇭 K.M. Packaging id34055 View details | Thailand | Manufacturing / Engineering | leaked | ||
|
🇹🇭 K.M. Packaging Published: 2025-11-20 Company: K.M. Packaging Website: https://kmp.co.th Industry: Manufacturing GDPR: No Data Size: 82GB Read More → Ended |
||||||
| Ransomware | 🇩🇪 EPC Group id34056 View details | United States | Construction / Real Estate | leaked | ||
|
🇩🇪 EPC Group Published: 2025-11-20 Company: EPC Group Website: https://epc.com Industry: Construction GDPR: Yes Data Size: 73GB Read More → Ended |
||||||
| Ransomware | 🇮🇳 IoTechWorld id34057 View details | United States | Construction / Real Estate | leaked | ||
|
🇮🇳 IoTechWorld Published: 2025-11-20 Company: IoTechWorld Website: https://iotechworld.com Industry: Real Estate GDPR: No Data Size: 131GB Read More → Ended |
||||||
| Ransomware | 🇹🇼 YIEH UNITED STEEL CORP id34058 View details | Taiwan, Province of China | Manufacturing / Engineering | leaked | ||
|
🇹🇼 YIEH UNITED STEEL CORP Published: 2025-11-20 Company: YIEH UNITED STEEL CORP Website: https://www.yusco.com.tw Industry: Minerals & Mining GDPR: No Data Size: 30GB Read More → Ended |
||||||
| Ransomware | 🇧🇭 Bin Faqeeh Real Estate id34059 View details | United Arab Emirates | Construction / Real Estate | leaked | ||
|
🇧🇭 Bin Faqeeh Real Estate Published: 2025-11-20 Company: Bin Faqeeh Real Estate Website: https://binfaqeeh.com Industry: Real Estate GDPR: No Data Size: 184GB Read More → Ended |
||||||
| Ransomware | 🇨🇦 TDM Technical Services id34060 View details | Canada | Services | leaked | ||
|
🇨🇦 TDM Technical Services Published: 2025-11-20 Company: TDM Technical Services Website: https://www.tdm.ca Industry: Business Services GDPR: No Data Size: 73GB Read More → Ended |
||||||
| Ransomware | 🇦🇺 Legal Practice Board of Western Australia id34061 View details | Australia | Finance / Legal / Insurance | leaked | ||
|
🇦🇺 Legal Practice Board of Western Australia Published: 2025-11-20 Company: Legal Practice Board of Western Australia Website: https://www.lpbwa.org.au Industry: Legal Services GDPR: No Data Size: 300GB Read More → Ended |
||||||
| Ransomware | 🇮🇳 Wilson International id34062 View details | United States | Manufacturing / Engineering | leaked | ||
|
🇮🇳 Wilson International Published: 2025-11-20 Company: Wilson International Website: https://www.wilsonuniverse.com Industry: Chemicals Products GDPR: No Data Size: 159GB Read More → Ended |
||||||
| Ransomware | 🇹🇭 SMV Thailand id34063 View details | Thailand | Retail / E-commerce | leaked | ||
|
🇹🇭 SMV Thailand Published: 2025-11-20 Company: SMV Thailand Website: https://smvthailand.com Industry: Retail GDPR: No Data Size: 265GB Read More → Ended |
||||||
| Ransomware | 🇮🇹 qualitas-pro id34064 View details | Russian Federation | IT | leaked | ||
|
🇮🇹 qualitas-pro Published: 2025-11-20 Company: qualitas-pro Website: https://qualitas.pro Industry: Finance Audit GDPR: Yes Data Size: 350GB Read More → Ended |
||||||
| Ransomware | 🇹🇼 kiwi86 id34065 View details | Finance / Legal / Insurance | leaked | |||
|
🇹🇼 kiwi86 Published: 2025-11-20 Company: kiwi86 Website: https://www.kiwi86.com Industry: Insurance GDPR: No Data Size: 20GB Read More → Ended |
||||||
| Ransomware | 🇨🇦 Bauerfeind id34006 View details | Canada | Manufacturing / Engineering | leaked | ||
|
🇨🇦 Bauerfeind Published: 2026-01-09 Company: Bauerfeind Website: https://www.bauerfeind.ca Industry: Manufacturing GDPR: Yes Data Size: 43GB Read More → Ended |
||||||
| Ransomware | 🇲🇾 Bina Darulaman Berhad id34007 View details | Malaysia | Construction / Real Estate | pending | ||
|
🇲🇾 Bina Darulaman Berhad Published: 2026-01-04 Company: Bina Darulaman Berhad Website: https://www.bdb.com.my Industry: Civil Engineering Construction GDPR: No Data Size: 500GB Read More → Ended |
||||||
| Ransomware | 🇪🇸 Hydrodiseño id34008 View details | Spain | Manufacturing / Engineering | pending | ||
|
🇪🇸 Hydrodiseño Published: 2026-01-04 Company: Hydrodiseño Website: https://www.hydrodiseno.com Industry: Manufacturing GDPR: Yes Data Size: 487GB Read More → Ended |
||||||
| Ransomware | 🇹🇷 Varimed Medikal id34009 View details | Türkiye | Manufacturing / Engineering | leaked | ||
|
🇹🇷 Varimed Medikal Published: 2026-01-04 Company: Varimed Medikal Website: https://www.varimed.com.tr Industry: Manufacturing GDPR: No Data Size: 2GB Read More → Ended |
||||||
| Ransomware | 🇲🇾 Sunzen Biotech Berhad id34010 View details | United States | Manufacturing / Engineering | leaked | ||
|
🇲🇾 Sunzen Biotech Berhad Published: 2026-01-04 Company: Sunzen Biotech Berhad Website: https://www.sunzengroup.com Industry: Manufacturing GDPR: No Data Size: 108GB Read More → Ended |
||||||
| Ransomware | 🇦🇷 Laurenzano Logistics id34011 View details | Argentina | Transportation / Travel / Logistics | leaked | ||
|
🇦🇷 Laurenzano Logistics Published: 2026-01-04 Company: Laurenzano Logistics Website: https://www.laurenzanologistica.com.ar Industry: Logistics Services GDPR: No Data Size: 100GB Read More → Ended |
||||||
| Ransomware | 🇺🇸 KwikLedgers id34012 View details | United States | IT | leaked | ||
|
🇺🇸 KwikLedgers Published: 2026-01-04 Company: KwikLedgers Website: https://kwikledgers.com Industry: Finance GDPR: No Data Size: 31GB Read More → Ended |
||||||
| Ransomware | 🇫🇷 PernelMedia id34013 View details | Italy | Communication / Marketing | leaked | ||
|
🇫🇷 PernelMedia Published: 2026-01-04 Company: PernelMedia Website: https://pernelmedia.com Industry: Media GDPR: Yes Data Size: 500GB Read More → Ended |
||||||
| Ransomware | 🇲🇾 Guan Chong Berhad id34014 View details | United States | Agriculture / Food | leaked | ||
|
🇲🇾 Guan Chong Berhad Published: 2025-12-22 Company: Guan Chong Berhad Website: https://www.gcbcocoa.com Industry: Food & Beverage GDPR: No Data Size: 1100GB Read More → Ended |
||||||
| Ransomware | 🇹🇭 Office of Public Sector Anti-Corruption Commission id34015 View details | Thailand | Public Sector | pending | ||
|
🇹🇭 Office of Public Sector Anti-Corruption Commission Published: 2025-12-22 Company: Office of Public Sector Anti-Corruption Commission Website: https://www.pacc.go.th Industry: Government GDPR: No Data Size: 200GB Read More → Ended |
||||||
| Ransomware | 🇹🇭 Ranger Investigation Guard id34016 View details | United States | Services | leaked | ||
|
🇹🇭 Ranger Investigation Guard Published: 2025-12-22 Company: Ranger Investigation Guard Website: https://www.ranger1992.com Industry: Business Services GDPR: No Data Size: 80GB Read More → Ended |
||||||
| Ransomware | 🇪🇬 Polaris Parks id34017 View details | United States | Construction / Real Estate | leaked | ||
|
🇪🇬 Polaris Parks Published: 2025-12-22 Company: Polaris Parks Website: https://www.polarisparks.com Industry: Real Estate GDPR: No Data Size: 10GB Read More → Ended |
||||||
| Ransomware | 🇦🇷 Electricidad Panamericana id34018 View details | Argentina | Retail / E-commerce | leaked | ||
|
🇦🇷 Electricidad Panamericana Published: 2025-11-21 Company: Electricidad Panamericana Website: https://www.electricidadpanamericana.com.ar Industry: Wholesale GDPR: No Data Size: 100GB Read More → Ended |
||||||
| Ransomware | 🇲🇾 Meinhardt Malaysia id34019 View details | Germany | Construction / Real Estate | leaked | ||
|
🇲🇾 Meinhardt Malaysia Published: 2025-11-21 Company: Meinhardt Malaysia Website: https://meinhardtgroup.com Industry: Commercial & Residential Construction GDPR: No Data Size: 500GB Read More → Ended |
||||||
| Ransomware | 🇧🇷 Clemar Assessoria e Logística em Comércio Internacional id34020 View details | Brazil | Services | leaked | ||
|
🇧🇷 Clemar Assessoria e Logística em Comércio Internacional Published: 2025-11-21 Company: Clemar Assessoria e Logística em Comércio Internacional Website: https://clemar.net Industry: Consulting and Logistics GDPR: No Data Size: 228GB Read More → Ended |
||||||
| Ransomware | 🇧🇷 Transpedrosa id34021 View details | Brazil | Manufacturing / Engineering | leaked | ||
|
🇧🇷 Transpedrosa Published: 2025-11-21 Company: Transpedrosa Website: https://transpedrosa.com.br Industry: Industrial Machinery GDPR: No Data Size: 335GB Read More → Ended |
||||||
| Ransomware | 🇲🇾 YPC MALAYSIA id34022 View details | Malaysia | Manufacturing / Engineering | leaked | ||
|
🇲🇾 YPC MALAYSIA Published: 2025-11-21 Company: YPC MALAYSIA Website: https://ypcmalaysia.com Industry: Manufacturing GDPR: No Data Size: 66GB Read More → Ended |
||||||
| Ransomware | 🇵🇰 Hyundai Nishat Motor id34023 View details | Pakistan | Manufacturing / Engineering | leaked | ||
|
🇵🇰 Hyundai Nishat Motor Published: 2025-11-21 Company: Hyundai Nishat Motor Website: https://www.hyundai-nishat.com Industry: Automobile Dealers GDPR: No Data Size: 105GB Read More → Ended |
||||||
| Ransomware | 🇻🇪 Coral id34024 View details | Türkiye | IT | leaked | ||
|
🇻🇪 Coral Published: 2025-11-21 Company: Coral Website: https://www.coral.com.ve Industry: Distribuidores GDPR: No Data Size: 160GB Read More → Ended |
||||||
| Ransomware | 🇵🇹 Miguel Veiga, Neiva Santos e Associados. id34025 View details | Portugal | Finance / Legal / Insurance | leaked | ||
|
🇵🇹 Miguel Veiga, Neiva Santos e Associados. Published: 2025-11-21 Company: Miguel Veiga, Neiva Santos e Associados. Website: https://mvns.pt Industry: Legal services GDPR: Yes Data Size: 100GB Read More → Ended |
||||||
| Ransomware | 🇹🇭 Speed Inter Transport id34026 View details | United States | Transportation / Travel / Logistics | leaked | ||
|
🇹🇭 Speed Inter Transport Published: 2025-11-21 Company: Speed Inter Transport Website: https://www.speedth.com Industry: Freight & Logistics Services GDPR: No Data Size: 90GB Read More → Ended |
||||||
| Ransomware | 🇹🇼 Taiwan Flex Electronics id34027 View details | Taiwan, Province of China | Manufacturing / Engineering | leaked | ||
|
🇹🇼 Taiwan Flex Electronics Published: 2025-11-21 Company: Taiwan Flex Electronics Website: https://www.twf.com.tw Industry: Electronics manufacturing services GDPR: No Data Size: 500GB Read More → Ended |
||||||
| Ransomware | 🇮🇩 Purwana Group id34028 View details | Indonesia | Retail / E-commerce | leaked | ||
|
🇮🇩 Purwana Group Published: 2025-11-21 Company: Purwana Group Website: https://bahanagv.co.id Industry: Food & Beverage GDPR: No Data Size: 40GB Read More → Ended |
||||||
| Ransomware | 🇦🇺 Wine Works Australia id34029 View details | Australia | Transportation / Travel / Logistics | leaked | ||
|
🇦🇺 Wine Works Australia Published: 2025-11-21 Company: Wine Works Australia Website: https://www.wineworks.com.au Industry: Logistics Services GDPR: No Data Size: 22GB Read More → Ended |
||||||
| Ransomware | 🇹🇼 台灣東洋國際儀表股份有限公司 id34030 View details | Taiwan, Province of China | Manufacturing / Engineering | leaked | ||
|
🇹🇼 台灣東洋國際儀表股份有限公司 Published: 2025-11-21 Company: 台灣東洋國際儀表股份有限公司 Website: - Industry: Machinery GDPR: No Data Size: 9GB Read More → Ended |
||||||
| Ransomware | 🇬🇧 Bolt Nut Manufacturing id34031 View details | United Kingdom | Finance / Legal / Insurance | leaked | ||
|
🇬🇧 Bolt Nut Manufacturing Published: 2025-11-21 Company: Bolt Nut Manufacturing Website: https://bnml.co.uk Industry: Building Materials GDPR: Yes Data Size: 50GB Read More → Ended |
||||||
| Ransomware | 🇧🇷 Aroeira Salles Advogados id34032 View details | Brazil | Finance / Legal / Insurance | pending | ||
|
🇧🇷 Aroeira Salles Advogados Published: 2025-11-21 Company: Aroeira Salles Advogados Website: https://www.aroeirasalles.com.br Industry: Legal Services GDPR: No Data Size: 460GB Read More → Ended |
||||||
| Ransomware | 🇹🇳 International Freight & Commerce id34033 View details | Tunisia | Transportation / Travel / Logistics | leaked | ||
|
🇹🇳 International Freight & Commerce Published: 2025-11-21 Company: International Freight & Commerce Website: https://ifc.com.tn Industry: Freight & Logistics Services GDPR: No Data Size: 50GB Read More → Ended |
||||||
| Ransomware | 🇸🇬 ksubsea-group id34034 View details | Germany | Services | leaked | ||
|
🇸🇬 ksubsea-group Published: 2025-11-21 Company: ksubsea-group Website: https://www.ksubsea-group.com Industry: Consumer Services GDPR: No Data Size: 215GB Read More → Ended |
||||||
| Ransomware | 🇬🇧 Immigration Advice Service id34035 View details | United Kingdom | Finance / Legal / Insurance | leaked | ||
|
🇬🇧 Immigration Advice Service Published: 2025-11-21 Company: Immigration Advice Service Website: https://iasservices.org.uk Industry: Legal Services GDPR: Yes Data Size: 246GB Read More → Ended |
||||||
| Ransomware | 🇺🇸 Aztec Software id33981 View details | United States | IT | leaked | ||
|
🇺🇸 Aztec Software Published: 2026-08-21 Company: Aztec Software Website: https://www.aztecsoftware.com Industry: Engineering Software GDPR: No Data Size: - Read More → Ended |
||||||
| Ransomware | 🇺🇸 NorthStar id33982 View details | United States | Services | leaked | ||
|
🇺🇸 NorthStar Published: 2026-08-21 Company: NorthStar Website: https://www.cbsnorthstar.com Industry: Enterprise Resource Planning GDPR: No Data Size: 90G Read More → Ended |
||||||
| Ransomware | 🇸🇪 Lifesum id33983 View details | United States | Healthcare / Pharma | leaked | ||
|
🇸🇪 Lifesum Published: 2026-08-19 Company: Lifesum Website: https://lifesum.com Industry: Hospitals & Physicians Clinics GDPR: No Data Size: - Read More → Ended |
||||||
| Ransomware | 🇺🇸 PayUp id33984 View details | United States | Finance / Legal / Insurance | pending | ||
|
🇺🇸 PayUp Published: 2026-08-19 Company: PayUp Website: https://www.payup.com Industry: Financial Software GDPR: No Data Size: - Read More → Ended |
||||||
| Ransomware | 🇺🇸 InfoFlo CRM id33985 View details | United States | IT | leaked | ||
|
🇺🇸 InfoFlo CRM Published: 2026-08-19 Company: InfoFlo CRM Website: https://infoflowsolutions.com Industry: software provider GDPR: No Data Size: 71GB Read More → Ended |
||||||
| Ransomware | 🇺🇸 Photon Health, Inc. id33986 View details | United States | Healthcare / Pharma | leaked | ||
|
🇺🇸 Photon Health, Inc. Published: 2026-08-19 Company: Photon Health, Inc. Website: https://photonhealth.com Industry: Healthcare GDPR: Yes Data Size: - Read More → Ended |
||||||
| Ransomware | 🇸🇪 Wishfully Studios id33987 View details | Sweden | IT | pending | ||
|
🇸🇪 Wishfully Studios Published: 2026-08-17 Company: Wishfully Studios Website: https://wishfully.se/ Industry: Games GDPR: Yes Data Size: - Read More → Ended |
||||||
| Ransomware | 🇺🇸 Arizona State University (ASU) id33988 View details | United States | Education | leaked | ||
|
🇺🇸 Arizona State University (ASU) Published: 2026-08-17 Company: Arizona State University (ASU) Website: https://www.asu.edu/ Industry: Colleges,Universities GDPR: Yes Data Size: - Read More → Ended |
||||||
| Ransomware | 🇬🇧 Eva AI Limited id33989 View details | United States | Services | pending | ||
|
🇬🇧 Eva AI Limited Published: 2026-08-17 Company: Eva AI Limited Website: https://eva.ai/ Industry: Human Resources GDPR: Yes Data Size: - Read More → Ended |
||||||
| Ransomware | 🇦🇺 Mighty Kingdom id33990 View details | United States | Retail / E-commerce | leaked | ||
|
🇦🇺 Mighty Kingdom Published: 2026-08-17 Company: Mighty Kingdom Website: https://www.mightykingdom.com/ Industry: Multimedia, Games GDPR: Yes Data Size: - Read More → Ended |
||||||
| Ransomware | 🇬🇧 BigSpark id33991 View details | United States | Services | leaked | ||
|
🇬🇧 BigSpark Published: 2026-08-10 Company: BigSpark Website: https://bigspark.ai Industry: Business Services GDPR: Yes Data Size: - Read More → Ended |
||||||
| Ransomware | 🇧🇷 Chat Jurídico id33992 View details | Brazil | Finance / Legal / Insurance | leaked | ||
|
🇧🇷 Chat Jurídico Published: 2026-08-10 Company: Chat Jurídico Website: https://chatjuridico.com.br Industry: Law Firms & Legal Services GDPR: No Data Size: - Read More → Ended |
||||||
| Ransomware | 🇺🇸 Swyft Inc. id33993 View details | United States | IT | leaked | ||
|
🇺🇸 Swyft Inc. Published: 2026-08-10 Company: Swyft Inc. Website: https://www.swyft.com Industry: Retail Technology & SaaS GDPR: No Data Size: - Read More → Ended |
||||||
| Ransomware | 🇬🇹 Osmo Wallet id33994 View details | Nigeria | IT | leaked | ||
|
🇬🇹 Osmo Wallet Published: 2026-08-10 Company: Osmo Wallet Website: https://osmomoney.com Industry: FinTech GDPR: Yes Data Size: - Read More → Ended |
||||||
| Ransomware | 🇺🇸 Health Carousel id33995 View details | United States | Services | leaked | ||
|
🇺🇸 Health Carousel Published: 2026-08-10 Company: Health Carousel Website: https://www.healthcarousel.com Industry: Business Services · Ohio GDPR: Yes Data Size: - Read More → Ended |
||||||
| Ransomware | 🇪🇸 Quironsalud id33996 View details | Colombia | Healthcare / Pharma | leaked | ||
|
🇪🇸 Quironsalud Published: 2026-08-10 Company: Quironsalud Website: https://www.quironsalud.com Industry: Hospitals & Physicians Clinics GDPR: Yes Data Size: - Read More → Ended |
||||||
| Ransomware | 🇩🇪 Statista GmbH id33997 View details | Germany | Services | pending | ||
|
🇩🇪 Statista GmbH Published: 2026-08-10 Company: Statista GmbH Website: https://www.statista.com Industry: Data Collection & Internet Portals GDPR: Yes Data Size: - Read More → Ended |
||||||
| Ransomware | 🇪🇸 Nueva Pescanova Group id33998 View details | Spain | Agriculture / Food | leaked | ||
|
🇪🇸 Nueva Pescanova Group Published: 2026-06-12 Company: Nueva Pescanova Group Website: https://www.nuevapescanova.com Industry: Food & Beverage GDPR: Yes Data Size: 300 GB Read More → Ended |
||||||
| Ransomware | 🇹🇭 Did Asia id33999 View details | Thailand | Manufacturing / Engineering | leaked | ||
|
🇹🇭 Did Asia Published: 2026-06-12 Company: Did Asia Website: http://www.didasia.co.th Industry: Automotive Parts GDPR: No Data Size: 260 GB Read More → Ended |
||||||
| Ransomware | 🇨🇴 Clínica Vida id34000 View details | Brazil | Healthcare / Pharma | leaked | ||
|
🇨🇴 Clínica Vida Published: 2026-06-12 Company: Clínica Vida Website: https://www.clinicavida.com Industry: Healthcare Services GDPR: No Data Size: 700 GB Read More → Ended |
||||||
| Ransomware | 🇮🇳 Jewelex id34001 View details | Germany | Manufacturing / Engineering | leaked | ||
|
🇮🇳 Jewelex Published: 2026-06-12 Company: Jewelex Website: https://www.jewelexgroup.com Industry: Manufacturing GDPR: No Data Size: 50 GB Read More → Ended |
||||||
| Ransomware | 🇲🇾 Chemsain Konsultant Sdn Bhd id34002 View details | United States | Construction / Real Estate | pending | ||
|
🇲🇾 Chemsain Konsultant Sdn Bhd Published: 2026-01-13 Company: Chemsain Konsultant Sdn Bhd Website: https://www.chemsain.com Industry: Architecture, Engineering & Design GDPR: No Data Size: 60GB Read More → Ended |
||||||
| Ransomware | 🇲🇾 Perdana Petroleum Berhad id34003 View details | Malaysia | Energy | leaked | ||
|
🇲🇾 Perdana Petroleum Berhad Published: 2026-01-13 Company: Perdana Petroleum Berhad Website: https://www.perdana.my Industry: Energy, Utilities & Waste GDPR: No Data Size: 150GB Read More → Ended |
||||||
| Ransomware | 🇪🇬 Tepco-Group id34004 View details | Japan | Manufacturing / Engineering | leaked | ||
|
🇪🇬 Tepco-Group Published: 2026-01-13 Company: Tepco-Group Website: https://tepco-group.com Industry: Electronics GDPR: No Data Size: 300GB Read More → Ended |
||||||
| Ransomware | 🇦🇪 Mohammad Omar Bin Haider Holding Group id34005 View details | United States | Services | leaked | ||
|
🇦🇪 Mohammad Omar Bin Haider Holding Group Published: 2026-01-09 Company: Mohammad Omar Bin Haider Holding Group Website: https://www.mobhholding.com Industry: Business Services GDPR: No Data Size: 125GB Read More → Ended |
||||||
| Ransomware | 🇵🇪 Interseguro id33951 View details | Peru | Finance / Legal / Insurance | pending | ||
|
🇵🇪 Interseguro Published: 2026-10-13 Company: Interseguro Website: https://www.interseguro.pe/ Industry: Insurance GDPR: No Data Size: 2.5 TB Read More → 21d 17h |
||||||
| Ransomware | 🇧🇷 Softruck id33952 View details | India | Transportation / Travel / Logistics | pending | ||
|
🇧🇷 Softruck Published: 2026-10-04 Company: Softruck Website: https://www.softruck.com/ Industry: Software GDPR: No Data Size: 30GB Read More → 2d 16h |
||||||
| Ransomware | 🇲🇾 Port of Tanjung Pelepas id33953 View details | Malaysia | Telecommunications | leaked | ||
|
🇲🇾 Port of Tanjung Pelepas Published: 2026-09-11 Company: Port of Tanjung Pelepas Website: https://www.ptp.com.my Industry: Marine Shipping & Transportation GDPR: No Data Size: 200G Read More → Ended |
||||||
| Ransomware | 🇿🇦 RelyComply AML Platform id33954 View details | United States | IT | pending | ||
|
🇿🇦 RelyComply AML Platform Published: 2026-09-09 Company: RelyComply AML Platform Website: https://relycomply.com/ Industry: Financial Software GDPR: No Data Size: 200GB Read More → Ended |
||||||
| Ransomware | 🇿🇦 Cartrack Holdings id33955 View details | South Africa | Transportation / Travel / Logistics | leaked | ||
|
🇿🇦 Cartrack Holdings Published: 2026-09-08 Company: Cartrack Holdings Website: https://www.cartrack.co.za Industry: Software GDPR: Yes Data Size: 451GB Read More → Ended |
||||||
| Ransomware | 🇺🇸 EMS1R id33956 View details | United States | Services | pending | ||
|
🇺🇸 EMS1R Published: 2026-09-08 Company: EMS1R Website: https://ems1r.com/ Industry: Corporate Wellness Services GDPR: Yes Data Size: 110GB Read More → Ended |
||||||
| Ransomware | 🇺🇸 Precision Vehicle Logistics id33957 View details | United States | Transportation / Travel / Logistics | leaked | ||
|
🇺🇸 Precision Vehicle Logistics Published: 2026-09-07 Company: Precision Vehicle Logistics Website: https://www.precisionvehiclelogistics.com Industry: Freight & Logistics Services GDPR: No Data Size: - Read More → Ended |
||||||
| Ransomware | 🇫🇷 TrainMe id33958 View details | United States | Services | leaked | ||
|
🇫🇷 TrainMe Published: 2026-09-07 Company: TrainMe Website: https://trainme.co Industry: Corporate Wellness Services GDPR: Yes Data Size: - Read More → Ended |
||||||
| Ransomware | 🇺🇸 Semper Laser id33959 View details | United States | Services | leaked | ||
|
🇺🇸 Semper Laser Published: 2026-09-07 Company: Semper Laser Website: https://www.semperlaser.com Industry: Spa and Salon Management · Florida GDPR: No Data Size: - Read More → Ended |
||||||
| Ransomware | 🇺🇸 eAssist Dental Solutions id33960 View details | United States | Healthcare / Pharma | leaked | ||
|
🇺🇸 eAssist Dental Solutions Published: 2026-09-06 Company: eAssist Dental Solutions Website: https://dentalbilling.com Industry: Healthcare GDPR: Yes Data Size: - Read More → Ended |
||||||
| Ransomware | 🇺🇸 myLaurel id33961 View details | United States | Services | leaked | ||
|
🇺🇸 myLaurel Published: 2026-09-06 Company: myLaurel Website: https://www.mylaurelhealth.com Industry: Elderly Care Services GDPR: Yes Data Size: - Read More → Ended |
||||||
| Ransomware | 🇹🇭 PTT Oil and Retail Business id33962 View details | United States | Manufacturing / Engineering | pending | ||
|
🇹🇭 PTT Oil and Retail Business Published: 2026-09-02 Company: PTT Oil and Retail Business Website: https://www.pttor.com/ Industry: Chemicals GDPR: No Data Size: - Read More → Ended |
||||||
| Ransomware | 🇧🇷 Oportunidados id33963 View details | Brazil | Services | pending | ||
|
🇧🇷 Oportunidados Published: 2026-09-01 Company: Oportunidados Website: https://oportunidados.com.br/ Industry: Business Services GDPR: No Data Size: - Read More → Ended |
||||||
| Ransomware | 🇮🇩 PT Intraco Penta Tbk id33964 View details | Germany | Manufacturing / Engineering | leaked | ||
|
🇮🇩 PT Intraco Penta Tbk Published: 2026-09-01 Company: PT Intraco Penta Tbk Website: http://intracopenta.com/ Industry: Industrial Machinery & Equipment GDPR: No Data Size: 64G Read More → Ended |
||||||
| Ransomware | 🇺🇸 Honeycomb Programs Inc id33965 View details | United States | Finance / Legal / Insurance | leaked | ||
|
🇺🇸 Honeycomb Programs Inc Published: 2026-09-01 Company: Honeycomb Programs Inc Website: https://honeycombinsurance.com/ Industry: Insurance GDPR: No Data Size: 1.4T Read More → Ended |
||||||