Ransomware Group intelligence
Everest
ActiveTrack Everest with 428 published victims and 8 known leak locations in a single intelligence view.
BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Overview
Everest is tracked by Breach House as a ransomware group with 428 published victims.
United States is currently the most targeted country in this dataset.
8 known leak locations are currently associated with this group.
Leak Status Distribution
428
- Leaked 71 16.6%
- Pending 351 82.0%
- Deleted 6 1.4%
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (8)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 4 | Onion service | Up checked 3h ago | 4p2hmbuy36oau64fcvwz2yvdw7eptlkionm46p2m2cs6dmhone5mxiyd.onion |
| Leak location 2 | Onion service | Up checked 3h ago | everestndkvzcibcje2cqxhre2hmmybl3rn2gwzwsblz7gx6uryn5rad.onion |
| Leak location 1 | Onion service | Up checked 3h ago | ransomocmou6mnbquqz44ewosbkjk3o5qjsl3orawojexfook2j7esad.onion |
| Leak location 8 | Onion service | Down checked 3h ago | ransomoefralti2zh5nrv7iqybp3d5b4a2eeecz5yjosp7ggbepj7iyd.onion |
| Leak location 7 | Onion service | Down checked 3h ago | gxp6yt3wdj7yky27j37jfrrbkuy24n2zo5uxyuoy23uf76d6m2gnfpid.onion |
| Leak location 6 | Onion service | Down checked 3h ago | bifpwatchoxp7tsb2kpes37b23ogjrb2kj4wgr7yncf4hhgsfahu7jad.onion |
| Leak location 5 | Onion service | Down checked 3h ago | aihvh6j6fbkfjyc6jqbsh2ed4s3rym2v2pu6kd3z3exdso2xc2qwcuqd.onion |
| Leak location 3 | Onion service | Down checked 3h ago | 2vqamwfdpis5rkjtpkutigykp56n6hkxfurm6qukdxp6uz5uff5kkaid.onion |
Top Activity Sectors (16)
- Not identified 109
- Finance / Legal / Insurance 52
- Healthcare / Pharma 47
- Services 44
- Communication / Marketing 43
- IT 28
- Manufacturing / Engineering 18
- Transportation / Travel / Logistics 16
- Energy 14
- Construction / Real Estate 12
- Agriculture / Food 7
- Retail / E-commerce 7
- Public Sector 7
- Hospitality / Food & Beverage / Tourism 6
- Telecommunications 5
- Education 1
Typical Attacks (10)
▼MITRE ATT&CK does not currently catalogue Everest, so this is our assessment of the techniques it uses, drawn from public reporting. The techniques themselves, and every "what that means" definition below, come from MITRE ATT&CK v19.2. Confidence: medium. Treat it as orientation, not attribution.
-
T1059.001 PowerShell Execution
What they do: everest uses PowerShell scripts to execute malicious commands and deploy ransomware payloads across compromised systems.
What that means: Adversaries may abuse PowerShell commands and scripts for execution.
-
What they do: everest modifies Windows Registry Run Keys to ensure ransomware execution persists across reboots on compromised hosts.
What that means: Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key.
-
T1685 Disable or Modify Tools Defense Impairment
What they do: everest disables or modifies security tools like antivirus software to evade detection during initial compromise and execution phases.
What that means: Adversaries may disable, degrade, or tamper with security tools or applications (e.g., endpoint detection and response (EDR) tools, intrusion detection systems (IDS), antivirus, logging agents, sensors, etc.) to impair or reduce visibility of defensive capabilities.
-
T1070.004 File Deletion Stealth
What they do: everest deletes Volume Shadow Copies and backup directories via system commands to prevent data recovery without payment.
What that means: Adversaries may delete files left behind by the actions of their intrusion activity.
-
T1003.001 LSASS Memory Credential Access
What they do: everest accesses LSASS memory using credential-stealing tools to harvest user credentials for lateral access and evasion.
What that means: Adversaries may attempt to access credential material stored in the process memory of the Local Security Authority Subsystem Service (LSASS).
-
T1135 Network Share Discovery Discovery
What they do: everest performs network share discovery to identify accessible remote directories for lateral movement and victim data targeting.
What that means: Adversaries may look for folders and drives shared on remote systems as a means of identifying sources of information to gather as a precursor for Collection and to identify potential systems of interest for Lateral Movement.
-
T1021.002 SMB/Windows Admin Shares Lateral Movement
What they do: everest exploits SMB/Windows Admin Shares for lateral movement between networked systems within victim environments.
What that means: Adversaries may use Valid Accounts to interact with a remote network share using Server Message Block (SMB).
-
T1486 Data Encrypted for Impact Impact
What they do: everest encrypts victim files using custom ransomware binaries to maximize impact and force ransom payments.
What that means: Adversaries may encrypt data on target systems or on large numbers of systems in a network to interrupt availability to system and network resources.
-
T1489 Service Stop Impact
What they do: everest executes Service Stop commands to terminate critical services, disrupting operational continuity during ransomware deployment.
What that means: Adversaries may stop or disable services on a system to render those services unavailable to legitimate users.
-
T1490 Inhibit System Recovery Impact
What they do: everest invokes system recovery inhibition commands to prevent backup restoration and isolate compromised machines.
What that means: Adversaries may delete or remove built-in data and turn off services designed to aid in the recovery of a corrupted system to prevent recovery.
Tools Observed (8)
▼Software Everest has been seen using, grouped by what it is used for. Legitimate administration tools appear here because these actors routinely abuse them — presence in this list is not itself malicious.
Credential theft
ProcDump
Discovery & enumeration
SoftPerfect NetScan
Offensive security tooling
Cobalt Strike
Metasploit
Meterpreter
Remote monitoring & management
AnyDesk
Atera
Splashtop
Tool data from Ransomware Tool Matrix by BushidoUK, licensed CC BY 4.0. Grouped by purpose and matched to this group by Breach House.
Ransom Notes (1)
▼The note this group leaves on a compromised machine. Click a filename to read it.
EVERESTRANSOMWARE.txt
Dear [snip], Greetings from the Everest team. Your systems have been attacked, the files are encrypted. You can read about us in our blog (Tor browser needed) Blog : ransomocmou6mnbquqz44ewosbkjk3o5qjsl3orawojexfook2j7esad.onion Or read about our group in Twitter Also, our team was able to bypass your "Dataprotection" as any other your protection software and more than 1 Terabyte of internal files were exfiltrated to our servers, which we can confirm with great joy and ease The list contains financial documents, internal orders, KYC information(documents,photos...), trusted representatives personal info Client risk levels,loans, debt and client data. Various financial documentation, backups , etc. etc. The information was collected both from personal PCs and from centralized storage locations. If an agreement is reached with us, this information will never be published and the problem will disappear as if it never happened, otherwise it will be posted on our blog and darknet. Which will lead to even greater financial and reputational losses on your part. Also you will get 1.Attack logbook (months of experience with your company) with full list of vulnerabilities and bypass methods 2.Advices how to singifically improve your security and avoid such attacks in the future 3.We will delete all files from your company 4.We will attack your company no more Yours trully Everest Team Email to contact: [email protected] Your key: [snip]
Ransom-note text from RansomLook, licensed CC BY 4.0.
Victims (428)
Search, filter and paginate the victim timeline for Everest. Showing 1–100 of 428.
| Type | Target | Discovered | Country | Business Category | Intel Link | Leak status |
|---|---|---|---|---|---|---|
| Ransomware | Kissei Shoji id34801 View details | Japan | Manufacturing / Engineering | pending | ||
|
[AI generated] N/A I don't have reliable, verified information about a specific company called "Kissei Shoji" to provide an accurate factual description of its operations, industry, and country. Providing details without verification could result in inaccurate or fabricated information. If you have additional context or source material about this company, I'd be happy to help analyze it. |
||||||
| Ransomware | Chugoku Bend id34802 View details | Japan | Other | pending | ||
|
[AI generated] N/A I don't have reliable, verifiable information about a company specifically named "Chugoku Bend." This does not correspond to a company I can confidently identify in my knowledge base. If you have additional context—such as an alternate spelling, parent company, industry sector, or location—I would be glad to help clarify or research further based on that information. |
||||||
| Ransomware | Taekwang Network id34803 View details | Korea, Republic of | IT | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | Brenner Base Tunnel id34804 View details | Austria | Construction / Real Estate | pending | ||
|
[AI generated] The Brenner Base Tunnel (Brennerbasistunnel, BBT) is a major railway infrastructure project, not a company in the traditional sense, though it is managed by Brenner Base Tunnel BBT SE, a joint venture between Austria and Italy. It operates in the construction and transportation infrastructure industry, building a 55-kilometer rail tunnel beneath the Alps connecting Innsbruck, Austria, and Fortezza, Italy, to improve freight and passenger rail links across Europe. |
||||||
| Ransomware | Evaluate a Norstella company id34104 View details | India | Other | leaked | ||
|
📁 Evaluate a Norstella company 868216 files, 1.3 TB |
||||||
| Ransomware | Citizens Bank id34103 View details | United States | Finance / Legal / Insurance | leaked | ||
|
📁 Citizens Bank 15 files, 1.2 GB 3,400,000 records |
||||||
| Ransomware | Al-Futtaim id34102 View details | United Arab Emirates | Services | leaked | ||
|
📁 Al-Futtaim 15668 files, 296.5 GB |
||||||
| Ransomware | Sefas id34105 View details | Greece | Services | leaked | ||
|
📁 Sefas 105815 files, 342.9 GB Frost Bank,Fiserv,Epiq Global,TSYS,Symcor,Liberty Mutual, Change Healthcare and more |
||||||
| Ransomware | KVH id33835 View details | United States | — | pending | ||
|
[AI generated] KVH Industries is a U.S.-based company headquartered in Middletown, Rhode Island, operating in the satellite communications and connectivity industry. It provides mobile connectivity services, including satellite TV, internet, and VSAT solutions, primarily serving maritime, leisure marine, and land mobile markets worldwide. KVH also develops navigation and stabilization products such as fiber optic gyros used in defense and commercial applications. |
||||||
| Ransomware | Laerdal id33836 View details | Norway | — | pending | ||
|
[AI generated] Laerdal Medical is a Norwegian company specializing in medical training equipment, simulation technology, and healthcare education solutions. It designs manikins, simulators, and resuscitation training tools used by hospitals, emergency services, and educational institutions worldwide. Headquartered in Stavanger, Norway, the company operates in the medical devices and healthcare training industry, supporting patient safety initiatives, CPR training, and lifesaving skills education globally. |
||||||
| Ransomware | Topcon Healthcare id33837 View details | Japan | — | pending | ||
|
[AI generated] Topcon Healthcare is a subsidiary of Topcon Corporation, a Japan-based multinational company. Topcon Healthcare specializes in medical technology, focusing on ophthalmic and eye care equipment, including diagnostic imaging devices, electronic medical record software, and vision screening tools. It serves healthcare providers, optometrists, and ophthalmologists globally, with significant operations in the United States, supporting eye care diagnostics and practice management solutions. |
||||||
| Ransomware | Agri Industrial id33514 View details | Agriculture / Food | pending | |||
|
[AI generated] N/A I don't have reliable, verified information about a specific company called "Agri Industrial." This name is generic and could correspond to multiple businesses across different countries involved in agricultural equipment, processing, or industrial farming services. Without access to verified company records or additional identifying details such as location, registration number, or website, I cannot provide accurate factual information. |
||||||
| Ransomware | B-accountants id33515 View details | Netherlands | Finance / Legal / Insurance | pending | ||
|
[AI generated] N/A I don't have verified, reliable information about a specific company named "B-accountants." There are likely multiple small accounting or bookkeeping firms using similar names across different countries, and without additional context (such as a website, registration number, or location), I cannot confirm which entity you're referring to or provide accurate details about its operations, industry specifics, or country of registration. |
||||||
| Ransomware | Morcon Developments id33516 View details | United Arab Emirates | Construction / Real Estate | pending | ||
|
[AI generated] N/A I don't have reliable, verified information about a specific company called "Morcon Developments." Rather than provide potentially fabricated details about its operations, industry, or country of operation, I'm flagging this as unknown. If you have additional context (location, sector, website, or related entities), I can help you analyze or verify that information. |
||||||
| Ransomware | Kennametal id33517 View details | United States | Manufacturing / Engineering | pending | ||
|
[AI generated] Kennametal Inc. is an American industrial technology company headquartered in Pittsburgh, Pennsylvania. It specializes in manufacturing cutting tools, tooling systems, and wear-resistant materials used in metalworking, mining, energy, aerospace, and transportation industries. Kennametal designs products made from tungsten carbide and other advanced materials, serving industrial and infrastructure sectors worldwide, with operations across the Americas, Europe, and Asia. |
||||||
| Ransomware | Flydubai id33518 View details | United Arab Emirates | Transportation / Travel / Logistics | pending | ||
|
[AI generated] Flydubai is a government-owned low-cost airline based in Dubai, United Arab Emirates. Founded in 2008, it operates within the aviation and air transportation industry, providing passenger and cargo flight services across the Middle East, Africa, Asia, and Europe. The airline operates from Dubai International Airport and serves as a budget carrier complementing Emirates, expanding connectivity to underserved and emerging markets globally. |
||||||
| Ransomware | Securitas Group id33176 View details | Sweden | Services | pending | ||
|
[AI generated] Securitas Group is a Swedish multinational security services company headquartered in Stockholm, Sweden. It operates in the security industry, providing guarding services, electronic security, fire and safety solutions, corporate risk management, and remote monitoring. Founded in 1934, it operates globally across dozens of countries, serving clients ranging from small businesses to large corporations, government agencies, and critical infrastructure providers. |
||||||
| Ransomware | Morula IVF id33177 View details | South Africa | Healthcare / Pharma | pending | ||
|
[AI generated] Morula IVF is a network of fertility clinics operating in Indonesia, specializing in in vitro fertilization (IVF) and other assisted reproductive technologies. It operates within the healthcare industry, specifically reproductive medicine, offering services such as fertility consultations, egg and sperm preservation, and infertility treatments. The company has multiple clinic locations across major Indonesian cities, serving patients seeking fertility treatment options. |
||||||
| Ransomware | Reliance Audit id33171 View details | India | Services | pending | ||
|
[AI generated] N/A I don't have verified, reliable information about a specific company named "Reliance Audit." This name is generic and could refer to multiple small firms or local audit/accounting practices in different countries, so I cannot confirm details about its services, industry positioning, or country of operation without risking inaccurate information. |
||||||
| Ransomware | UNIRITA id33172 View details | Japan | Services | pending | ||
|
[AI generated] UNIRITA Inc. is a Japanese IT company headquartered in Tokyo, Japan, operating in the information technology and systems software industry. It specializes in IT operations management software, system infrastructure solutions, and IT services, including its well-known product "Senju Family" for job scheduling and system operation management. UNIRITA also provides IT consulting, systems integration, and outsourcing services primarily to enterprise clients in Japan. |
||||||
| Ransomware | CENELEC id33173 View details | Belgium | Services | leaked | ||
|
[AI generated] CENELEC (European Committee for Electrotechnical Standardization) is a Brussels, Belgium-based standardization organization operating across Europe. It develops voluntary electrotechnical standards to support the single market, covering electrical equipment, energy, and related technologies. Working alongside CEN and ETSI, it collaborates with national committees from European countries. Its industry is standardization and technical regulation within the electrotechnical and electronics sector. |
||||||
| Ransomware | ETS id33174 View details | United States | Services | deleted | ||
|
[AI generated] N/A "ETS" is too generic an identifier to reliably describe—there are numerous distinct organizations using this name or acronym across different industries and countries (for example, testing and assessment organizations, engineering firms, electronic transaction services, and technology companies), and without additional context I cannot determine which specific entity is being referenced. |
||||||
| Ransomware | GGS id32639 View details | Philippines | Services | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | KÖRBER id32640 View details | Germany | Manufacturing / Engineering | pending | ||
|
[AI generated] Körber is a German technology conglomerate headquartered in Hamburg, Germany. The company operates across multiple industries including supply chain automation, pharma, tissue, tobacco, and digital solutions. Körber develops and delivers software, machinery, and integrated systems to help businesses optimize their operations. With a global presence spanning numerous countries, it serves clients in logistics, healthcare, and manufacturing sectors worldwide. |
||||||
| Ransomware | GENESILICO id32641 View details | Italy | Healthcare / Pharma | pending | ||
|
[AI generated] GeneSilico is a Polish bioinformatics company based in Warsaw, operating within the life sciences and computational biology sector. It specializes in RNA and protein structure prediction, molecular modeling, and bioinformatics software development. The company provides research services and tools to academic and pharmaceutical clients, supporting drug discovery and genomic research. It is affiliated with the Institute of Biochemistry and Biophysics of the Polish Academy of Sciences. |
||||||
| Ransomware | Negotiation Rules id32580 View details | — | leaked | |||
|
[AI generated] N/A |
||||||
| Ransomware | Rise UP id32371 View details | United States | Services | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | VIVOTEK id32372 View details | Taiwan, Province of China | IT | pending | ||
|
[AI generated] VIVOTEK is a Taiwanese company founded in 2000 and headquartered in New Taipei City, Taiwan. It specializes in network surveillance products, including IP cameras, video management software, and network video recorders. Operating in the physical security and surveillance industry, VIVOTEK serves global markets across retail, transportation, education, and government sectors, and is recognized as one of Asia's leading providers of IP surveillance solutions. |
||||||
| Ransomware | Italtel Peru id32373 View details | Peru | Telecommunications | pending | ||
|
[AI generated] Italtel Peru is a subsidiary of Italtel, an Italian telecommunications technology company. Operating in Peru, it provides ICT solutions including network infrastructure, system integration, and telecommunications services. The company serves enterprise and public sector clients, offering digital transformation, unified communications, and managed services. It operates within the telecommunications and information technology industry in the Peruvian market. |
||||||
| Ransomware | CCA Bank id31853 View details | — | pending | |||
|
[AI generated] N/A |
||||||
| Ransomware | Kingston Technology id31868 View details | United States | — | deleted | ||
|
[AI generated] Kingston Technology is a privately held American company founded in 1987 and headquartered in Fountain Valley, California. It is one of the world's largest manufacturers of memory products, including DRAM modules, flash storage, USB drives, and solid-state drives. Kingston serves consumer, enterprise, and embedded markets globally, supplying components to major OEMs and retail customers across the technology industry. |
||||||
| Ransomware | Experts Entreprendre id31869 View details | France | — | leaked | ||
|
[AI generated] N/A |
||||||
| Ransomware | Grupo DT id31870 View details | Spain | — | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | Capgemini Engineering id31871 View details | France | — | pending | ||
|
[AI generated] Capgemini Engineering is a global technology and engineering services company headquartered in France. It provides R&D and engineering outsourcing services across industries including aerospace, automotive, telecommunications, energy, and semiconductors. Operating in over 30 countries, it combines software, hardware, and connected systems expertise to help clients design, develop, and deploy innovative products and digital solutions. |
||||||
| Ransomware | Rx Networks id31791 View details | Canada | — | deleted | ||
|
[AI generated] Rx Networks is a Canadian technology company headquartered in Vancouver, British Columbia. It specializes in positioning and location technologies, providing GPS and GNSS assistance data solutions. The company serves the mobile and connected devices industry, offering services that improve location acquisition speed and accuracy. Its clients include device manufacturers, chipset vendors, and mobile network operators worldwide. |
||||||
| Ransomware | Ingersoll Rand id31479 View details | United States | Manufacturing / Engineering | pending | ||
|
[AI generated] Ingersoll Rand is an American industrial manufacturing company headquartered in Davidson, North Carolina. It designs and produces a wide range of industrial equipment including air compressors, power tools, fluid management systems, and HVAC solutions. The company serves diverse sectors such as manufacturing, construction, and energy. Formerly part of a larger conglomerate, it operates globally across multiple countries and markets. |
||||||
| Ransomware | Omnicell id31480 View details | United States | Healthcare / Pharma | deleted | ||
|
[AI generated] Omnicell is a United States-based healthcare technology company founded in 1992 and headquartered in Austin, Texas. It specializes in medication management solutions, providing automated pharmacy systems, dispensing cabinets, and software platforms to hospitals, pharmacies, and healthcare facilities. Its products aim to improve medication safety, reduce errors, and streamline pharmacy workflows across the healthcare industry. |
||||||
| Ransomware | EPM id31249 View details | Colombia | Energy | leaked | ||
|
[AI generated] EPM (Empresas Públicas de Medellín) is a Colombian public utility company headquartered in Medellín, Colombia. It operates in the energy, water, and telecommunications sectors, providing electricity generation and distribution, water supply, sewage, and natural gas services. It serves millions of customers across Colombia and has expanded operations into other Latin American countries, making it one of the largest public utility groups in the region. |
||||||
| Ransomware | AKM Enterprises INC id31251 View details | United States | Construction / Real Estate | leaked | ||
|
[AI generated] N/A |
||||||
| Ransomware | Formulatrix id31253 View details | United States | Manufacturing / Engineering | pending | ||
|
[AI generated] Formulatrix is a US-based company headquartered in Bedford, Massachusetts, that designs and manufactures laboratory automation instruments primarily for the life sciences industry. The company specializes in liquid handling robotics, imaging systems, and automation solutions used in drug discovery, protein crystallography, and genomics research. Its products are widely adopted by pharmaceutical companies, biotechnology firms, and academic research institutions worldwide. |
||||||
| Ransomware | Oasis Legal Group id31255 View details | United States | IT | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | Conway Analytics id31256 View details | United States | IT | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | Greenbotz id31258 View details | India | Other | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | NIMR Oil id31260 View details | United Arab Emirates | Other | pending | ||
|
[AI generated] NIMR Oil is an Omani oil and gas company operating primarily in the Sultanate of Oman. It specializes in the production, processing, and management of crude oil and natural gas resources. The company works within Oman's energy sector, often collaborating with the national oil infrastructure. NIMR is known for operating mature oilfields and applying enhanced recovery techniques to maximize output from established reserves. |
||||||
| Ransomware | TechCorr id31262 View details | IT | pending | |||
|
[AI generated] N/A |
||||||
| Ransomware | Rodschinson Investment id31264 View details | Belgium | Other | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | Allied Telesis id31266 View details | Japan | Manufacturing / Engineering | pending | ||
|
[AI generated] Allied Telesis is a global networking solutions provider headquartered in Tokyo, Japan. Founded in 1987, the company operates in the telecommunications and IT infrastructure industry, designing and manufacturing network hardware and software including switches, routers, wireless access points, and network management systems. It serves enterprise, government, healthcare, and education sectors across more than 40 countries worldwide. |
||||||
| Ransomware | Dharma Group id31268 View details | Italy | Finance / Legal / Insurance | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | Emirates Flight Catering id31270 View details | United Arab Emirates | Transportation / Travel / Logistics | pending | ||
|
[AI generated] Emirates Flight Catering is a leading airline catering company headquartered in Dubai, United Arab Emirates. It operates one of the world's largest catering facilities, providing in-flight meals and hospitality services primarily to Emirates airline and other carriers at Dubai International Airport. The company serves millions of meals annually and also offers event catering and food production services across the region. |
||||||
| Ransomware | Alzone Software id31272 View details | IT | pending | |||
|
[AI generated] N/A |
||||||
| Ransomware | Al-Futtaim Group id31274 View details | United Arab Emirates | Retail / E-commerce | pending | ||
|
[AI generated] Al-Futtaim Group is a diversified conglomerate headquartered in Dubai, United Arab Emirates. Founded in the 1930s, it operates across retail, automotive, real estate, and financial services sectors. The group represents major global brands including IKEA, Toyota, and Marks & Spencer across the Middle East, Africa, and Asia. It is one of the region's most prominent privately held business enterprises. |
||||||
| Ransomware | Aptara id31276 View details | India | IT | pending | ||
|
[AI generated] Aptara is a US-based digital content transformation company specializing in publishing, learning, and content solutions. Operating primarily in the publishing and e-learning industries, it provides services such as content conversion, instructional design, digital publishing, and XML/DITA authoring. Founded in 1988 and headquartered in Falls Church, Virginia, Aptara serves clients in education, government, and corporate sectors globally, helping organizations transition traditional content into digital formats. |
||||||
| Ransomware | Powerweave id31278 View details | India | IT | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | Mansfield Family Dentistry id31280 View details | United States | Healthcare / Pharma | pending | ||
|
[AI generated] Mansfield Family Dentistry is a dental practice operating in the United States, likely located in Mansfield, Ohio or a similarly named city. The practice provides general and family dentistry services, including routine cleanings, examinations, fillings, and preventive care for patients of all ages. It operates within the healthcare and dental services industry, serving local community members in a private practice setting. |
||||||
| Ransomware | Stadler Rail id31282 View details | Switzerland | Manufacturing / Engineering | leaked | ||
|
[AI generated] Stadler Rail is a Swiss manufacturer of railway vehicles headquartered in Bussnang, Switzerland. Founded in 1942, the company designs and produces a wide range of trains including regional and intercity trains, trams, metros, and rack railways. It operates globally, supplying rail operators across Europe, the Americas, and beyond, and is recognized for its FLIRT and KISS train families. |
||||||
| Ransomware | Keysight id31284 View details | United States | Manufacturing / Engineering | pending | ||
|
[AI generated] Keysight Technologies is an American electronic test and measurement company headquartered in Santa Rosa, California. It designs and manufactures instruments, software, and services used to design, emulate, and test electronic equipment. Its solutions support industries including aerospace, defense, communications, semiconductors, and automotive. Formerly part of Agilent Technologies, Keysight became an independent public company in 2014. |
||||||
| Ransomware | Asopagos S.A. id29407 View details | Colombia | Other | leaked | ||
|
[AI generated] N/A |
||||||
| Ransomware | ЕРМ id29408 View details | Other | pending | |||
|
[AI generated] N/A |
||||||
| Ransomware | Spedition Kern id29422 View details | Germany | Other | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | Advanced Psychiatry Associates id29423 View details | United States | Healthcare / Pharma | leaked | ||
|
[AI generated] Advanced Psychiatry Associates is a psychiatric medical practice based in the United States. The company provides comprehensive mental health services, including evaluation, diagnosis, and treatment of psychiatric conditions such as depression, anxiety, ADHD, and bipolar disorder. It operates within the healthcare and behavioral health industry, offering both medication management and therapy services to adult and adolescent patients across its clinic locations. |
||||||
| Ransomware | Sidra Kuwait Hospital id29424 View details | Kuwait | Healthcare / Pharma | pending | ||
|
[AI generated] Sidra Kuwait Hospital is a private healthcare facility located in Kuwait. It provides a range of medical and clinical services to patients, including diagnostics, outpatient consultations, and specialized treatments. Operating within the private healthcare sector in Kuwait, the hospital serves both local residents and expatriates, contributing to the country's growing private medical infrastructure alongside public health institutions. |
||||||
| Ransomware | VVO Finance id29425 View details | Germany | Other | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | AKM id29426 View details | Japan | Other | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | TransferZ id29441 View details | United States | Other | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | L&P Aesthetics id29442 View details | United States | Other | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | Rehab Clinics Group Ltd id28943 View details | United Kingdom | Healthcare / Pharma | pending | ||
|
[AI generated] Rehab Clinics Group Ltd is a UK-based healthcare company specialising in rehabilitation and addiction treatment services. Operating across England, it provides residential and outpatient programmes for individuals dealing with substance misuse, alcohol dependency, and mental health conditions. The company works with private patients and NHS referrals, offering medically supervised detox, therapy, and aftercare support through a network of treatment centres. |
||||||
| Ransomware | Studio Marchi - Studio Professionale Associato id28865 View details | Italy | Finance / Legal / Insurance | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | Fiserv id28792 View details | United States | Finance / Legal / Insurance | leaked | ||
|
[AI generated] Fiserv is a global financial technology company headquartered in Milwaukee, Wisconsin, United States. It provides financial services technology solutions including payment processing, core banking systems, digital banking platforms, and merchant acquiring services. Serving banks, credit unions, retailers, and businesses worldwide, Fiserv operates across the fintech and banking technology industry and is one of the largest providers of financial services infrastructure globally. |
||||||
| Ransomware | Symcor id28329 View details | Canada | Finance / Legal / Insurance | pending | ||
|
[AI generated] Symcor is a Canadian business process outsourcing company that provides payment processing, data management, and document services primarily to financial institutions. Founded in 1996 and headquartered in Mississauga, Ontario, it serves major banks and other clients across Canada. Its core services include cheque processing, statement production, and digital transaction solutions, helping organizations streamline operations and manage large volumes of financial data securely. |
||||||
| Ransomware | TSYS id28330 View details | United States | Finance / Legal / Insurance | leaked | ||
|
[AI generated] TSYS, or Total System Services, is a US-based payment solutions company headquartered in Columbus, Georgia. It operates in the financial technology and payment processing industry, providing services such as credit and debit card processing, merchant services, and payment management solutions to financial institutions, businesses, and consumers worldwide. TSYS became a subsidiary of Global Payments following a merger in 2019. |
||||||
| Ransomware | Epiq Global id28331 View details | United States | Finance / Legal / Insurance | pending | ||
|
[AI generated] Epiq Global is a US-based legal services company specializing in technology-driven solutions for complex legal matters. It provides services including class action and mass tort administration, bankruptcy case management, eDiscovery, document review, and legal notification. Operating across multiple countries, Epiq serves law firms, corporations, and government entities, helping manage large-scale legal proceedings efficiently. |
||||||
| Ransomware | Liberty Mutual Insurance id28414 View details | United States | Finance / Legal / Insurance | pending | ||
|
[AI generated] Liberty Mutual Insurance is a leading American insurance company headquartered in Boston, Massachusetts. Founded in 1912, it operates in the property and casualty insurance industry, offering products such as auto, home, life, and commercial insurance. The company serves individuals and businesses across the United States and internationally, making it one of the largest global insurers by premium revenue. |
||||||
| Ransomware | Morae id28422 View details | United States | Finance / Legal / Insurance | pending | ||
|
[AI generated] Morae is a US-based professional services company specializing in legal, compliance, and technology consulting. It serves law firms, corporate legal departments, and financial institutions by providing managed services, litigation support, contract lifecycle management, and legal operations solutions. The company combines legal expertise with advanced technology to help clients improve efficiency, reduce costs, and manage risk across their legal and compliance functions. |
||||||
| Ransomware | Indonesia's Customs Analytics Platform id28496 View details | Indonesia | Public Sector | leaked | ||
|
[AI generated] N/A |
||||||
| Ransomware | Super AI id28512 View details | Germany | IT | pending | ||
|
Automate business processes end-to-end with guaranteed results using super.AI Intelligent Document Processing (IDP). Quickly extract data from complex documents using the latest AI models. |
||||||
| Ransomware | Nutrabio id28743 View details | United States | Agriculture / Food | pending | ||
|
[AI generated] NutraBio is a US-based dietary supplement manufacturer founded in 1996 and headquartered in Middlesex, New Jersey. The company operates in the health and wellness industry, producing sports nutrition products including protein powders, pre-workouts, vitamins, and recovery supplements. NutraBio is known for its commitment to transparency, using fully disclosed labels and manufacturing products in an FDA-registered, cGMP-certified facility. |
||||||
| Ransomware | Umiles Group id28744 View details | Spain | Transportation / Travel / Logistics | leaked | ||
|
[AI generated] Umiles Group is a Spanish technology and services company specializing in drone operations, urban air mobility, and advanced aerial solutions. Based in Spain, it provides unmanned aerial vehicle services for sectors including logistics, inspection, surveillance, and emergency response. The company also focuses on developing regulatory frameworks and training programs to support the integration of drones into civil airspace across Europe. |
||||||
| Ransomware | Complete Aircraft Group id28745 View details | United States | Transportation / Travel / Logistics | leaked | ||
|
[AI generated] N/A |
||||||
| Ransomware | Tokoparts id28746 View details | Indonesia | Retail / E-commerce | leaked | ||
|
[AI generated] N/A |
||||||
| Ransomware | Citizens Bank id28747 View details | United States | Finance / Legal / Insurance | pending | ||
|
[AI generated] Citizens Bank is a major American retail and commercial bank headquartered in Providence, Rhode Island. Operating within the financial services industry, it offers a wide range of products including personal and business banking, loans, mortgages, credit cards, and wealth management services. It serves millions of customers across the United States through branches, ATMs, and digital banking platforms. |
||||||
| Ransomware | Frost Bank id28748 View details | United States | Finance / Legal / Insurance | pending | ||
|
[AI generated] Frost Bank is a Texas-based financial institution and a subsidiary of Cullen/Frost Bankers, Inc. Founded in 1868 and headquartered in San Antonio, it operates across major Texas cities offering personal and commercial banking, wealth management, insurance, and investment services. As one of the largest independent banks in Texas, it serves individuals, businesses, and institutions within the United States financial services industry. |
||||||
| Ransomware | K Subsea Group id28098 View details | Singapore | Energy | leaked | ||
|
K Subsea is a Singapore based company focused on providing integrated subsea solutions to the energy industry. We have over 800 employees across SEA, both on and offshore |
||||||
| Ransomware | Nissan id27786 View details | Japan | Manufacturing / Engineering | leaked | ||
|
[AI generated] Nissan Motor Co., Ltd. is a leading Japanese multinational automotive manufacturer headquartered in Yokohama, Japan. It was established in 1933 and is known for producing a wide range of vehicles, such as SUVs, sedans, electric/ hybrid cars and commercial vehicles. It is part of the Renault–Nissan–Mitsubishi Alliance, which is one of the world's largest automotive partnerships. |
||||||
| Ransomware | Parque Eólico Toabré id27762 View details | Panama | Energy | leaked | ||
|
[AI generated] Parque Eolico Toabre is a wind farm based in Panama operated by Union Eolica Panameña. With a total capacity of 55 MW produced by 22 wind turbines, it contributes significantly to generating renewable energy. In addition to lowering the country's reliance on fossil fuels, the wind farm represents a sustainable solution for producing electricity. |
||||||
| Ransomware | PT Brantas Abipraya id27756 View details | Indonesia | Construction / Real Estate | deleted | ||
|
[AI generated] PT Brantas Abipraya is a state-owned Indonesian construction company. It was established in 1980 with the main objective to develop water infrastructure including dams, irrigation systems, and hydroelectric power plants. In recent years, the company has expanded its scope to cover other construction works such as airports, roads, bridges, buildings, and other civil infrastructure projects. |
||||||
| Ransomware | Straight Line Logistics id27753 View details | United Arab Emirates | Transportation / Travel / Logistics | pending | ||
|
[AI generated] Straight Line Logistics is a Houston based company, specializing in transportation and logistics solutions. They offer a wide range of services, including truckload freight, intermodal transportation, warehousing, and supply chain management. Their team of experienced professionals focuses on providing efficient, reliable, and cost-effective solutions to their clients' logistic needs. |
||||||
| Ransomware | Evaluate a Norstella company id27348 View details | Norway | Other | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | First Priority Group id27223 View details | United States | Communication / Marketing | leaked | ||
|
[AI generated] First Priority Group is a diversified manufacturer, dealer, up-fitter, and service provider of emergency and specialty vehicles. The company provides ambulance remounts, emergency vehicle parts, and services. It also designs and manufactures vehicle command centers for the law enforcement and public safety sectors. Based in New Jersey, it has been serving customers across the USA since 1998. |
||||||
| Ransomware | Hyundai Elevator id27133 View details | Korea, Republic of | Manufacturing / Engineering | leaked | ||
|
[AI generated] Hyundai Elevator Co., Ltd is a South Korean company specializing in the production of elevators, escalators, and related equipment. Established in 1984, Hyundai Elevator is a part of the Hyundai Group. It offers comprehensive services that include designing, manufacturing, installing and maintaining a variety of systems including moving walkways, dumbwaiters, and parking systems. It operates mainly in the domestic market but has expanded globally. |
||||||
| Ransomware | UD Trucks id26916 View details | Japan | Communication / Marketing | leaked | ||
|
[AI generated] UD Trucks is a Japan-based company that designs, manufactures, and distributes transport solutions ranging from heavy-duty to medium-duty trucks. It is well-recognized for its reliable and high-quality products. Originally founded in 1935 as Nihon Diesel Industries, it was acquired by Volvo in 2007. UD Trucks operates globally with a primary focus on Asia and Africa. |
||||||
| Ransomware | 111 id26850 View details | Other | pending | |||
|
[AI generated] N/A |
||||||
| Ransomware | Boltech id26811 View details | Poland | IT | pending | ||
|
[AI generated] Boltech is a company that provides services for industrial automation and electrical installations. In addition, Boltech offers a range of electrical and energy solutions to various sectors including aviation, automotive, and logistics. The company prides itself on providing innovative solutions by using the latest technology to ensure efficient and sustainable results for their clients. |
||||||
| Ransomware | Atlas Air: MUSE INSECURE id26609 View details | United States | Other | pending | ||
|
[AI generated] N/A |
||||||
| Ransomware | Tsunami Tsolutions id26436 View details | United States | Services | pending | ||
|
[AI generated] Tsunami Tsolutions is a tech company offering IT services and software solutions to key domains, mainly aviation and manufacturing. Their offerings include data procurement and analysis, MRO, supply chain management, and reliability prediction software. It undertakes and manages its customers' technological tasks, aiding them in strategizing and enhancing their business performance. |
||||||
| Ransomware | Atlas Air id26268 View details | United States | Transportation / Travel / Logistics | pending | ||
|
[AI generated] Atlas Air Worldwide Holdings Inc. is a cargo and passenger charter airline based in Purchase, NY. Founded in 1992, Atlas Air operates globally with a large and efficient fleet of Boeing 747 aircraft. The company offers a variety of services like outsourced aircraft, crew maintenance, and insurance (ACMI), charter businesses, and dry leasing. |
||||||
| Ransomware | Polycom id26058 View details | United States | Communication / Marketing | pending | ||
|
[AI generated] Polycom is an American multinational company specializing in creating technology that fosters easy and efficient collaboration for businesses. Polycom's products include communication devices, video conferencing systems, and other related applications and services. The company has a globally spread presence, with its headquarters located in San Jose, California. It was acquired by Plantronics in July 2018. |
||||||
| Ransomware | Iron Mountain id26057 View details | United States | Services | pending | ||
|
[AI generated] Iron Mountain Incorporated is a global business specializing in storage and information management services. Founded in 1951, based in Boston, Massachusetts, it helps organizations to store, manage, protect, retrieve information and data. Its offerings include records and information management, data backup and recovery, secure shredding, and data centers. |
||||||
| Ransomware | Shinwa Co Ltd id26055 View details | Japan | Construction / Real Estate | pending | ||
|
[AI generated] "Shinwa Co Ltd" is a Japan-based company primarily engaged in the civil engineering and construction business. The company's operations include disaster recovery work, civil engineering, and building construction. Its construction business involves the building of private homes, condominiums, and commercial facilities. Shinwa also partakes in real estate buying, selling, and rental activities. They are headquartered in Osaka, Japan. |
||||||
| Ransomware | Hosowaka Micron Group id26054 View details | Japan | Manufacturing / Engineering | pending | ||
|
[AI generated] Hosokawa Micron Group is a global industrial process machinery manufacturer, providing turn-key solutions for powder processing, particle separation, mixing, drying, containment, compacting and more. Its offerings are used in the chemicals, cosmetics, food, mineral, pharmaceutical and plastics industries. Founded in Osaka, Japan, it operates worldwide with a strong presence in Europe and the Americas. |
||||||
| Ransomware | Stellium id26051 View details | United Kingdom | IT | leaked | ||
|
[AI generated] Stellium is a consulting firm focused on services for supply chain management optimization, such as data analytics, lean manufacturing strategies, and innovative technology implementation. They cater to multiple industries, including energy, manufacturing, technology, and healthcare, among others. Their methods revolve around the utilization of advanced data to optimize operations and produce successful business outcomes. |
||||||