Ransomware Group intelligence

Everest

Active

Track Everest with 372 published victims and 1 known leak locations in a single intelligence view.

Victims 372 Known published victims in this dataset
First discovered 2021-09-09 Earliest victim discovery date
Last discovered 2026-05-29 Latest victim discovery date
Inactive since 50 days Days since the latest known victim
Top country United States 107 victims
Known locations 1 Leak or negotiation infrastructure tracked

Overview

Everest is tracked by Breach House as a ransomware group with 372 published victims.

United States is currently the most targeted country in this dataset.

1 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (1)

    Label Type Availability Links
    Leak location 1 Onion service Unknown ransomocmou6mnbquqz44ewosbkjk3o5qjsl3orawojexfook2j7esad.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (372)

    Search, filter and paginate the victim timeline for Everest. Showing 1–100 of 372.

    Type Target Discovered Country Business Category Intel Link
    Ransomware Asopagos S.A. id29407 View details Colombia Other
    Ransomware ЕРМ id29408 View details Other
    Ransomware Spedition Kern id29422 View details Germany Other
    Ransomware Advanced Psychiatry Associates id29423 View details United States Healthcare / Pharma
    Ransomware Sidra Kuwait Hospital id29424 View details Kuwait Healthcare / Pharma
    Ransomware VVO Finance id29425 View details Germany Other
    Ransomware AKM id29426 View details Japan Other
    Ransomware TransferZ id29441 View details United States Other
    Ransomware L&P Aesthetics id29442 View details United States Other
    Ransomware Rehab Clinics Group Ltd id28943 View details United Kingdom Healthcare / Pharma
    Ransomware Studio Marchi - Studio Professionale Associato id28865 View details Italy Finance / Legal / Insurance
    Ransomware Fiserv id28792 View details United States Finance / Legal / Insurance
    Ransomware Symcor id28329 View details Canada Finance / Legal / Insurance
    Ransomware TSYS id28330 View details United States Finance / Legal / Insurance
    Ransomware Epiq Global id28331 View details United States Finance / Legal / Insurance
    Ransomware Liberty Mutual Insurance id28414 View details United States Finance / Legal / Insurance
    Ransomware Morae id28422 View details United States Finance / Legal / Insurance
    Ransomware Indonesia's Customs Analytics Platform id28496 View details Indonesia Public Sector
    Ransomware Super AI id28512 View details Germany IT
    Ransomware Nutrabio id28743 View details United States Agriculture / Food
    Ransomware Umiles Group id28744 View details Spain Transportation / Travel / Logistics
    Ransomware Complete Aircraft Group id28745 View details United States Transportation / Travel / Logistics
    Ransomware Tokoparts id28746 View details Indonesia Retail / E-commerce
    Ransomware Citizens Bank id28747 View details United States Finance / Legal / Insurance
    Ransomware Frost Bank id28748 View details United States Finance / Legal / Insurance
    Ransomware K Subsea Group id28098 View details Singapore Energy
    Ransomware Nissan id27786 View details Japan Manufacturing / Engineering
    Ransomware Parque Eólico Toabré id27762 View details Panama Energy
    Ransomware PT Brantas Abipraya id27756 View details Indonesia Construction / Real Estate
    Ransomware Straight Line Logistics id27753 View details United Arab Emirates Transportation / Travel / Logistics
    Ransomware Evaluate a Norstella company id27348 View details Norway Other
    Ransomware First Priority Group id27223 View details United States Communication / Marketing
    Ransomware Hyundai Elevator id27133 View details Korea, Republic of Manufacturing / Engineering
    Ransomware UD Trucks id26916 View details Japan Communication / Marketing
    Ransomware 111 id26850 View details Other
    Ransomware Boltech id26811 View details Poland IT
    Ransomware Atlas Air: MUSE INSECURE id26609 View details United States Other
    Ransomware Tsunami Tsolutions id26436 View details United States Services
    Ransomware Atlas Air id26268 View details United States Transportation / Travel / Logistics
    Ransomware Polycom id26058 View details United States Communication / Marketing
    Ransomware Iron Mountain id26057 View details United States Services
    Ransomware Shinwa Co Ltd id26055 View details Japan Construction / Real Estate
    Ransomware Hosowaka Micron Group id26054 View details Japan Manufacturing / Engineering
    Ransomware Stellium id26051 View details United Kingdom IT
    Ransomware Acu Trans Solutions LLC id26050 View details United States Services
    Ransomware SIGMA Processing Group id26049 View details Germany Communication / Marketing
    Ransomware Bolttech id25678 View details Singapore IT
    Ransomware Ciena id25631 View details United States Telecommunications
    Ransomware Virginia Records - Database leaked id25619 View details Bulgaria Other
    Ransomware McDonalds India id25618 View details India Hospitality / Food & Beverage / Tourism
    Ransomware Warning about the negotiator: All4you id25617 View details Other
    Ransomware GC Accounting id25604 View details United Kingdom Finance / Legal / Insurance
    Ransomware WANCHI STEEL INDUSTRIAL id25603 View details Taiwan, Province of China Manufacturing / Engineering
    Ransomware Reeves Information Technology id25602 View details United States IT
    Ransomware ASRock Rack id25601 View details Taiwan, Province of China Communication / Marketing
    Ransomware GIBSIN Engineers id25600 View details India Other
    Ransomware Notin - Database leaked id25528 View details Spain Other
    Ransomware National Money Mart Company - Database leaked id25527 View details Canada Communication / Marketing
    Ransomware IDeaS.com - Database leaked id25469 View details IT
    Ransomware Morgan Records Management - Database leaked id25468 View details United States Services
    Ransomware Virginia Records id25406 View details Bulgaria Communication / Marketing
    Ransomware Nissan Motor Corporation id25405 View details Japan Communication / Marketing
    Ransomware Morgan Records Management id25348 View details United States Services
    Ransomware DESY id25288 View details Germany Public Sector
    Ransomware Bolttech.io id25287 View details Hong Kong IT
    Ransomware IDeaS.com id25286 View details United States Services
    Ransomware Chrysler - Database leaked id25284 View details United States Communication / Marketing
    Ransomware Chrysler id25088 View details United States Manufacturing / Engineering
    Ransomware Notin id25033 View details Spain Communication / Marketing
    Ransomware Accela id25032 View details United States Communication / Marketing
    Ransomware ELC Electroconsult SpA id24841 View details Italy IT
    Ransomware Sarmap - Database leaked id24626 View details Switzerland Communication / Marketing
    Ransomware Benchmark Electronics Inc id24488 View details United States Services
    Ransomware Sarmap id24389 View details Switzerland Agriculture / Food
    Ransomware Petra id24388 View details United States Retail / E-commerce
    Ransomware ASUS id24376 View details Taiwan, Province of China IT
    Ransomware Exegy id24375 View details United States Services
    Ransomware National Money Mart Company id24218 View details Canada Finance / Legal / Insurance
    Ransomware Iberia Airlines id24212 View details Spain Transportation / Travel / Logistics
    Ransomware Iberia id24208 View details Spain Transportation / Travel
    Ransomware Air Miles España, S.A id24186 View details Spain Other
    Ransomware Petrobras Campos Basin 3D & 4D Seismic Survey Data id23952 View details Brazil Other
    Ransomware Petrobras / SAExploration id23946 View details Brazil Energy
    Ransomware UNDER ARMOUR id23945 View details United States Manufacturing / Engineering
    Ransomware Svenska kraftnät Database on sale for $2 Million id23940 View details Sweden Other
    Ransomware Svenska kraftnät 280GB Database on sale id23939 View details Sweden Other
    Ransomware FullBeauty Brands id23853 View details United States Communication / Marketing
    Ransomware Svenska Kraftnät data id23852 View details Sweden Public Sector
    Ransomware Vikor Scientific, LLC / Korgene id23838 View details United States Healthcare / Pharma
    Ransomware KorPath id23837 View details Korea, Republic of IT
    Ransomware Dublin Airport - Database Leaked id23794 View details Ireland Transportation / Travel
    Ransomware Collins Aerospace / RTX.com - Database Leaked id23793 View details United States Communication / Marketing
    Ransomware SIAD id23789 View details Italy Healthcare / Pharma
    Ransomware AGFA id23788 View details Belgium Healthcare / Pharma
    Ransomware Everest Exclusive Interview for Dailydarkweb.net id23652 View details Other
    Ransomware AT&T Careers - Database Leaked id23453 View details United States Other
    Ransomware Dublin Airport DataBase on sale for $1 Million id23452 View details Ireland Transportation / Travel
    Ransomware Air Arabia DataBase on sale for $2 Million id23439 View details Other
    Ransomware MotorsportMarkt.de id23392 View details Germany Communication / Marketing
    Ransomware ANIA KRUK id23391 View details Poland Other