Ransomware Group intelligence

Everest

Active

Track Everest with 372 published victims and 1 known leak locations in a single intelligence view.

Victims 372 Known published victims in this dataset
First discovered 2021-09-09 Earliest victim discovery date
Last discovered 2026-05-29 Latest victim discovery date
Inactive since 50 days Days since the latest known victim
Top country United States 107 victims
Known locations 1 Leak or negotiation infrastructure tracked

Overview

Everest is tracked by Breach House as a ransomware group with 372 published victims.

United States is currently the most targeted country in this dataset.

1 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (1)

    Label Type Availability Links
    Leak location 1 Onion service Unknown ransomocmou6mnbquqz44ewosbkjk3o5qjsl3orawojexfook2j7esad.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (372)

    Search, filter and paginate the victim timeline for Everest. Showing 101–200 of 372.

    Type Target Discovered Country Business Category Intel Link
    Ransomware Dublin Airport id23796 View details Ireland Transportation / Travel
    Ransomware Air Arabia id23344 View details United Arab Emirates Transportation / Travel
    Ransomware Svenska Kraftnät id23343 View details Sweden Energy
    Ransomware AT&T Careers id23283 View details United States IT
    Ransomware Collins Aerospace Admits Responsibility for Flight Chaos at Heathrow, Brussels and Other M... id23221 View details United States Other
    Ransomware Collins Aerospace / RTX.com id23795 View details United States Services
    Ransomware MUSE-INSECURE: Inside Collins Aerospaces Security Failure id23186 View details Other
    Ransomware Colins Aerospace / RTX.com id23180 View details United States Other
    Ransomware MUSE-INSECURE: Inside Colins Aerospaces Security Failure id23179 View details United States Other
    Ransomware Streebo id22978 View details United States IT
    Ransomware BMW id22451 View details Germany Communication / Marketing
    Ransomware MFO ITALIA id22369 View details Italy Finance / Legal / Insurance
    Ransomware Key 4 Energy Srl id22368 View details Italy Energy
    Ransomware Studio Legale Tisot Iuris id22367 View details Italy Finance / Legal / Insurance
    Ransomware Professional Trust Company id22366 View details Italy Communication / Marketing
    Ransomware Groupe Clarins id22358 View details France Communication / Marketing
    Ransomware Everest file server id22232 View details Other
    Ransomware Allegis Group id22231 View details United States Services
    Ransomware Aupaircare and Intraxinc id22230 View details United States Communication / Marketing
    Ransomware Easy Credit id22180 View details Germany Finance / Legal / Insurance
    Ransomware Cordeiro Guerra & Associati id22086 View details Italy Other
    Ransomware Everest file server now online id22015 View details Other
    Ransomware Matiss id21807 View details Latvia Communication / Marketing
    Ransomware DAT AUTOHUS AG id21760 View details Germany Finance / Legal / Insurance
    Ransomware Philadelphia Investment Partners id21759 View details United States Finance / Legal / Insurance
    Ransomware Voltus GmbH id21758 View details Germany Energy
    Ransomware BRIJU.PL id21757 View details Poland Communication / Marketing
    Ransomware MYVISAJOBS.COM id21756 View details United States Communication / Marketing
    Ransomware Viking Automation id21631 View details Norway Other
    Ransomware Pacific HealthWorks id21625 View details United States Healthcare / Pharma
    Ransomware La Perouse id21626 View details United States Retail / E-commerce
    Ransomware BRUNTON-SHAW.COM id21571 View details United Kingdom Energy
    Ransomware Brunton-Shaw id21561 View details United Kingdom Communication / Marketing
    Ransomware EMMCORP.COM id21560 View details United Kingdom Services
    Ransomware iPROMOTEu id21460 View details United States Communication / Marketing
    Ransomware Grayscale Investments id21459 View details United States Finance / Legal / Insurance
    Ransomware Mailchimp id21458 View details United States Communication / Marketing
    Ransomware Crumbl - Full leak published id21456 View details United States Other
    Ransomware Bitbox id21450 View details Switzerland IT
    Ransomware Crumbl id21362 View details United States Retail / E-commerce
    Ransomware Best Price Financial Services id21361 View details United Kingdom Finance / Legal / Insurance
    Ransomware Gallon, Takacs & Boissoneault id21350 View details United States Finance / Legal / Insurance
    Ransomware New American Funding - Full leak published id21345 View details United States Communication / Marketing
    Ransomware APL id21335 View details Germany Communication / Marketing
    Ransomware Vantage Finance id21334 View details United Kingdom Finance / Legal / Insurance
    Ransomware Watchfinder & Co id21333 View details United Kingdom Retail / E-commerce
    Ransomware New American Funding id21172 View details United States Communication / Marketing
    Ransomware Rezayat Group id21122 View details Saudi Arabia Construction / Real Estate
    Ransomware Katz & Doorakian Law Firm, P.L. - File tree upload id21106 View details Finance / Legal / Insurance
    Ransomware Fishman, Larsen & Callister - Full leak published id21105 View details United States Other
    Ransomware Department of Culture and Tourism Abu Dhabi - Download link id21104 View details United Arab Emirates Transportation / Travel
    Ransomware Arlington Occupational Health and Wellness - Full leak published id20957 View details United States Healthcare / Pharma
    Ransomware Avantic Medical Lab - Full leak published id20956 View details Healthcare / Pharma
    Ransomware Arlington Occupational Health and Wellness id20791 View details United States Healthcare / Pharma
    Ransomware PeopleCheck id20790 View details Australia Communication / Marketing
    Ransomware Katz & Doorakian Law Firm, P.L. id20789 View details United States Finance / Legal / Insurance
    Ransomware Avantic Medical Lab id20788 View details United States Healthcare / Pharma
    Ransomware Fishman, Larsen & Callister id20787 View details United States Finance / Legal / Insurance
    Ransomware Bowles Womack & Company, P.C id20636 View details United States Services
    Ransomware Department of Culture and Tourism Abu Dhabi - Full leak published id20552 View details United Arab Emirates Transportation / Travel
    Ransomware Jordan Kuwait Bank - Full leak published id20421 View details Jordan Finance / Legal / Insurance
    Ransomware Mediclinic Group id20237 View details South Africa Healthcare / Pharma
    Ransomware Department of Culture and Tourism Abu Dhabi id20236 View details United Arab Emirates Transportation / Travel
    Ransomware Coca-Cola id20184 View details United Arab Emirates Hospitality / Food & Beverage / Tourism
    Ransomware PDI Health id20007 View details United States Healthcare / Pharma
    Ransomware Khidmah id19936 View details United Arab Emirates Communication / Marketing
    Ransomware Kaefer id19935 View details United Kingdom Communication / Marketing
    Ransomware Balance Diagnostics id19771 View details United States Healthcare / Pharma
    Ransomware Jamjoom Pharma id19710 View details Saudi Arabia Healthcare / Pharma
    Ransomware Jordan Kuwait Bank id19709 View details Jordan Finance / Legal / Insurance
    Ransomware C2S Technologies Inc. id17155 View details United States IT
    Ransomware ITSS id17154 View details Switzerland Finance / Legal / Insurance
    Ransomware Weeks, Brucker & Coleman, Ltd | Legal Services id16872 View details United States Finance / Legal / Insurance
    Ransomware Solaris-pharma.com id16753 View details United States Healthcare / Pharma
    Ransomware Woodlake id16691 View details Healthcare / Pharma
    Ransomware Volt Infrastructure id16690 View details United States Construction / Real Estate
    Ransomware The Hoff Brand SL id16689 View details Spain Transportation / Travel / Logistics
    Ransomware Solaris Pharma id16631 View details United States Healthcare / Pharma
    Ransomware Welcomehallmission.com id16613 View details Canada Other
    Ransomware Evidn id16562 View details Australia Communication / Marketing
    Ransomware Genie Healthcare id16234 View details United States Healthcare / Pharma
    Ransomware Izmocars id16233 View details United States Communication / Marketing
    Ransomware Total Patient Care LLC;A Sensitive Touch Home Health;Alphastar Home Health Care;Heart of T id16127 View details United States Healthcare / Pharma
    Ransomware Artistic Family Dental;Value Dental Center;Sparkling Smiles Family Dentistry id16126 View details United States Healthcare / Pharma
    Ransomware Myhealthcarebilling id16019 View details United States Healthcare / Pharma
    Ransomware Sarah Car Care id15992 View details United Arab Emirates Communication / Marketing
    Ransomware CO-VER Power Technology SpA id15900 View details Italy IT
    Ransomware Medical Technology Industries, Inc. id15897 View details United States IT
    Ransomware Concord Orthopaedics id15604 View details United States Healthcare / Pharma
    Ransomware STIIIZY id15603 View details United States Communication / Marketing
    Ransomware IndicaOnline id15485 View details United States Communication / Marketing
    Ransomware Bio-Clima Service Srl id15348 View details Italy Communication / Marketing
    Ransomware Total Patient Care LLC id15347 View details United States Healthcare / Pharma
    Ransomware A Sensitive Touch Home Health;Alphastar Home Health Care;Heart of Texas Home Healthcare Se id15346 View details United States Healthcare / Pharma
    Ransomware Pincu Barkan, Law Office and Notary id15304 View details Israel Finance / Legal / Insurance
    Ransomware Value Dental Center id15278 View details Egypt Healthcare / Pharma
    Ransomware Artistic Family Dental id15277 View details United States Healthcare / Pharma
    Ransomware Asaro Dental Aesthetics id15276 View details Türkiye Healthcare / Pharma
    Ransomware MedElite Group id15220 View details United States Healthcare / Pharma
    Ransomware MCNA Dental id15088 View details United States Healthcare / Pharma