Ransomware Group intelligence

Everest

Active

Track Everest with 426 published victims and 2 known leak locations in a single intelligence view.

BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Victims 426 Known published victims in this dataset
First discovered 2021-09-09 Earliest victim discovery date
Last discovered 2026-09-01 Latest victim discovery date
Inactive since 1 days Days since the latest known victim
Top country United States 126 victims
Known locations 2 Leak or negotiation infrastructure tracked

Overview

Everest is tracked by Breach House as a ransomware group with 426 published victims.

United States is currently the most targeted country in this dataset.

2 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (2)

    Label Type Availability Links
    Leak location 1 Onion service Up checked 4h ago ransomocmou6mnbquqz44ewosbkjk3o5qjsl3orawojexfook2j7esad.onion
    Leak location 2 Onion service Up checked 4h ago everestndkvzcibcje2cqxhre2hmmybl3rn2gwzwsblz7gx6uryn5rad.onion

    Top Activity Sectors (16)

    Victims (426)

    Search, filter and paginate the victim timeline for Everest. Showing 101–200 of 426.

    Type Target Discovered Country Business Category Intel Link
    Ransomware Bolttech id25678 View details Singapore IT
    Ransomware Ciena id25631 View details United States Telecommunications
    Ransomware Virginia Records - Database leaked id25619 View details Bulgaria Other
    Ransomware McDonalds India id25618 View details India Hospitality / Food & Beverage / Tourism
    Ransomware Warning about the negotiator: All4you id25617 View details Other
    Ransomware GC Accounting id25604 View details United Kingdom Finance / Legal / Insurance
    Ransomware WANCHI STEEL INDUSTRIAL id25603 View details Taiwan, Province of China Manufacturing / Engineering
    Ransomware Reeves Information Technology id25602 View details United States IT
    Ransomware ASRock Rack id25601 View details Taiwan, Province of China Communication / Marketing
    Ransomware GIBSIN Engineers id25600 View details India Other
    Ransomware Notin - Database leaked id25528 View details Spain Other
    Ransomware National Money Mart Company - Database leaked id25527 View details Canada Communication / Marketing
    Ransomware IDeaS.com - Database leaked id25469 View details IT
    Ransomware Morgan Records Management - Database leaked id25468 View details United States Services
    Ransomware Virginia Records id25406 View details Bulgaria Communication / Marketing
    Ransomware Nissan Motor Corporation id25405 View details Japan Communication / Marketing
    Ransomware Morgan Records Management id25348 View details United States Services
    Ransomware DESY id25288 View details Germany Public Sector
    Ransomware Bolttech.io id25287 View details Hong Kong IT
    Ransomware IDeaS.com id25286 View details United States Services
    Ransomware Chrysler - Database leaked id25284 View details United States Communication / Marketing
    Ransomware Chrysler id25088 View details United States Manufacturing / Engineering
    Ransomware Notin id25033 View details Spain Communication / Marketing
    Ransomware Accela id25032 View details United States Communication / Marketing
    Ransomware ELC Electroconsult SpA id24841 View details Italy IT
    Ransomware Sarmap - Database leaked id24626 View details Switzerland Communication / Marketing
    Ransomware Benchmark Electronics Inc id24488 View details United States Services
    Ransomware Sarmap id24389 View details Switzerland Agriculture / Food
    Ransomware Petra id24388 View details United States Retail / E-commerce
    Ransomware ASUS id24376 View details Taiwan, Province of China IT
    Ransomware Exegy id24375 View details United States Services
    Ransomware National Money Mart Company id24218 View details Canada Finance / Legal / Insurance
    Ransomware Iberia Airlines id24212 View details Spain Transportation / Travel / Logistics
    Ransomware Iberia id24208 View details Spain Transportation / Travel / Logistics
    Ransomware Air Miles España, S.A id24186 View details Spain Other
    Ransomware Petrobras Campos Basin 3D & 4D Seismic Survey Data id23952 View details Brazil Other
    Ransomware Petrobras / SAExploration id23946 View details Brazil Energy
    Ransomware UNDER ARMOUR id23945 View details United States Manufacturing / Engineering
    Ransomware Svenska kraftnät Database on sale for $2 Million id23940 View details Sweden Other
    Ransomware Svenska kraftnät 280GB Database on sale id23939 View details Sweden Other
    Ransomware FullBeauty Brands id23853 View details United States Communication / Marketing
    Ransomware Svenska Kraftnät data id23852 View details Sweden Public Sector
    Ransomware Vikor Scientific, LLC / Korgene id23838 View details United States Healthcare / Pharma
    Ransomware KorPath id23837 View details Korea, Republic of IT
    Ransomware Dublin Airport - Database Leaked id23794 View details Ireland Transportation / Travel / Logistics
    Ransomware Collins Aerospace / RTX.com - Database Leaked id23793 View details United States Communication / Marketing
    Ransomware SIAD id23789 View details Italy Healthcare / Pharma
    Ransomware AGFA id23788 View details Belgium Healthcare / Pharma
    Ransomware Everest Exclusive Interview for Dailydarkweb.net id23652 View details Other
    Ransomware AT&T Careers - Database Leaked id23453 View details United States Other
    Ransomware Dublin Airport DataBase on sale for $1 Million id23452 View details Ireland Transportation / Travel / Logistics
    Ransomware Air Arabia DataBase on sale for $2 Million id23439 View details Other
    Ransomware MotorsportMarkt.de id23392 View details Germany Communication / Marketing
    Ransomware ANIA KRUK id23391 View details Poland Other
    Ransomware Dublin Airport id23796 View details Ireland Transportation / Travel / Logistics
    Ransomware Air Arabia id23344 View details United Arab Emirates Transportation / Travel / Logistics
    Ransomware Svenska Kraftnät id23343 View details Sweden Energy
    Ransomware AT&T Careers id23283 View details United States IT
    Ransomware Collins Aerospace Admits Responsibility for Flight Chaos at Heathrow, Brussels and Other M... id23221 View details United States Other
    Ransomware Collins Aerospace / RTX.com id23795 View details United States Services
    Ransomware MUSE-INSECURE: Inside Collins Aerospaces Security Failure id23186 View details Other
    Ransomware Colins Aerospace / RTX.com id23180 View details United States Other
    Ransomware MUSE-INSECURE: Inside Colins Aerospaces Security Failure id23179 View details United States Other
    Ransomware Streebo id22978 View details United States IT
    Ransomware BMW id22451 View details Germany Communication / Marketing
    Ransomware MFO ITALIA id22369 View details Italy Finance / Legal / Insurance
    Ransomware Key 4 Energy Srl id22368 View details Italy Energy
    Ransomware Studio Legale Tisot Iuris id22367 View details Italy Finance / Legal / Insurance
    Ransomware Professional Trust Company id22366 View details Italy Communication / Marketing
    Ransomware Groupe Clarins id22358 View details France Communication / Marketing
    Ransomware Everest file server id22232 View details Other
    Ransomware Allegis Group id22231 View details United States Services
    Ransomware Aupaircare and Intraxinc id22230 View details United States Communication / Marketing
    Ransomware Easy Credit id22180 View details Germany Finance / Legal / Insurance
    Ransomware Cordeiro Guerra & Associati id22086 View details Italy Other
    Ransomware Everest file server now online id22015 View details Other
    Ransomware Matiss id21807 View details Latvia Communication / Marketing
    Ransomware DAT AUTOHUS AG id21760 View details Germany Finance / Legal / Insurance
    Ransomware Philadelphia Investment Partners id21759 View details United States Finance / Legal / Insurance
    Ransomware Voltus GmbH id21758 View details Germany Energy
    Ransomware BRIJU.PL id21757 View details Poland Communication / Marketing
    Ransomware MYVISAJOBS.COM id21756 View details United States Communication / Marketing
    Ransomware Viking Automation id21631 View details Norway Other
    Ransomware Pacific HealthWorks id21625 View details United States Healthcare / Pharma
    Ransomware La Perouse id21626 View details United States Retail / E-commerce
    Ransomware BRUNTON-SHAW.COM id21571 View details United Kingdom Energy
    Ransomware Brunton-Shaw id21561 View details United Kingdom Communication / Marketing
    Ransomware EMMCORP.COM id21560 View details United Kingdom Services
    Ransomware iPROMOTEu id21460 View details United States Communication / Marketing
    Ransomware Grayscale Investments id21459 View details United States Finance / Legal / Insurance
    Ransomware Mailchimp id21458 View details United States Communication / Marketing
    Ransomware Crumbl - Full leak published id21456 View details United States Other
    Ransomware Bitbox id21450 View details Switzerland IT
    Ransomware Crumbl id21362 View details United States Retail / E-commerce
    Ransomware Best Price Financial Services id21361 View details United Kingdom Finance / Legal / Insurance
    Ransomware Gallon, Takacs & Boissoneault id21350 View details United States Finance / Legal / Insurance
    Ransomware New American Funding - Full leak published id21345 View details United States Communication / Marketing
    Ransomware APL id21335 View details Germany Communication / Marketing
    Ransomware Vantage Finance id21334 View details United Kingdom Finance / Legal / Insurance
    Ransomware Watchfinder & Co id21333 View details United Kingdom Retail / E-commerce