Ransomware Group intelligence

Everest

Active

Track Everest with 428 published victims and 8 known leak locations in a single intelligence view.

BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Victims 428 Known published victims in this dataset
First discovered 2021-09-09 Earliest victim discovery date
Last discovered 2026-10-17 Latest victim discovery date
Inactive since 0 days Days since the latest known victim
Top country United States 121 victims
Known locations 8 Leak or negotiation infrastructure tracked

Overview

Everest is tracked by Breach House as a ransomware group with 428 published victims.

United States is currently the most targeted country in this dataset.

8 known leak locations are currently associated with this group.

Leak Status Distribution

  • Leaked 71 16.6%
  • Pending 351 82.0%
  • Deleted 6 1.4%

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (8)

    Label Type Availability Links
    Leak location 4 Onion service Up checked 4h ago 4p2hmbuy36oau64fcvwz2yvdw7eptlkionm46p2m2cs6dmhone5mxiyd.onion
    Leak location 2 Onion service Up checked 4h ago everestndkvzcibcje2cqxhre2hmmybl3rn2gwzwsblz7gx6uryn5rad.onion
    Leak location 1 Onion service Up checked 4h ago ransomocmou6mnbquqz44ewosbkjk3o5qjsl3orawojexfook2j7esad.onion
    Leak location 8 Onion service Down checked 4h ago ransomoefralti2zh5nrv7iqybp3d5b4a2eeecz5yjosp7ggbepj7iyd.onion
    Leak location 7 Onion service Down checked 4h ago gxp6yt3wdj7yky27j37jfrrbkuy24n2zo5uxyuoy23uf76d6m2gnfpid.onion
    Leak location 6 Onion service Down checked 4h ago bifpwatchoxp7tsb2kpes37b23ogjrb2kj4wgr7yncf4hhgsfahu7jad.onion
    Leak location 5 Onion service Down checked 4h ago aihvh6j6fbkfjyc6jqbsh2ed4s3rym2v2pu6kd3z3exdso2xc2qwcuqd.onion
    Leak location 3 Onion service Down checked 4h ago 2vqamwfdpis5rkjtpkutigykp56n6hkxfurm6qukdxp6uz5uff5kkaid.onion

    Top Activity Sectors (16)

    Victims (428)

    Search, filter and paginate the victim timeline for Everest. Showing 101–200 of 428.

    Type Target Discovered Country Business Category Intel Link Leak status
    Ransomware Acu Trans Solutions LLC id26050 View details United States Services pending
    Ransomware SIGMA Processing Group id26049 View details Germany Communication / Marketing pending
    Ransomware Bolttech id25678 View details Singapore IT pending
    Ransomware Ciena id25631 View details United States Telecommunications pending
    Ransomware Virginia Records - Database leaked id25619 View details Bulgaria Other pending
    Ransomware McDonalds India id25618 View details India Hospitality / Food & Beverage / Tourism deleted
    Ransomware Warning about the negotiator: All4you id25617 View details Other pending
    Ransomware GC Accounting id25604 View details United Kingdom Finance / Legal / Insurance leaked
    Ransomware WANCHI STEEL INDUSTRIAL id25603 View details Taiwan, Province of China Manufacturing / Engineering leaked
    Ransomware Reeves Information Technology id25602 View details United States IT leaked
    Ransomware ASRock Rack id25601 View details Taiwan, Province of China Communication / Marketing pending
    Ransomware GIBSIN Engineers id25600 View details India Other pending
    Ransomware Notin - Database leaked id25528 View details Spain Other pending
    Ransomware National Money Mart Company - Database leaked id25527 View details Canada Communication / Marketing pending
    Ransomware IDeaS.com - Database leaked id25469 View details IT pending
    Ransomware Morgan Records Management - Database leaked id25468 View details United States Services pending
    Ransomware Virginia Records id25406 View details Bulgaria Communication / Marketing pending
    Ransomware Nissan Motor Corporation id25405 View details Japan Communication / Marketing pending
    Ransomware Morgan Records Management id25348 View details United States Services pending
    Ransomware DESY id25288 View details Germany Public Sector leaked
    Ransomware Bolttech.io id25287 View details Hong Kong IT leaked
    Ransomware IDeaS.com id25286 View details United States Services pending
    Ransomware Chrysler - Database leaked id25284 View details United States Communication / Marketing pending
    Ransomware Chrysler id25088 View details United States Manufacturing / Engineering pending
    Ransomware Notin id25033 View details Spain Communication / Marketing pending
    Ransomware Accela id25032 View details United States Communication / Marketing — pending
    Ransomware ELC Electroconsult SpA id24841 View details Italy IT leaked
    Ransomware Sarmap - Database leaked id24626 View details Switzerland Communication / Marketing leaked
    Ransomware Benchmark Electronics Inc id24488 View details United States Services pending
    Ransomware Sarmap id24389 View details Switzerland Agriculture / Food leaked
    Ransomware Petra id24388 View details United States Retail / E-commerce pending
    Ransomware ASUS id24376 View details Taiwan, Province of China IT leaked
    Ransomware Exegy id24375 View details United States Services pending
    Ransomware National Money Mart Company id24218 View details Canada Finance / Legal / Insurance pending
    Ransomware Iberia Airlines id24212 View details Spain Transportation / Travel / Logistics pending
    Ransomware Iberia id24208 View details Spain Transportation / Travel / Logistics leaked
    Ransomware Air Miles España, S.A id24186 View details Spain Other leaked
    Ransomware Petrobras Campos Basin 3D & 4D Seismic Survey Data id23952 View details Brazil Other pending
    Ransomware Petrobras / SAExploration id23946 View details Brazil Energy pending
    Ransomware UNDER ARMOUR id23945 View details United States Manufacturing / Engineering pending
    Ransomware Svenska kraftnät Database on sale for $2 Million id23940 View details Sweden Other pending
    Ransomware Svenska kraftnät 280GB Database on sale id23939 View details Sweden Other pending
    Ransomware FullBeauty Brands id23853 View details United States Communication / Marketing pending
    Ransomware Svenska Kraftnät data id23852 View details Sweden Public Sector pending
    Ransomware Vikor Scientific, LLC / Korgene id23838 View details United States Healthcare / Pharma pending
    Ransomware KorPath id23837 View details Korea, Republic of IT leaked
    Ransomware Dublin Airport - Database Leaked id23794 View details Ireland Transportation / Travel / Logistics leaked
    Ransomware Collins Aerospace / RTX.com - Database Leaked id23793 View details United States Communication / Marketing leaked
    Ransomware SIAD id23789 View details Italy Healthcare / Pharma leaked
    Ransomware AGFA id23788 View details Belgium Healthcare / Pharma pending
    Ransomware Everest Exclusive Interview for Dailydarkweb.net id23652 View details Other pending
    Ransomware AT&T Careers - Database Leaked id23453 View details United States Other leaked
    Ransomware Dublin Airport DataBase on sale for $1 Million id23452 View details Ireland Transportation / Travel / Logistics pending
    Ransomware Air Arabia DataBase on sale for $2 Million id23439 View details Other pending
    Ransomware MotorsportMarkt.de id23392 View details Germany Communication / Marketing pending
    Ransomware ANIA KRUK id23391 View details Poland Other leaked
    Ransomware Dublin Airport id23796 View details Ireland Transportation / Travel / Logistics leaked
    Ransomware Air Arabia id23344 View details United Arab Emirates Transportation / Travel / Logistics pending
    Ransomware Svenska Kraftnät id23343 View details Sweden Energy pending
    Ransomware AT&T Careers id23283 View details United States IT pending
    Ransomware Collins Aerospace Admits Responsibility for Flight Chaos at Heathrow, Brussels and Other M... id23221 View details United States Other pending
    Ransomware Collins Aerospace / RTX.com id23795 View details United States Services pending
    Ransomware MUSE-INSECURE: Inside Collins Aerospaces Security Failure id23186 View details Other pending
    Ransomware Colins Aerospace / RTX.com id23180 View details United States Other pending
    Ransomware MUSE-INSECURE: Inside Colins Aerospaces Security Failure id23179 View details United States Other pending
    Ransomware Streebo id22978 View details United States IT pending
    Ransomware BMW id22451 View details Germany Communication / Marketing leaked
    Ransomware MFO ITALIA id22369 View details Italy Finance / Legal / Insurance pending
    Ransomware Key 4 Energy Srl id22368 View details Italy Energy pending
    Ransomware Studio Legale Tisot Iuris id22367 View details Italy Finance / Legal / Insurance leaked
    Ransomware Professional Trust Company id22366 View details Italy Communication / Marketing leaked
    Ransomware Groupe Clarins id22358 View details France Communication / Marketing leaked
    Ransomware Everest file server id22232 View details Other pending
    Ransomware Allegis Group id22231 View details United States Services pending
    Ransomware Aupaircare and Intraxinc id22230 View details United States Communication / Marketing leaked
    Ransomware Easy Credit id22180 View details Germany Finance / Legal / Insurance pending
    Ransomware Cordeiro Guerra & Associati id22086 View details Italy Other pending
    Ransomware Everest file server now online id22015 View details Other leaked
    Ransomware Matiss id21807 View details Latvia Communication / Marketing pending
    Ransomware DAT AUTOHUS AG id21760 View details Germany Finance / Legal / Insurance pending
    Ransomware Philadelphia Investment Partners id21759 View details United States Finance / Legal / Insurance pending
    Ransomware Voltus GmbH id21758 View details Germany Energy pending
    Ransomware BRIJU.PL id21757 View details Poland Communication / Marketing pending
    Ransomware MYVISAJOBS.COM id21756 View details United States Communication / Marketing pending
    Ransomware Viking Automation id21631 View details Norway Other pending
    Ransomware Pacific HealthWorks id21625 View details United States Healthcare / Pharma leaked
    Ransomware La Perouse id21626 View details United States Retail / E-commerce leaked
    Ransomware BRUNTON-SHAW.COM id21571 View details United Kingdom Energy pending
    Ransomware Brunton-Shaw id21561 View details United Kingdom Communication / Marketing pending
    Ransomware EMMCORP.COM id21560 View details United Kingdom Services pending
    Ransomware iPROMOTEu id21460 View details United States Communication / Marketing pending
    Ransomware Grayscale Investments id21459 View details United States Finance / Legal / Insurance leaked
    Ransomware Mailchimp id21458 View details United States Communication / Marketing pending
    Ransomware Crumbl - Full leak published id21456 View details United States Other leaked
    Ransomware Bitbox id21450 View details Switzerland IT leaked
    Ransomware Crumbl id21362 View details United States Retail / E-commerce leaked
    Ransomware Best Price Financial Services id21361 View details United Kingdom Finance / Legal / Insurance pending
    Ransomware Gallon, Takacs & Boissoneault id21350 View details United States Finance / Legal / Insurance leaked
    Ransomware New American Funding - Full leak published id21345 View details United States Communication / Marketing leaked
    Ransomware APL id21335 View details Germany Communication / Marketing pending