Ransomware Group intelligence

Everest

Active

Track Everest with 428 published victims and 8 known leak locations in a single intelligence view.

BREACH HOUSE ALERTS

Want an alert every time a new ransomware post is published?

Choose the feeds and the countries you care about — we email you when they move.

Victims 428 Known published victims in this dataset

First discovered 2021-09-09 Earliest victim discovery date

Last discovered 2026-10-17 Latest victim discovery date

Inactive since 0 days Days since the latest known victim

Top country United States 121 victims

Known locations 8 Leak or negotiation infrastructure tracked

Everest is tracked by Breach House as a ransomware group with 428 published victims.

United States is currently the most targeted country in this dataset.

8 known leak locations are currently associated with this group.

428

Leaked 71 16.6%
Pending 351 82.0%
Deleted 6 1.4%

Top Countries

Distribution

Label	Type	Availability	Links
Leak location 4	Onion service	Up checked 4h ago	`4p2hmbuy36oau64fcvwz2yvdw7eptlkionm46p2m2cs6dmhone5mxiyd.onion`
Leak location 2	Onion service	Up checked 4h ago	`everestndkvzcibcje2cqxhre2hmmybl3rn2gwzwsblz7gx6uryn5rad.onion`
Leak location 1	Onion service	Up checked 4h ago	`ransomocmou6mnbquqz44ewosbkjk3o5qjsl3orawojexfook2j7esad.onion`
Leak location 8	Onion service	Down checked 4h ago	`ransomoefralti2zh5nrv7iqybp3d5b4a2eeecz5yjosp7ggbepj7iyd.onion`
Leak location 7	Onion service	Down checked 4h ago	`gxp6yt3wdj7yky27j37jfrrbkuy24n2zo5uxyuoy23uf76d6m2gnfpid.onion`
Leak location 6	Onion service	Down checked 4h ago	`bifpwatchoxp7tsb2kpes37b23ogjrb2kj4wgr7yncf4hhgsfahu7jad.onion`
Leak location 5	Onion service	Down checked 4h ago	`aihvh6j6fbkfjyc6jqbsh2ed4s3rym2v2pu6kd3z3exdso2xc2qwcuqd.onion`
Leak location 3	Onion service	Down checked 4h ago	`2vqamwfdpis5rkjtpkutigykp56n6hkxfurm6qukdxp6uz5uff5kkaid.onion`

Not identified 109
Finance / Legal / Insurance 52
Healthcare / Pharma 47
Services 44
Communication / Marketing 43
IT 28
Manufacturing / Engineering 18
Transportation / Travel / Logistics 16
Energy 14
Construction / Real Estate 12
Agriculture / Food 7
Retail / E-commerce 7
Public Sector 7
Hospitality / Food & Beverage / Tourism 6
Telecommunications 5
Education 1

Typical Attacks (10)

▼

MITRE ATT&CK does not currently catalogue Everest, so this is our assessment of the techniques it uses, drawn from public reporting. The techniques themselves, and every "what that means" definition below, come from MITRE ATT&CK v19.2. Confidence: medium. Treat it as orientation, not attribution.

T1059.001 PowerShell Execution

What they do: everest uses PowerShell scripts to execute malicious commands and deploy ransomware payloads across compromised systems.

What that means: Adversaries may abuse PowerShell commands and scripts for execution.
T1547.001 Registry Run Keys / Startup Folder PersistencePrivilege Escalation

What they do: everest modifies Windows Registry Run Keys to ensure ransomware execution persists across reboots on compromised hosts.

What that means: Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key.
T1685 Disable or Modify Tools Defense Impairment

What they do: everest disables or modifies security tools like antivirus software to evade detection during initial compromise and execution phases.

What that means: Adversaries may disable, degrade, or tamper with security tools or applications (e.g., endpoint detection and response (EDR) tools, intrusion detection systems (IDS), antivirus, logging agents, sensors, etc.) to impair or reduce visibility of defensive capabilities.
T1070.004 File Deletion Stealth

What they do: everest deletes Volume Shadow Copies and backup directories via system commands to prevent data recovery without payment.

What that means: Adversaries may delete files left behind by the actions of their intrusion activity.
T1003.001 LSASS Memory Credential Access

What they do: everest accesses LSASS memory using credential-stealing tools to harvest user credentials for lateral access and evasion.

What that means: Adversaries may attempt to access credential material stored in the process memory of the Local Security Authority Subsystem Service (LSASS).
T1135 Network Share Discovery Discovery

What they do: everest performs network share discovery to identify accessible remote directories for lateral movement and victim data targeting.

What that means: Adversaries may look for folders and drives shared on remote systems as a means of identifying sources of information to gather as a precursor for Collection and to identify potential systems of interest for Lateral Movement.
T1021.002 SMB/Windows Admin Shares Lateral Movement

What they do: everest exploits SMB/Windows Admin Shares for lateral movement between networked systems within victim environments.

What that means: Adversaries may use Valid Accounts to interact with a remote network share using Server Message Block (SMB).
T1486 Data Encrypted for Impact Impact

What they do: everest encrypts victim files using custom ransomware binaries to maximize impact and force ransom payments.

What that means: Adversaries may encrypt data on target systems or on large numbers of systems in a network to interrupt availability to system and network resources.
T1489 Service Stop Impact

What they do: everest executes Service Stop commands to terminate critical services, disrupting operational continuity during ransomware deployment.

What that means: Adversaries may stop or disable services on a system to render those services unavailable to legitimate users.
T1490 Inhibit System Recovery Impact

What they do: everest invokes system recovery inhibition commands to prevent backup restoration and isolate compromised machines.

What that means: Adversaries may delete or remove built-in data and turn off services designed to aid in the recovery of a corrupted system to prevent recovery.

Tools Observed (8)

▼

Software Everest has been seen using, grouped by what it is used for. Legitimate administration tools appear here because these actors routinely abuse them — presence in this list is not itself malicious.

Credential theft

ProcDump

Discovery & enumeration

SoftPerfect NetScan

Offensive security tooling

Cobalt Strike Metasploit Meterpreter

Remote monitoring & management

AnyDesk Atera Splashtop

Tool data from Ransomware Tool Matrix by BushidoUK, licensed CC BY 4.0. Grouped by purpose and matched to this group by Breach House.

Ransom Notes (1)

▼

The note this group leaves on a compromised machine. Click a filename to read it.

EVERESTRANSOMWARE.txt txt · 1458 chars

Dear [snip],
Greetings from the Everest team. Your systems have been attacked, the files are encrypted. You can read about us in our blog (Tor browser needed)
Blog : ransomocmou6mnbquqz44ewosbkjk3o5qjsl3orawojexfook2j7esad.onion
Or read about our group in Twitter
Also, our team was able to bypass your "Dataprotection" as any other your protection software and more than 1 Terabyte of internal files were exfiltrated to our servers, which we can confirm with great joy and ease
The list contains financial documents, internal orders, KYC information(documents,photos...), trusted representatives personal info
Client risk levels,loans, debt and client data. Various financial documentation, backups , etc. etc.
The information was collected both from personal PCs and from centralized storage locations.
If an agreement is reached with us, this information will never be published and the problem will disappear as if it never happened, otherwise it will be posted on our blog and darknet. Which will lead to even greater financial and reputational losses on your part.
Also you will get 
1.Attack logbook (months of experience with your company) with full list of vulnerabilities and bypass methods
2.Advices how to singifically improve your security and avoid such attacks in the future
3.We will delete all files from your company
4.We will attack your company no more
Yours trully Everest Team
Email to contact: [email protected]
Your key: 
[snip]

View on RansomLook

Ransom-note text from RansomLook, licensed CC BY 4.0.

Victims (428)

Search, filter and paginate the victim timeline for Everest. Showing 301–400 of 428.

Type	Target	Discovered	Country	Business Category	Intel Link	Leak status
Ransomware	Powersportsmarketing.com id8431 View details	2023-09-02		Communication / Marketing		pending
PSM network was compromised(by collaboration with Ransomed group).Our group got 2.2 Tb of intertnal data.Inculduing 43,000 customer records. We already sent a message and there is no jokes. Data Stolen : 2.2 TerabytesData Info : Customer records,Customer InformationTime : Till 4.09.2023 ID 8431
Ransomware	Statefarm.com id8430 View details	2023-09-02		Agriculture / Food		pending
About 400,000,000 customer insurance records database was stolen from their network.No need to say anything moreWe are will wait for company representative until 05.09.2023 Otherwise all data will be sold to third parties ID 8430
Ransomware	Agriloja pt.3 id8328 View details	2023-08-29	Portugal	Agriculture / Food		pending
New leakage 3 GB of internal documents .Company must stop ignore our calls and contact us in next 36 hrs.Full package of 1.2 TB uploading and will be published in case of silence.https://dropmefiles.com/Z4pIjPassword: 69hrZT ID 8328
Ransomware	Agriloja.pt demo-leak id8183 View details	2023-08-17		Agriculture / Food		pending
100 random personal records (from 1400+). Company must contact us in next 24 hrs. Otherwise more personal data will be published in the blog and darknet forums. Download: https://dropmefiles.com/L8kHr https://dropmefiles.com.ua/ua/vKTzPassword: 123 ID 8183
Ransomware	Agriloja.pt id8132 View details	2023-08-14	Portugal	Agriculture / Food		pending
464574 internal documents and files stolen.1.2 TBSQL DBs, Email Archives, Personal information,employee data,,IDs,various company documents… To restore damaged system and prevent data from publication company’s representative should contact us in next 72 hrs. Full filetree can be provided as a proof. ID 8132
Ransomware	ZESA Holdings id8084 View details	2023-08-08	India	Finance / Legal / Insurance		pending
Today, the servers of the entire infrastructure of ZESA HOLDINGS (90% Country Electricity Manufacture ) were attacked, including divisionsZETDCZENTPowertelICS, IPMP, Smartvend ,various oracle servers, big part of backups were also attacked.Terabytes of internal (and interesting) data has been exfiltrated to our servers Internal financial data (Including WorldBank’s data and Indian Bank transactions and documents) Various […] ID 8084
Ransomware	Kovair Software Data Leak id8062 View details	2023-08-05		IT		pending
The set dates are out, so we post the entire archive Part1 https://dropmefiles.com/3GRYp Part2 https://dropmefiles.com/nAayA Part3 https://dropmefiles.com/tmhIh Part4 https://dropmefiles.com/K5zYz Part5 https://dropmefiles.com/6rp1U Part6 https://dropmefiles.com/5j6VM Password: &#B”a3Arcj}eOfoQ==Fh ID 8062
Ransomware	Great Opportunity to monetize your corporate access id7994 View details	2023-07-31		Telecommunications		pending
Team looking for new partners with access to corporate networks.Fast work, good share. The offer will close on August 7. First come first served jabber:[email protected]@thesecure.biz email:[email protected]@cock.li ID 7994
Ransomware	Kovair Software id7944 View details	2023-07-26		IT		pending
200 GB of internal files (Kovair.com) were stolen from the company’s servers. The files contain:– Project Source Codes– Personal data of employees– Various internal work documents To fully restore the system and delete these files, company representatives must contact by August 3, 2023.Otherwise, all this data will be published here and other forums,in the same […] ID 7944
Ransomware	US District Court / Law company id6268 View details	2023-04-26		Finance / Legal / Insurance		pending
On sale access to the network US District CourtEmployee access,full controlAV: NoNetwork access of a lawyer with tons various confidential documents is included in this sale. Internal correspondence,tax,banks,ssn,dl,court cases. State IL.Price 15,000$Payment: btc,xmrContact email: [email protected] or jabber: [email protected],[email protected] ID 6268
Ransomware	US District Court IL / On sale id6189 View details	2023-04-19		Finance / Legal / Insurance		pending
On sale access to the network US District Court Employee access,full control AV: No Network access of a lawyer with tons various confidential documents is included in this sale Contact email: [email protected] or jabber: [email protected],[email protected] ID 6189
Ransomware	US District Court / On sale id6185 View details	2023-04-19		Other	—	pending
No additional victim description available. ID 6185
Ransomware	MultiCareInc pt.2 id6046 View details	2023-04-07		Services		pending
No additional victim description available. ID 6046
Ransomware	US District Court id5811 View details	2023-03-22		Other	—	pending
No additional victim description available. ID 5811
Ransomware	NRG Innovations DataBase Leak id5710 View details	2023-03-15		Finance / Legal / Insurance		pending
Includes internal correspondence,financial documents,tax documents,accounting,SSN,DLThe owners of the company were notified of the incident in person and of the time frame.Download:https://dropmefiles.com.ua/ua/Z4aW2https://dropmefiles.com.ua/ua/******* site pwd 868274903rar pwd 8392GLDKLA82@ ID 5710
Ransomware	Aeronautics company Canada \| UTC Aerospace Systems, Bombardier, NASA partners id5188 View details	2023-01-03		Hospitality / Food & Beverage / Tourism	—	pending
No additional victim description available. ID 5188
Ransomware	Aeronautics company Canada / UTC Aerospace Systems, Bombardier aerospace, NASA partners id4645 View details	2022-11-23		Hospitality / Food & Beverage / Tourism	—	pending
No additional victim description available. ID 4645
Ransomware	Aeronautics company Canada / UTC Aerospace Systems, Bombardier aerospace partners id4640 View details	2022-11-21		Hospitality / Food & Beverage / Tourism	—	pending
No additional victim description available. ID 4640
Ransomware	Aeronautics company Canada / Production of parts for aircraft engines id4613 View details	2022-11-16		Manufacturing / Engineering	—	pending
No additional victim description available. ID 4613
Ransomware	Aeronautics company Canada id4562 View details	2022-11-11		Services	—	pending
No additional victim description available. ID 4562
Ransomware	AT&T id4400 View details	2022-10-28		Other	—	pending
No additional victim description available. ID 4400
Ransomware	Stages Pediatric Care DataBase on Sale id4395 View details	2022-10-27		Other	—	pending
No additional victim description available. ID 4395
Ransomware	Rundle Eye Care DataBase Leak id4389 View details	2022-10-25		Other	—	pending
No additional victim description available. ID 4389
Ransomware	Stages Pediatric Care New 40 personal records id4369 View details	2022-10-23		Other		pending
No additional victim description available. ID 4369
Ransomware	Stages Pediatric Care New 250 personal records id4368 View details	2022-10-23		Other		pending
No additional victim description available. ID 4368
Ransomware	MultiCareInc pt.3 id4359 View details	2022-10-18		Services	—	pending
No additional victim description available. ID 4359
Ransomware	MultiCareInc DataBase Leak id4358 View details	2022-10-18		Services	—	pending
No additional victim description available. ID 4358
Ransomware	Stages Pediatric Care new personal data id4357 View details	2022-10-18		Other	—	pending
No additional victim description available. ID 4357
Ransomware	MultiCare DataBase Leak id4345 View details	2022-10-15		Other	—	pending
No additional victim description available. ID 4345
Ransomware	Electricity company / Air Defense Solutions company id4340 View details	2022-10-14		Energy	—	pending
No additional victim description available. ID 4340
Ransomware	Electricity company pt.3 id4337 View details	2022-10-13		Energy	—	pending
No additional victim description available. ID 4337
Ransomware	MultiCare pt.3 id4334 View details	2022-10-12		Other	—	pending
No additional victim description available. ID 4334
Ransomware	Stages Pediatric Care Update id4322 View details	2022-10-11		Other	—	pending
No additional victim description available. ID 4322
Ransomware	Electricity company pt.2 id4314 View details	2022-10-10		Energy	—	pending
No additional victim description available. ID 4314
Ransomware	RS.GOV.BR/Government Brazil id4312 View details	2022-10-10		Public Sector	—	pending
No additional victim description available. ID 4312
Ransomware	Electricity company id4304 View details	2022-10-07		Energy	—	pending
No additional victim description available. ID 4304
Ransomware	SPERONI S.P.A / Data Lamborghini, Ferrari, Fiat Group, VAG, Brembo id4303 View details	2022-10-07		Services	—	pending
No additional victim description available. ID 4303
Ransomware	Rundle Eye Care id4299 View details	2022-10-06		Other	—	pending
No additional victim description available. ID 4299
Ransomware	MultiCare pt.2 id4298 View details	2022-10-06		Other	—	pending
No additional victim description available. ID 4298
Ransomware	MultiCare Home Health id4270 View details	2022-10-01		Healthcare / Pharma	—	pending
No additional victim description available. ID 4270
Ransomware	Stages Pediatric Care id4258 View details	2022-09-29		Other	—	pending
No additional victim description available. ID 4258
Ransomware	FederalBank/Fedfina DataBase Leak id4235 View details	2022-09-25		Finance / Legal / Insurance	—	pending
No additional victim description available. ID 4235
Ransomware	Ministerio de Economía Argentina id4220 View details	2022-09-21		Other	—	pending
No additional victim description available. ID 4220
Ransomware	Government Brazil id4201 View details	2022-09-19		Public Sector	—	pending
No additional victim description available. ID 4201
Ransomware	FederalBank/Fedfina.part5 id4181 View details	2022-09-15		Finance / Legal / Insurance	—	pending
No additional victim description available. ID 4181
Ransomware	GOV Brazil id4049 View details	2022-08-30		Other	—	pending
No additional victim description available. ID 4049
Ransomware	Olamgroup id4004 View details	2022-08-24		Services	—	pending
No additional victim description available. ID 4004
Ransomware	FederalBank/Fedfina.part4 id3865 View details	2022-07-26		Finance / Legal / Insurance	—	pending
No additional victim description available. ID 3865
Ransomware	FederalBank/Fedfina.part3 id3844 View details	2022-07-21		Finance / Legal / Insurance	—	pending
No additional victim description available. ID 3844
Ransomware	FederalBank/Fedfina.part2 id3828 View details	2022-07-20		Finance / Legal / Insurance	—	pending
No additional victim description available. ID 3828
Ransomware	FederalBank / Fedfina id3811 View details	2022-07-18		Finance / Legal / Insurance	—	pending
No additional victim description available. ID 3811
Ransomware	Pontal Engineering Constructions and Developments Files Leak id3764 View details	2022-07-11		Construction / Real Estate	—	pending
No additional victim description available. ID 3764
Ransomware	Pontal Engineering Constructions and Developments id3736 View details	2022-07-05		Construction / Real Estate	—	pending
No additional victim description available. ID 3736
Ransomware	Amalfitana Gas Srl id3706 View details	2022-07-01		Energy	—	pending
No additional victim description available. ID 3706
Ransomware	FAYAT id3681 View details	2022-06-23		Other	—	pending
No additional victim description available. ID 3681
Ransomware	Metek PLC Files Leak id3631 View details	2022-06-14		Other	—	pending
No additional victim description available. ID 3631
Ransomware	Metek Plc id3619 View details	2022-06-11		Other	—	pending
No additional victim description available. ID 3619
Ransomware	VTVCAB id3603 View details	2022-06-06		Other	—	pending
No additional victim description available. ID 3603
Ransomware	Lamborghini, Ferrari, Fiat Group, VAG, Brembo And data from other automobile concerns id3543 View details	2022-05-26		Telecommunications	—	pending
No additional victim description available. ID 3543
Ransomware	Limited May Access Sale id3349 View details	2022-05-02		Other	—	pending
No additional victim description available. ID 3349
Ransomware	Collegiate sports medicine id3340 View details	2022-05-01		Healthcare / Pharma	—	pending
No additional victim description available. ID 3340
Ransomware	Reckitt Benckiser id3219 View details	2022-04-20		Other	—	pending
No additional victim description available. ID 3219
Ransomware	Standard Building Supplies Ltd. id3188 View details	2022-04-16		Construction / Real Estate	—	pending
No additional victim description available. ID 3188
Ransomware	Standard Building Supplies Ltd id3159 View details	2022-04-13		Construction / Real Estate	—	pending
No additional victim description available. ID 3159
Ransomware	Supplies Company Data Leak in British Columbia, Canada id3155 View details	2022-04-12		Services	—	pending
No additional victim description available. ID 3155
Ransomware	United States of America GOV id3104 View details	2022-04-06		Public Sector	—	pending
No additional victim description available. ID 3104
Ransomware	Ministry of Economy and Finance of Peru id2945 View details	2022-03-23		Finance / Legal / Insurance	—	pending
No additional victim description available. ID 2945
Ransomware	South Africa Electricity company id2872 View details	2022-03-18		Energy	—	pending
No additional victim description available. ID 2872
Ransomware	Instituto Nacional de Tecnología Agropecuaria id2836 View details	2022-03-15		Other	—	pending
No additional victim description available. ID 2836
Ransomware	UK GOV id2828 View details	2022-03-14		Other	—	pending
No additional victim description available. ID 2828
Ransomware	News id2827 View details	2022-03-14		Other	—	leaked
No additional victim description available. ID 2827
Ransomware	XEFI / Neocyber id2820 View details	2022-03-12		IT	—	pending
No additional victim description available. ID 2820
Ransomware	SPERONI SpA id2813 View details	2022-03-11		Other	—	pending
SPERONI SpA is an Italian engineering and manufacturing company headquartered in Cassine, specializing in the production of high-precision tool presetters and measuring systems for the global machining industry. The firm provides advanced solutions designed to optimize manufacturing workflows and ensure quality control in complex production environments. As a prominent player in the industrial technology sector, the organization maintains a significant international footprint. SPERONI SpA has been listed as a ransomware victim associated with the threat actor group known as Everest. ID 2813
Ransomware	XEFI id2801 View details	2022-03-08		Other		pending
No additional victim description available. ID 2801
Ransomware	Turner Construction Company id2795 View details	2022-03-07		Construction / Real Estate	—	pending
No additional victim description available. ID 2795
Ransomware	IDFC FIRST Bank id2792 View details	2022-03-07		Finance / Legal / Insurance	—	pending
No additional victim description available. ID 2792
Ransomware	Ledcor id2791 View details	2022-03-07		Other	—	pending
No additional victim description available. ID 2791
Ransomware	BEAUTYWEST, INC. id2788 View details	2022-03-07		Services	—	pending
No additional victim description available. ID 2788
Ransomware	Gershon Biegeleisen & Co id2787 View details	2022-03-07		Other	—	pending
No additional victim description available. ID 2787
Ransomware	Backus, Meyer & Branch, LLP id2786 View details	2022-03-07		Other	—	pending
No additional victim description available. ID 2786
Ransomware	Greenberg & Stein New York City Personal Injury Lawyers id2784 View details	2022-03-07		Finance / Legal / Insurance	—	pending
No additional victim description available. ID 2784
Ransomware	Law Offices of Brandon Sua & Associates id2783 View details	2022-03-07		Finance / Legal / Insurance	—	pending
No additional victim description available. ID 2783
Ransomware	Campbell Sales and Service, Inc id2782 View details	2022-03-07		Retail / E-commerce	—	pending
No additional victim description available. ID 2782
Ransomware	Federal land inc. id2781 View details	2022-03-07		Public Sector	—	pending
No additional victim description available. ID 2781
Ransomware	Centro Hospitalar de Setúbal id2779 View details	2022-03-07		Healthcare / Pharma	—	pending
No additional victim description available. ID 2779
Ransomware	Signum id2673 View details	2022-02-20		Other	—	pending
No additional victim description available. ID 2673
Ransomware	Various accesses on sale id2660 View details	2022-02-19		Other	—	pending
No additional victim description available. ID 2660
Ransomware	Weir & Partners LLP id2603 View details	2022-02-09		Other	—	pending
No additional victim description available. ID 2603
Ransomware	Florida lawyer’s data leaked id2525 View details	2022-01-27		Finance / Legal / Insurance	—	pending
No additional victim description available. ID 2525
Ransomware	Gardenworks id2474 View details	2022-01-21		Other	—	pending
No additional victim description available. ID 2474
Ransomware	AFG Canada id2465 View details	2022-01-19		Other	—	pending
No additional victim description available. ID 2465
Ransomware	Partnership id2453 View details	2022-01-16		Other	—	pending
No additional victim description available. ID 2453
Ransomware	Huhtamaki id2407 View details	2022-01-08		Other	—	pending
No additional victim description available. ID 2407
Ransomware	SPERONI SPA id2261 View details	2021-12-21		Other	—	pending
No additional victim description available. ID 2261
Ransomware	Jeffmoss id2153 View details	2021-12-09		Other	—	pending
No additional victim description available. ID 2153
Ransomware	Ktmtriallaw id2152 View details	2021-12-09		Finance / Legal / Insurance	—	pending
No additional victim description available. ID 2152
Ransomware	Saand id2075 View details	2021-12-06		Other	—	pending
No additional victim description available. ID 2075
Ransomware	Seldin id2063 View details	2021-12-04		Other	—	pending
No additional victim description available. ID 2063
Ransomware	Black Friday has arrived id1999 View details	2021-11-27		Other	—	pending
No additional victim description available. ID 1999
Ransomware	Società Italiana degli Autori ed Editori / Information updated id1982 View details	2021-11-23		Other	—	pending
No additional victim description available. ID 1982

Everest

Overview

Leak Status Distribution

Top Countries

Known Leak Locations (8)

Top Activity Sectors (16)