Ransomware Group intelligence

Fog

Inactive

Track Fog with 189 published victims and 3 known leak locations in a single intelligence view.

Victims 189 Known published victims in this dataset
First discovered 2024-07-16 Earliest victim discovery date
Last discovered 2025-03-20 Latest victim discovery date
Inactive since 485 days Days since the latest known victim
Top country United States 76 victims
Known locations 3 Leak or negotiation infrastructure tracked

Overview

Fog is tracked by Breach House as a ransomware group with 189 published victims.

United States is currently the most targeted country in this dataset.

3 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (3)

    Label Type Availability Links
    Leak location 1 Onion service Unknown xql562evsy7njcsngacphc2erzjfecwotdkobn3m4uxu2gtqh26newid.onion
    Leak location 2 Onion service Unknown xbkv2qey6u3gd3qxcojynrt4h5sgrhkar6whuo74wo63hijnn677jnyd.onion
    Leak location 3 Onion service Unknown xbkv2qey6u3gd3qxcojynrt4h5sgrhkar6whuo74wo63hijnn677jnyd.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (189)

    Search, filter and paginate the victim timeline for Fog. Showing 1–100 of 189.

    Type Target Discovered Country Business Category Intel Link
    Ransomware Newtown Friends School (newtownfriends.org) id18543 View details United States Education
    Ransomware RAE (Real Academia Española) (rae.es) id18469 View details Spain Other
    Ransomware University Diagnostic Medical Imaging, PC (udmi.net) id18386 View details United States Healthcare / Pharma
    Ransomware El Camino Real Academy (elcaminorealacademy) id18385 View details United States Education
    Ransomware Wilkinson Rogers (wilkinsonrogers.com) id18314 View details Other
    Ransomware Magnolia Manor (magnoliamanor.com) id18312 View details United States Other
    Ransomware WJCC Public Schools (wjccschools.org) id18220 View details United States Education
    Ransomware Oberlin Cable Co-op (oberlin.net) id18215 View details United States Other
    Ransomware 1X Internet id18213 View details Germany Other
    Ransomware Bizcode id18212 View details Italy Other
    Ransomware Manning Publications Co. id18211 View details United States Public Sector
    Ransomware Engikam id18210 View details Italy Other
    Ransomware FHNW id18209 View details Switzerland Other
    Ransomware Aeonsparx id18208 View details Malaysia Other
    Ransomware CIE id18207 View details Czechia Other
    Ransomware Flightsim studio id18206 View details Other
    Ransomware Neopoly id18205 View details Germany Other
    Ransomware Kr3m id18204 View details Germany Other
    Ransomware InfoReach id18203 View details United States Other
    Ransomware Euranova id18202 View details Belgium Other
    Ransomware Inelmatic id18201 View details Spain Other
    Ransomware Kotliva id18200 View details Russian Federation Other
    Ransomware Inet id18199 View details Thailand Other
    Ransomware Blue Planet id18198 View details Other
    Ransomware Eumetsat id18197 View details Germany Other
    Ransomware Melexis id18196 View details Belgium Other
    Ransomware USGS id18195 View details United States Other
    Ransomware The 19 biggest gitlabs id18189 View details Other
    Ransomware SCOLARO FETTER GRIZANTI & McGOUGH, P.C. (scolaro.com) id18186 View details United States Other
    Ransomware Pampili (pampili.com.br) id18168 View details Brazil Other
    Ransomware Grupo Baston Aerossol (baston.com.br) id18164 View details Brazil Other
    Ransomware Central McGowan (centralmcgowan.com) id18133 View details United States Other
    Ransomware Klesk Metal Stamping Co (kleskmetalstamping.com) id18132 View details United States Manufacturing / Engineering
    Ransomware Gitlabs: Synelixis Solutions, INGV, VMO Holdings id17832 View details Services
    Ransomware Bayteq id17726 View details Ecuador IT
    Ransomware WDNA id17725 View details Spain Telecommunications
    Ransomware Naphix id17724 View details Australia Other
    Ransomware Gitlabs: Naphix, WDNA, Bayteq id17723 View details Other
    Ransomware Hochschule id17643 View details Germany Education
    Ransomware VISEO id17642 View details France IT
    Ransomware Next TI id17641 View details Indonesia Finance / Legal / Insurance
    Ransomware Haggin Oaks Golf (hagginoaks.com) id17633 View details United States Other
    Ransomware Gitlabs: Next TI, VISEO, Hochschule Trier id17628 View details Other
    Ransomware Greencastle-Antrim Senior High School (gcasd.org) id17568 View details United States Education
    Ransomware Pamrya.de id17560 View details Germany Transportation / Travel / Logistics
    Ransomware QBurst id17559 View details India IT
    Ransomware Acqua development id17558 View details Romania IT
    Ransomware Gitlabs: Acqua development, QBurst, Pamyra.de id17557 View details IT
    Ransomware ADULLACT id17519 View details France Communication / Marketing
    Ransomware Ayomi id17518 View details France Communication / Marketing
    Ransomware Omydoo id17517 View details France Services
    Ransomware Gitlabs: Omydoo, Ayomi, ADULLACT id17516 View details Other
    Ransomware Mozo Grau (mozo-grau.com) id17513 View details Spain Other
    Ransomware Squeezer-software id17494 View details Tunisia IT —
    Ransomware Spacemanic id17493 View details Czechia Services —
    Ransomware INGV id17492 View details Italy IT —
    Ransomware Gitlabs: INGV, Spacemanic, Squeezer-software id17491 View details United States IT
    Ransomware Hess (hess-gmbh.de) id17473 View details Germany Other
    Ransomware Saint George's College (saintgeorge.cl) id17438 View details Chile Education
    Ransomware Aurora Public Schools (aurorak12.org) id17437 View details United States Education
    Ransomware The University of Notre Dame Australia (nd.edu.au) id17431 View details Australia Education
    Ransomware iRidge Inc. id17283 View details Japan IT
    Ransomware Maxvy Technologies Pvt id17282 View details India IT
    Ransomware Universitatea Politehnica din Bucuresti id17281 View details Romania IT
    Ransomware Gitlabs: Universitatea Politehnica din Bucuresti, Maxvy Technologies Pvt, iRidge Inc. id17277 View details IT
    Ransomware 3SS id17268 View details Germany Other —
    Ransomware Fligno id17267 View details Norway Other —
    Ransomware Chalmers tekniska högskola id17266 View details Sweden Other —
    Ransomware Gitlabs: Chalmers tekniska högskola, Fligno, 3SS id17264 View details Other
    Ransomware DIEM id17245 View details Italy Other —
    Ransomware Top Systems id17244 View details Brazil Services —
    Ransomware eConceptions id17243 View details Pakistan Other —
    Ransomware Gitlabs: eConceptions, Top Systems, DIEM id17242 View details Services
    Ransomware Kombinat id17223 View details Austria Communication / Marketing
    Ransomware HE2B id17222 View details Belgium Communication / Marketing
    Ransomware Prasaga id17221 View details United States Communication / Marketing
    Ransomware Propulsion Academy AG id17220 View details Switzerland Communication / Marketing
    Ransomware X-Pans id17219 View details France Communication / Marketing
    Ransomware Professional Computer Co., Ltd. id17218 View details Thailand Communication / Marketing
    Ransomware LUA Coffee id17217 View details Indonesia Communication / Marketing
    Ransomware GFZ Helmholtz Centre for Geosciences id17216 View details Germany Communication / Marketing
    Ransomware PT. ITPRENEUR INDONESIA TECHNOLOGY id17215 View details Indonesia IT
    Ransomware Devlion id17214 View details Israel Other
    Ransomware SOLEIL id17213 View details France Other
    Ransomware hemio.de id17212 View details Germany Other
    Ransomware Madia id17211 View details Netherlands Other
    Ransomware X-lab group id17210 View details Egypt Services
    Ransomware Bolin Centre for Climate Research id17209 View details Sweden Other
    Ransomware Gitlabs: hemio.de, SOLEIL, Devlion id17208 View details Germany Other
    Ransomware Gitlabs: Bolin Centre for Climate Research, X-lab group, Madia id17142 View details Services
    Ransomware Karadeniz Holding (karadenizholding.com) id17140 View details Türkiye Other
    Ransomware Gitlabs: PT. ITPRENEUR INDONESIA TECHNOLOGY, GFZ Helmholtz Centre for Geosciences, LUA Cof... id17105 View details Indonesia IT
    Ransomware Gitlabs: Professional Computer, X-Pans, Propulsion Academy AG id17023 View details Switzerland Communication / Marketing
    Ransomware Gitlabs: Prasaga, HE2B, Kombinat id17004 View details United States Communication / Marketing
    Ransomware Boutin Jones (boutindentino.com) id16980 View details United States Other
    Ransomware De La Salle High School (dlshs.org) id16818 View details United States Education
    Ransomware ELTEK Group (eltekgroup.com) id16817 View details Italy Services
    Ransomware Kooijman Vianen (kooijmanvianen.nl) id16781 View details Netherlands Other
    Ransomware The University of Oklahoma (ou.edu) id16646 View details United States Education
    Ransomware SciTech Services, Inc. id16645 View details United States IT