Ransomware Group intelligence

Fog

Inactive

Track Fog with 189 published victims and 3 known leak locations in a single intelligence view.

Victims 189 Known published victims in this dataset
First discovered 2024-07-16 Earliest victim discovery date
Last discovered 2025-03-20 Latest victim discovery date
Inactive since 485 days Days since the latest known victim
Top country United States 76 victims
Known locations 3 Leak or negotiation infrastructure tracked

Overview

Fog is tracked by Breach House as a ransomware group with 189 published victims.

United States is currently the most targeted country in this dataset.

3 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (3)

    Label Type Availability Links
    Leak location 1 Onion service Unknown xql562evsy7njcsngacphc2erzjfecwotdkobn3m4uxu2gtqh26newid.onion
    Leak location 2 Onion service Unknown xbkv2qey6u3gd3qxcojynrt4h5sgrhkar6whuo74wo63hijnn677jnyd.onion
    Leak location 3 Onion service Unknown xbkv2qey6u3gd3qxcojynrt4h5sgrhkar6whuo74wo63hijnn677jnyd.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (189)

    Search, filter and paginate the victim timeline for Fog. Showing 101–189 of 189.

    Type Target Discovered Country Business Category Intel Link
    Ransomware Buttery (butterycompany.com) id16644 View details United States Services
    Ransomware OmniRide (omniride.com) id16570 View details United States Other
    Ransomware Saint-Bar (saintbar.be) id16529 View details Belgium Hospitality / Food & Beverage / Tourism
    Ransomware Ober Mountain (OberGatlinburg.com) id16408 View details United States Other
    Ransomware Aroma Housewares Co (Aromaco.com) id16394 View details United States Other
    Ransomware RODS Surveying (rods.cc) id16287 View details Australia Other
    Ransomware Forum Architecture & Interior Design (forumarchitecture.com) id16283 View details United States Construction / Real Estate
    Ransomware Gallade Chemical (galladechem.com) id16282 View details United States Manufacturing / Engineering
    Ransomware Industria e Comercio Jolitex Ltda (jolitex.com) id16281 View details Brazil Services
    Ransomware Schenkelberg - Die Medienstrategen (schenkelberg-druck.de) id16229 View details Germany Other
    Ransomware Village Community School (vcsnyc.org) id16228 View details United States Education
    Ransomware Circle Electric (circleelectric.com) id16227 View details United States Other
    Ransomware Howell Township Public Schools (howell.k12.nj.us) id16224 View details United States Education
    Ransomware EP Holdings (epholdingsinc.com) id16223 View details United States Services
    Ransomware Jet Edge (jetedgewaterjets.com) id16208 View details United States Other
    Ransomware Energy Capital Credit Union (eccu.net) id16207 View details United States Finance / Legal / Insurance
    Ransomware Vroninks Ricker Weyts & Sacre- Notaires (notassoc.be) id16178 View details Belgium Other
    Ransomware Reliance Connects (relianceconnects.com) id16177 View details United States Other
    Ransomware SpeedLine Solutions (speedlinesolutions.com) id16140 View details Canada Services
    Ransomware Ouro Verde (ouroverde.net.br) id16137 View details Brazil Other
    Ransomware Cognity (cognity.gr) id16111 View details Greece Other
    Ransomware Waverley Christian College (wcc.vic.edu.au) id16110 View details Australia Education
    Ransomware Planters Telephone Cooperative (planters.net) id15986 View details United States Other
    Ransomware Dorner (dorner-gmbh.de) id15874 View details Germany Other
    Ransomware Conlin's Pharmacy (conlinspharmacy.com) id15796 View details Ireland Healthcare / Pharma
    Ransomware Weld Racing (weldracing.com) id15762 View details United States Other
    Ransomware Chanas Assurances S.A. (chanasassurances.com) id15715 View details Cameroon Other
    Ransomware ALLTUB Group (alltub.com) id15714 View details France Services
    Ransomware Bedminster School (bedminsterschool.org) id15713 View details United States Education
    Ransomware WPM Pathology Laboratory (wpmpath.com) id15708 View details Australia Other
    Ransomware Gruber Tool & Die (grubertool.com) id15683 View details United States Other
    Ransomware Signal Health Washington (signalhealthwa.com) id15670 View details United States Healthcare / Pharma
    Ransomware Pioneer Urban Land & Infrastructure (pioneerurban.in) id15659 View details India Construction / Real Estate
    Ransomware Pinnacle Plastic Products (pinnacleplasitcporducts.com) id15658 View details United States Manufacturing / Engineering
    Ransomware Complete Recycling Services (completerecyclingservices.com) id15657 View details United States Services
    Ransomware Marketing Incentives (leinsterappointments.ie) id15655 View details Ireland Communication / Marketing
    Ransomware Metroline (metrolinedirect.com) id15654 View details United States Other
    Ransomware Hogan Mfg (hoganmfg.com) id15559 View details United States Other
    Ransomware Fifteenfortyseven Critical Systems Realty (1547realty.com) id15558 View details United States Services
    Ransomware Burkburnett Independent School District id15487 View details United States Education
    Ransomware Valley Planing Mill (valleyplaning.com) id15486 View details United States Other
    Ransomware Waters Truck and Tractor (waterstruck.com) id15397 View details United States Other
    Ransomware Vector Transport (vectortransport.com) id15349 View details India Transportation / Travel / Logistics
    Ransomware Cape Cod Regional Technical High School (capetech.us) id15181 View details United States IT
    Ransomware GSR Andrade Architects (gsr-andrade.com) id15180 View details Brazil Other
    Ransomware Askling Car (asklingbil.se) id15084 View details Sweden Other
    Ransomware Jillamy (jillamy.com) id15061 View details United States Other
    Ransomware SmartSource (smartsource-inc.com) id15059 View details United States Services
    Ransomware Jordan Public Schools (https://www.jordan.k12.mn.us/) id15036 View details United States Education
    Ransomware Sage Automotive Interior (sageautomotiveinteriors.com) id15035 View details United States Manufacturing / Engineering
    Ransomware Evergreen SD50 (evergreensd50.com) id15017 View details Canada Other
    Ransomware Cucamonga Valley Water District (cvwdwater.com) id14978 View details United States Other
    Ransomware Evergreen Local School District (evgvikings.org) id14977 View details United States Education
    Ransomware Value City NJ (valuecitynj.com) id14949 View details United States Public Sector
    Ransomware The Getz Group (getz.com.hk) id14948 View details Hong Kong Services
    Ransomware Apache Mills, Inc. (apachemills.com) id14942 View details United States Services
    Ransomware Goshen Central School District (gcsny.org) id14908 View details United States Education
    Ransomware Mar-Bal (mar-bal.com) id14907 View details United States Other
    Ransomware Lincoln University (lincolnu.edu) id14899 View details United States Education
    Ransomware Clear Connection (clearconnection.com) id14898 View details United States Other
    Ransomware Schweiger Transport (schweiger-gmbh.de) id14864 View details Germany Transportation / Travel / Logistics
    Ransomware Philadelphia Macaroni (philamacaroni.com) id14863 View details United States Other
    Ransomware Trimarc Financial (trimarc.com) id14860 View details United States Finance / Legal / Insurance
    Ransomware Fromm (FrommBeauty.com) id14821 View details United States Other
    Ransomware Ultra Tune (ultratune.com.au) id14820 View details Australia Other
    Ransomware Welker (welker.com) id14796 View details United States Other
    Ransomware Cordogan Clark and Associates (cordoganclark.com) id14795 View details United States Other
    Ransomware Food Sciences Corporation (foodsciences.com) id14789 View details United States Agriculture / Food
    Ransomware Central Pennsylvania Food Bank id14777 View details United States Finance / Legal / Insurance
    Ransomware Juice Generation id14394 View details United States Other
    Ransomware Sunrise Farms id14374 View details Canada Agriculture / Food
    Ransomware Prentke Romich Company id14356 View details United States Communication / Marketing
    Ransomware S. Walter Packaging id14256 View details United States Other
    Ransomware Clatronic International GmbH id14255 View details Germany Services
    Ransomware Seaway Manufacturing Corp. id13845 View details United States Manufacturing / Engineering
    Ransomware IOI Corporation Berhad id13700 View details Malaysia Services
    Ransomware Ziba Design id13699 View details United States Other
    Ransomware Hi-P International id13691 View details Singapore Services
    Ransomware BASF - Nunhems id13595 View details Netherlands Other
    Ransomware City of Cold Lake id13579 View details Canada Public Sector
    Ransomware Odessa College id13538 View details United States Education
    Ransomware Wichita State University Campus of Applied Sciences and Technology id13474 View details Education
    Ransomware Geelong Lutheran College id13385 View details Education
    Ransomware Asbury Theological Seminary id13384 View details Other
    Ransomware Djg Projects id13383 View details Communication / Marketing
    Ransomware Verweij Elektrotechniek id13382 View details IT
    Ransomware Alvin Independent School District id13381 View details United States Education
    Ransomware West Allis-West Milwaukee School District id13380 View details United States Education
    Ransomware German University of Technology in Oman id13379 View details Oman IT