Ransomware Group intelligence
Global Secret Group
ActiveTrack Global Secret Group with 82 published victims and 1 known leak locations in a single intelligence view.
BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Overview
Global Secret Group is tracked by Breach House as a ransomware group with 82 published victims.
United States is currently the most targeted country in this dataset.
1 known leak locations are currently associated with this group.
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (1)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 1 | Onion service | Up checked 7h ago | o5lsqyar7ox25z734k6zaxt2vf7bsyi4q5rturi5iyxzqo3ica7bjsad.onion |
Top Activity Sectors (12)
Typical Attacks (12)
▼MITRE ATT&CK does not currently catalogue Global Secret Group, so this is our assessment of the techniques it uses, drawn from public reporting. The techniques themselves, and every "what that means" definition below, come from MITRE ATT&CK v19.2. Confidence: medium. Treat it as orientation, not attribution.
-
T1059.001 PowerShell Execution
What they do: Global Secret Group leverages PowerShell scripts to execute malicious payloads and stage ransomware binaries across compromised hosts.
What that means: Adversaries may abuse PowerShell commands and scripts for execution.
-
T1685 Disable or Modify Tools Defense Impairment
What they do: Global Secret Group disables antivirus tools by terminating security processes and modifying Windows Defender settings to evade detection.
What that means: Adversaries may disable, degrade, or tamper with security tools or applications (e.g., endpoint detection and response (EDR) tools, intrusion detection systems (IDS), antivirus, logging agents, sensors, etc.) to impair or reduce visibility of defensive capabilities.
-
T1070.004 File Deletion Stealth
What they do: Global Secret Group deletes Volume Shadow Copies via vssadmin and system restore points to prevent data recovery attempts.
What that means: Adversaries may delete files left behind by the actions of their intrusion activity.
-
T1083 File and Directory Discovery Discovery
What they do: Global Secret Group executes file and directory discovery via PowerShell to locate critical documents and shadow copies before encryption.
What that means: Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system.
-
T1135 Network Share Discovery Discovery
What they do: Global Secret Group uses network share discovery to map SMB endpoints and identify high-value data repositories for exfiltration.
What that means: Adversaries may look for folders and drives shared on remote systems as a means of identifying sources of information to gather as a precursor for Collection and to identify potential systems of interest for Lateral Movement.
-
T1021.002 SMB/Windows Admin Shares Lateral Movement
What they do: Global Secret Group moves laterally through SMB/Windows Admin Shares to compromise additional servers within the network.
What that means: Adversaries may use Valid Accounts to interact with a remote network share using Server Message Block (SMB).
-
T1560.001 Archive via Utility Collection
What they do: Global Secret Group archives stolen data using built-in utility commands before exfiltration to support extortion demands.
What that means: Adversaries may use utilities to compress and/or encrypt collected data prior to exfiltration.
-
T1041 Exfiltration Over C2 Channel Exfiltration
What they do: Global Secret Group exfiltrates victim data over encrypted C2 channels using custom Python scripts before deployment.
What that means: Adversaries may steal data by exfiltrating it over an existing command and control channel.
-
T1485 Data Destruction Impact
What they do: Global Secret Group performs targeted data destruction on non-essential directories to maximize operational disruption.
What that means: Adversaries may destroy data and files on specific systems or in large numbers on a network to interrupt availability to systems, services, and network resources.
-
T1486 Data Encrypted for Impact Impact
What they do: Global Secret Group encrypts victim files using AES-256 encryption with custom ransomware binaries targeting business documents and databases.
What that means: Adversaries may encrypt data on target systems or on large numbers of systems in a network to interrupt availability to system and network resources.
-
T1489 Service Stop Impact
What they do: Global Secret Group stops critical Windows services like backup and monitoring utilities via net stop commands to disrupt recovery.
What that means: Adversaries may stop or disable services on a system to render those services unavailable to legitimate users.
-
T1490 Inhibit System Recovery Impact
What they do: Global Secret Group inhibits system recovery by corrupting backup configurations and disabling restore mechanisms post-encryption.
What that means: Adversaries may delete or remove built-in data and turn off services designed to aid in the recovery of a corrupted system to prevent recovery.
Victims (82)
Search, filter and paginate the victim timeline for Global Secret Group. Showing 1–82 of 82.
| Type | Target | Discovered | Country | Business Category | Intel Link |
|---|---|---|---|---|---|
| Ransomware | Mesan USA id32728 View details | United States | Services | ||
|
mesanusa.com operates within the Services sector and is based in the United States. The entity provides professional and service-oriented offerings consistent with its identified sector profile. It has been cataloged in this threat-intelligence index specifically as a ransomware victim, with the associated threat actor and source attributed to Global Secret Group. This listing reflects the entity's documented relationship to this threat actor within cybersecurity intelligence records. The description remains neutral and factual, focusing on the entity's classification and its association without speculating on unconfirmed incident details. |
|||||
| Ransomware | Mesan USA id32728 View details | United States | Services | ||
|
Country: Miami, Florida 33166, US | Website: mesanusa.com | Revenue: $5.4 Million | Industry: Industrial Machinery & Equipment, Manufacturing | Employees: 10-20 | Properties: 184 GB (188,562 Files, 26,169 Folders) |
|||||
| Ransomware | Quality Resource Pvt id32408 View details | United States | Services | ||
|
qualityresourcepvt.com operates within the Services sector and is based in the United States. The entity provides professional resource and service-oriented offerings, though specific internal operations remain outside verified public disclosures in this intelligence context. According to the threat-intelligence index, qualityresourcepvt.com is cataloged as a ransomware victim linked to the Global Secret Group threat actor. This listing type indicates a cybersecurity incident classification without confirming stolen data, breach details, or operational impact specifics. The entry serves threat analysts and security professionals seeking structured context on affected organizations within the Services sector in the US. |
|||||
| Ransomware | Quality Resource Pvt id32408 View details | United States | Services | ||
|
Country: United States | Website: qualityresourcepvt.com | Revenue: $19 Million | Industry: Advertising Networks | Employees: 201–500 employees | Properties: 60.1 GB (170,436 Files, 88,440 Folders) |
|||||
| Ransomware | R L Fine Chem Pvt. Ltd. id32357 View details | India | Manufacturing / Engineering | ||
|
rlfinechem.com operates within the manufacturing and engineering sector, based in India, and provides specialized commercial and technical services relevant to industrial operations and product development. The entity is cataloged in this threat-intelligence index under the ransomware victim listing type, associated with the Global Secret Group threat actor. This classification reflects its inclusion in threat-intelligence records documenting cybersecurity incidents affecting organizations in this sector and geographic region. The description remains neutral regarding specific incident details, as confirmed specifics are not publicly attributable to the company. This entry supports security professionals monitoring ransomware activity across industrial sectors globally. |
|||||
| Ransomware | R L Fine Chem Pvt. Ltd. id32357 View details | India | Manufacturing / Engineering | ||
|
Country: BANGALORE, Karnataka, India | Website: rlfinechem.com | Revenue: $54.3 Million | Industry: Pharmaceutical Manufacturing | Employees: 500-1000 | Properties: 18.6 GB (14,155 Files, 2,840 Folders) |
|||||
| Ransomware | Tiseo Paving id32121 View details | United States | Services | ||
|
tiseopaving.com operates within the Services sector and is located in the United States. The entity is cataloged as a ransomware victim within the threat-intelligence index, linked to the Global Secret Group threat actor. This listing type indicates involvement in a cyber incident attributed to this specific actor group. The description focuses on the entity's classification and associated threat context without disclosing unverified incident details. Comprehensive threat intelligence tracking documents such affiliations to ensure awareness across security communities. |
|||||
| Ransomware | Tiseo Paving id32121 View details | United States | Services | ||
|
Country: Texas, US | Website: tiseopaving.com | Revenue: $22.6 Million | Industry: Construction, Commercial & Residential Construction | Employees: 50-100 | Properties: 457 GB (83,932 Files, 10,829 Folders) |
|||||
| Ransomware | Johnson City Honda id32122 View details | United States | Manufacturing / Engineering | ||
|
Johnson City Honda.com operates within the United States manufacturing and engineering sectors, providing domain-specific services aligned with industrial operations and technical engineering workflows. As cataloged in this threat-intelligence index, the entity is classified as a ransomware victim linked to the Global Secret Group, a threat actor identified in cybersecurity threat reporting. The listing reflects the entity's association with this threat actor within the context of ransomware incidents affecting industrial and engineering organizations. This description maintains a neutral, encyclopedic perspective on the entity's sector profile and its documented relationship to the specified threat actor without disclosing unverified incident details. The catalog entry serves to inform threat-intelligence stakeholders of the entity's classification and associated risk profile. |
|||||
| Ransomware | Johnson City Honda id32122 View details | United States | Manufacturing / Engineering | ||
|
Country: Tennessee, United States | Website: johnsoncityhonda.com | Revenue: $6,5 Million | Industry: Automobile Dealers | Employees: 11-50 | Properties: 32.9 GB(34,277 Files, 8,896 Folders) |
|||||
| Ransomware | Lockheed Architectural Solutions, Inc. id32123 View details | United States | IT | ||
|
lockheedsolutions.com operates within the IT sector and provides technology-focused solutions and services, though specific operational details remain limited in public threat-intelligence records. This entity is cataloged within a threat-intelligence index under the designation ransomware victim, associated with the Global Secret Group threat actor. The listing reflects cybersecurity monitoring observations linking the organization to activity attributed to this group, contextualized by its US geographic presence and IT industry focus. No confirmed breach specifics, data exfiltration details, or financial impact are stated in this entry. This description serves to neutrally document the entity's classification for threat-aware catalog purposes. |
|||||
| Ransomware | Lockheed Architectural Solutions, Inc. id32123 View details | United States | IT | ||
|
Country: Pascoag, RI 02859, United States | Website: lockheedsolutions.com | Revenue: $31.2 Million | Industry: Manufacturing, Construction, Building Materials | Employees: 100-200 | Properties: 1.3 TB (558,462 Files, 97,835 Folders) |
|||||
| Ransomware | The Rubber Group id31800 View details | United States | — | ||
|
Country: New Hampshire,US | Website: www.rubber-group.com | Revenue: $19.4 Million | Industry: Plastics Manufacturing, Tires & Rubber, Manufacturing | Employees: 50-100 | Properties: 162 GB (207,203 Files, 21,624 Folders) |
|||||
| Ransomware | 4M REALTY COMPANY id31797 View details | United States | — | ||
|
Country: Texas, US | Website: 4mrealty.com | Revenue: $5 Million | Industry: Real Estate Brokerage, Real Estate Sales, Property Sales, Commercial Real Estate | Employees: 20-50 | Properties: 237 GB (54,995 Files, 4,600 Folders) |
|||||
| Ransomware | Columbia University Information (Dental) id31720 View details | United States | Education | ||
|
Columbia University, located in the US, is a prestigious institution of higher education offering a wide range of academic programs. The university is part of the Ivy League and is known for its research and academic excellence. It was listed as a ransomware victim associated with Global Secret Group. |
|||||
| Ransomware | Columbia University Information (Dental) id31720 View details | United States | Education | ||
|
Country: New York, US | Website: columbia.edu | Revenue: $6.6 Billion | Industry: Colleges & Universities | Employees: 20.000-25.000 | Properties: 296 GB (283,387 Files, 11,268 Folders) |
|||||
| Ransomware | Coggins Insurance Agency id31535 View details | United States | Finance / Legal / Insurance | ||
|
Cogginsinsurance.com is a US-based company operating in the finance and insurance sector, providing various insurance services. The company is part of a broader industry that includes legal and financial services. Cogginsinsurance.com was listed as a ransomware victim associated with Global Secret Group. |
|||||
| Ransomware | Coggins Insurance Agency id31535 View details | United States | Finance / Legal / Insurance | ||
|
Country: Florida, United States | Website: cogginsinsurance.com | Revenue: $5 Million | Industry: Insurance | Employees: 1-10 | Properties: 85.9 GB (245,768 Files, 26,563 Folders) |
|||||
| Ransomware | MACOFIN HELLAS S.A. id31526 View details | Greece | Finance / Legal / Insurance | ||
|
Maco-fin.com is a financial services company based in Greece, operating in the finance, legal, and insurance sector. The company provides various financial services to its clients. Maco-fin.com was listed as a ransomware victim associated with Global Secret Group |
|||||
| Ransomware | MACOFIN HELLAS S.A. id31526 View details | Greece | Finance / Legal / Insurance | ||
|
Country: Greece | Website: maco-fin.com | Revenue: $10 Million | Industry: Real Estate / Asset Management / Investment Services | Employees: 11–50 Employees | Properties: 55.3 GB (48,089 Files, 7,491 Folders) |
|||||
| Ransomware | Cook Remodeling id31522 View details | United States | Construction / Real Estate | ||
|
Cook Remodeling is a US-based company operating in the construction and real estate sector, providing remodeling services. The company is involved in various construction projects, offering services to clients in the US. Cookremodeling.com was listed as a ransomware victim associated with Global Secret Group |
|||||
| Ransomware | Cook Remodeling id31522 View details | United States | Construction / Real Estate | ||
|
Country: Arizona, United States Website: cookremodeling.com | Revenue: $5 Million | Industry: Construction Management | Employees: 11-50 Properties: 23.2 GB (47,193 Files, 8,323 Folders) |
|||||
| Ransomware | Pavillon id31294 View details | United States | NGOs / Associations | ||
|
Pavillon.org is a US-based organization operating in the NGOs and associations sector. The entity provides various services and support to its members and community. Pavillon.org was listed as a ransomware victim associated with Global Secret Group. |
|||||
| Ransomware | Pavillon id31294 View details | United States | NGOs / Associations | ||
|
Country: Mill Spring, North Carolina, United States | Website: pavillon.org | Revenue: $8.5 Million | Industry: Alcoholism Treatment, Hospitals & Clinics, Healthcare | Employees: 100-200 | Properties: 646 GB (47,950 Files, 7,750 Folders) |
|||||
| Ransomware | Vernon & Waldrep id31146 View details | United States | Finance / Legal / Insurance | ||
|
Vernon Waldrep is a company operating in the finance, legal, and insurance sector in the United States. The company provides various services related to its sector. It was listed as a ransomware victim associated with Global Secret Group. |
|||||
| Ransomware | Vernon & Waldrep id31146 View details | United States | Finance / Legal / Insurance | ||
|
Country: Texas, United States | Website: vernonwaldrep.com | Revenue: $5 Million | Industry: Physicians, Mental Health Specialists | Employees: 21–50 | Properties: 274 GB (56,006 Files, 3,421 Folders) |
|||||
| Ransomware | Louisiana Coalition Against | Domestic Violence id30956 View details | United States | NGOs / Associations | ||
|
Lcadv.org is a US-based non-governmental organization operating in the associations sector, providing services and support to its members. The organization is located in the United States and offers various resources and initiatives. Lcadv.org was listed as a ransomware victim associated with Global Secret Group |
|||||
| Ransomware | Louisiana Coalition Against | Domestic Violence id30956 View details | United States | NGOs / Associations | ||
|
Country: US | Website: lcadv.org | Revenue: $13.3 Million | Industry: Non-Profit & Charitable Organizations | Employees: 201-500 | Properties: 241 GB (287,451 Files, 31,100 Folders) |
|||||
| Ransomware | Park Manufacturing Corp. id30945 View details | United States | Manufacturing / Engineering | ||
|
Parkmfg.com operates in the manufacturing and engineering sector, providing services in the United States. The company's offerings cater to the needs of its clients within this sector. Parkmfg.com was listed as a ransomware victim associated with Global Secret Group. |
|||||
| Ransomware | Park Manufacturing Corp. id30945 View details | United States | Manufacturing / Engineering | ||
|
Country: Cambridge, Minnesota 55008, US | Website: parkmfg.com | Revenue: $17.9 Million | Industry: Appliances, Electrical, and Electronics Manufacturing | Employees: 50-100 | Properties: 195 GB (411,109 Files, 48,413 Folders) |
|||||
| Ransomware | Hinduja Tech | BMW Group & Škoda Auto id30936 View details | India | IT | ||
|
Hindujatech.com is an IT company based in India, offering various IT services. The company operates in the IT sector, providing services to its clients. Hindujatech.com was listed as a ransomware victim associated with Global Secret Group |
|||||
| Ransomware | Hinduja Tech | BMW Group & Škoda Auto id30936 View details | India | IT | ||
|
Country: India | Website: hindujatech.com | Revenue: $381 Million | Industry: Engineering Services, Architecture, Engineering & Design, Product Engineering Solutions | Employees: 2000-5000 | Properties: 515 GB (212,785 Files, 83,982 Folders) |
|||||
| Ransomware | Pro-Tuff | Decals id30930 View details | United States | Retail / E-commerce | ||
|
Protuffdecals.com is an e-commerce retailer based in the United States, operating in the retail sector. The company offers various products online. Protuffdecals.com was listed as a ransomware victim associated with Global Secret Group |
|||||
| Ransomware | Pro-Tuff | Decals id30930 View details | United States | Retail / E-commerce | ||
|
Country: Crystal Lake, US | Website: protuffdecals.com | Revenue: $9.6 million | Industry: Business Services General, Business Services | Employees: 10-20 | Properties: 412 GB (589,623 Files, 40,081 Folders) |
|||||
| Ransomware | Spergel id30933 View details | Canada | — | ||
|
Country: Canada | Website: spergel.ca | Revenue: $28.2 Million | Industry: Business Services,Project Management | Employees: 51-200 | Properties: 5.4 TB (7,830,792 Files, 902,844 Folders) |
|||||
| Ransomware | Prism Telecom id30918 View details | Finland | — | — | |
|
Prismtelecom.com operates in the telecommunications sector, providing services in Finland. The company's offerings likely include a range of telecom services. Prismtelecom.com was listed as a ransomware victim associated with Global Secret Group. |
|||||
| Ransomware | Prism Telecom id30918 View details | Finland | — | — | |
|
Backbone network traffic analysis and SS7 protocol vulnerability assessment across 3 continents. |
|||||
| Ransomware | Cipher Dynamics id30919 View details | India | IT | — | |
|
Cipherdyn.com is an IT company based in India, offering various services in the technology sector. As a company in the IT sector, Cipherdyn.com provides solutions to clients in India. Cipherdyn.com was listed as a ransomware victim associated with Global Secret Group. |
|||||
| Ransomware | Cipher Dynamics id30919 View details | India | IT | — | |
|
Zero-trust architecture review and cryptographic key management assessment. |
|||||
| Ransomware | Stratos Network id30920 View details | United Arab Emirates | IT | — | |
|
Stratosns.com is an IT company based in the United Arab Emirates, offering various services within the IT sector. The company operates within a competitive market, providing solutions to its clients. Stratosns.com was listed as a ransomware victim associated with Global Secret Group. |
|||||
| Ransomware | Stratos Network id30920 View details | United Arab Emirates | IT | — | |
|
Satellite communication relay analysis with deep-packet inspection across 14 ground stations. |
|||||
| Ransomware | OmniLink AG id30921 View details | Germany | IT | — | |
|
Omnilink software is an IT company based in Germany, providing various software solutions. The company operates in the IT sector, offering its services to clients. Omnilink software was listed as a ransomware victim associated with Global Secret Group. |
|||||
| Ransomware | OmniLink AG id30921 View details | Germany | IT | — | |
|
Full-scope penetration testing of financial transaction processing pipeline and API gateway. |
|||||
| Ransomware | Vertex Systems id30922 View details | United States | IT | — | |
|
Vertex Systems is an IT company based in the US, offering various services within the technology sector. As a US-based entity, Vertex Systems operates in a competitive market, providing IT solutions to its clients. Vertex Systems was listed as a ransomware victim associated with Global Secret Group |
|||||
| Ransomware | Vertex Systems id30922 View details | United States | IT | — | |
|
Ongoing analysis of cloud-native architecture and microservice communication protocols. |
|||||
| Ransomware | Nexon Corp. id30923 View details | Korea, Republic of | IT | — | |
|
Nexon.com is a Korean online gaming company that develops and publishes various online games. The company is part of the IT sector and is based in South Korea, offering a range of gaming services to its users. Nexon.com was listed as a ransomware victim associated with Global Secret Group |
|||||
| Ransomware | Nexon Corp. id30923 View details | Korea, Republic of | IT | — | |
|
Internal infrastructure audit revealed multiple critical entry points across distributed network segments. |
|||||
| Ransomware | Farmers Mutual Fire Insurance id30924 View details | United States | Agriculture / Food | ||
|
Farmersofmarble.com operates within the agriculture and food sector in the United States, providing services related to this industry. As an entity in this sector, it is involved in activities such as farming, food production, or distribution. Farmersofmarble.com was listed as a ransomware victim associated with Global Secret Group |
|||||
| Ransomware | Farmers Mutual Fire Insurance id30924 View details | United States | Agriculture / Food | ||
|
Country: Pennsylvania, United States | Website: farmersofmarble.com | Revenue: $5.2 Million | Industry: Insurance | Employees: 11-50 | Properties: 5.72 GB (18,699 Files, 2,631 Folders) |
|||||
| Ransomware | West Sixth Law id30925 View details | United States | — | ||
|
Country: Columbus, Indiana, United States | Website: agslawyers.com | Revenue: $5 Million | Industry: Law Firms & Legal Services | Employees: 11-50 Employees | Properties: 328 GB (708,816 Files, 47,925 Folders) |
|||||
| Ransomware | Baker Business & Tax Solutions id30926 View details | United States | — | ||
|
Country: Kentucky, United States | Website: bakerbusinessandtax.com | Revenue: $1 Million | Industry: Accounting for Legal Practices | Employees: 1-10 Employees | Properties: 213Gb (817,209 Files, 48,866 Folders) |
|||||
| Ransomware | Carpets Direct id30927 View details | United States | — | ||
|
Country: Ohio, United States | Website: carpetsdirectfindlay.com | Revenue: $5 Million | Industry: Retail,Furniture | Employees: 11-50 | Properties: 31.1 GB (1,442 Files, 788 Folders) |
|||||
| Ransomware | AnyWeather id30928 View details | United States | — | ||
|
Country: Kentucky, United States | Website: ohrestorationservices.com | Revenue: $6 Million | Industry: Construction | Employees: 30 Employees | Properties: 301 GB (33,041 Files, 4,133 Folders) |
|||||
| Ransomware | Middendorf Animal Hospital & Laser Centre id30929 View details | United States | — | ||
|
Country: Kentucky, United States | Website: middendorfanimalhospital.com | Revenue: <$5 Million | Industry: Healthcare Services,Veterinary Services | Employees: 11-50 | Properties: 28.1 GB (34,237 Files, 8,806 Folders) |
|||||
| Ransomware | Chappell Supply & Equipment id30884 View details | United States | Construction / Real Estate | ||
|
Chappell Supply is a US-based company operating in the construction and real estate sector, offering various services and products. The company is involved in providing supplies and materials for construction projects. Chappell Supply was listed as a ransomware victim associated with Global Secret Group. |
|||||
| Ransomware | Chappell Supply & Equipment id30884 View details | United States | Construction / Real Estate | ||
|
Country: Oklahoma, United States | Website: chappellsupply.com | Revenue: $9.2 Million | Industry: Consumer Services,Retail,Manufacturing,Repair Services | Employees: 11-50 | Properties: 160 GB (268,758 Files, 30,522 Folders) |
|||||
| Ransomware | La Sevillanita id30885 View details | Argentina | Hospitality / Food & Beverage / Tourism | ||
|
Lasevillanita.com is an Argentine entity operating in the hospitality, food and beverage, and tourism sector. The company likely provides services such as accommodations, dining, and travel arrangements to its customers. Lasevillanita.com was listed as a ransomware victim associated with Global Secret Group |
|||||
| Ransomware | La Sevillanita id30885 View details | Argentina | Hospitality / Food & Beverage / Tourism | ||
|
Country: Argentina | Website: lasevillanita.com | Revenue: $15 million | Industry: Freight & Logistics Services,Transportation | Employees: 11-50 | Properties: 200 GB (385,318 Files, 13,074 Folders) |
|||||
| Ransomware | One Plus Capital id30886 View details | Cyprus | Finance / Legal / Insurance | ||
|
Onepluscapital.net operates in the finance and legal sector, offering services in Cyprus. The company provides financial and legal solutions to its clients. Onepluscapital.net was listed as a ransomware victim associated with Global Secret Group. |
|||||
| Ransomware | One Plus Capital id30886 View details | Cyprus | Finance / Legal / Insurance | ||
|
Country: Cyprus | Website: onepluscapital.net | Revenue: $7 Million | Industry: Finance | Employees: 11-50 | Properties: 117 GB (285,919 Files, 32,404 Folders) |
|||||
| Ransomware | Acens | Cloud & Backup id30887 View details | Spain | IT | ||
|
Acens.com is a Spanish IT company that provides various technology services. The company operates in the IT sector, offering solutions to its clients. Acens.com was listed as a ransomware victim associated with Global Secret Group |
|||||
| Ransomware | Acens | Cloud & Backup id30887 View details | Spain | IT | ||
|
Country: Spain | Website: acens.com | Revenue: $46.3 Million | Industry: Hosting | Employees: 201-500 |
|||||
| Ransomware | West Nova Fuels & Superline Fuels id30888 View details | Canada | Transportation / Travel / Logistics | ||
|
WestNovaSuperline.ca is a transportation company based in Canada, operating in the travel and logistics sector. The company provides transportation services to various destinations. WestNovaSuperline.ca was listed as a ransomware victim associated with Global Secret Group |
|||||
| Ransomware | West Nova Fuels & Superline Fuels id30888 View details | Canada | Transportation / Travel / Logistics | ||
|
Country: Canada | Website: westnovasuperline.ca | Revenue: $18.9 Million | Industry: Convenience Stores, Gas Stations & Liquor Stores | Employees: 51-200 | Properties: 45.8 GB (114,200 Files, 2,672 Folders) |
|||||
| Ransomware | Sinop Energia id30889 View details | Brazil | Energy | ||
|
Sinopenergia.com.br is a Brazilian company operating in the energy sector, providing various services to its customers. Located in Brazil, the company is involved in energy-related activities. Sinopenergia.com.br was listed as a ransomware victim associated with Global Secret Group. |
|||||
| Ransomware | Sinop Energia id30889 View details | Brazil | Energy | ||
|
Country: Brazil | Website: sinopenergia.com.br | Revenue: $12.2 Million | Industry: Electricity, Oil & Gas | Employees: 51-200 | Properties:300 GB (43,113 Files, 5,372 Folders) |
|||||
| Ransomware | Al Hayat | Pepsi id30890 View details | Iraq | Retail / E-commerce | ||
|
Alhayatco.com is an Iraqi retail and e-commerce company operating in the retail sector. The company is based in Iraq and offers various products and services to its customers. Alhayatco.com was listed as a ransomware victim associated with Global Secret Group |
|||||
| Ransomware | Al Hayat | Pepsi id30890 View details | Iraq | Retail / E-commerce | ||
|
Country: Iraq | Website: alhayatco.com | Revenue: $100 Million | Industry: Food & Beverage | Employees: 501-1,000 | Properties: 138 GB (205,992 Files, 17,178 Folders) |
|||||
| Ransomware | SPDM id30891 View details | Brazil | NGOs / Associations | ||
|
Spdm.org.br is a Brazilian non-governmental organization operating in the country. The entity is involved in various activities related to its sector. Spdm.org.br was listed as a ransomware victim associated with Global Secret Group. |
|||||
| Ransomware | SPDM id30891 View details | Brazil | NGOs / Associations | ||
|
Country: Brazil |Website: spdm.org.br |Revenue: $197 Million |Industry: Hospitals & Clinics |Employees: 10.000 - 20.000 |Properties: 847 GB (871,912 Files, 76,047 Folders) |
|||||
| Ransomware | Nourison | Home id30892 View details | United States | Manufacturing / Engineering | ||
|
Nourison.com is a US-based company operating in the manufacturing and engineering sector, offering various products and services. The company is involved in the design, production, and distribution of its products. Nourison.com was listed as a ransomware victim associated with Global Secret Group |
|||||
| Ransomware | Nourison | Home id30892 View details | United States | Manufacturing / Engineering | ||
|
Country: New Jersey 07663, US | Website: nourison.com | Revenue: $59.4 Million | Industry: Wholesale, Furniture, Home Decor, Retail, Real Estate | Employees: 100-300 | Properties: 799 GB (93,941 Files, 13,733 Folders) |
|||||
| Ransomware | Cold Front Distribution id30893 View details | United States | Retail / E-commerce | ||
|
Coldfrontdist.com operates in the retail and e-commerce sector in the United States, providing various offerings to its customers. As a company in this sector, it is likely involved in the distribution of products to consumers. Coldfrontdist.com was listed as a ransomware victim associated with Global Secret Group |
|||||
| Ransomware | Cold Front Distribution id30893 View details | United States | Retail / E-commerce | ||
|
Country: Colorado, United States | Website: coldfrontdist.com | Revenue: $120.1 Million | Industry: Transportation | Employees: 201-500 Employees | Properties: 473 GB (890,775 Files, 51,621 Folders) |
|||||
| Ransomware | Portman Finance Group id30894 View details | United Kingdom | Finance / Legal / Insurance | ||
|
Portman Finance Group is a financial services company based in the United Kingdom, operating in the finance, legal, and insurance sector. The company provides various financial offerings to its clients. Portman Finance Group was listed as a ransomware victim associated with Global Secret Group. |
|||||
| Ransomware | Portman Finance Group id30894 View details | United Kingdom | Finance / Legal / Insurance | ||
|
Country: United Kingdom | Website: portmanfinancegroup.co.uk | Revenue: £300 Million | Industry: Finance | Employees: 1000-5000 Employees | Properties: 209 GB (255,244 Files, 34,852 Folders) |
|||||
| Ransomware | OFS id30895 View details | United States | Manufacturing / Engineering | ||
|
ofs.com is a company based in the United States, operating in the manufacturing and engineering sector. The company provides various services and products related to its sector. ofs.com was listed as a ransomware victim associated with Global Secret Group |
|||||
| Ransomware | OFS id30895 View details | United States | Manufacturing / Engineering | ||
|
Country: Indiana, United States | Website: ofs.com | Revenue: $517.1 Million | Industry: Furniture,Manufacturing,Transportation | Employees: 1K - 5K | Properties: 321 GB (322,742 Files, 18,081 Folders) |
|||||
| Ransomware | Uniview Technologies id30896 View details | China | Manufacturing / Engineering | ||
|
Uniview.com is a Chinese company operating in the manufacturing and engineering sector, providing various products and services. The company is based in China and offers a range of solutions. Uniview.com was listed as a ransomware victim associated with Global Secret Group |
|||||
| Ransomware | Uniview Technologies id30896 View details | China | Manufacturing / Engineering | ||
|
Country: China | Website: uniview.com | Revenue: $610 Million | Industry: Manufacturing, Electronics | Employees: 1000-5000 Employees | Properties: 1.5 TB (2,172,194 Files, 114,352 Folders) |
|||||
| Ransomware | Novum Energy id30897 View details | United States | Energy | ||
|
Novum Energy is an energy company based in the United States, operating in the energy sector. The company provides various energy-related services. Novum Energy was listed as a ransomware victim associated with Global Secret Group. |
|||||
| Ransomware | Novum Energy id30897 View details | United States | Energy | ||
|
Country: Texas, United States | Website: novumenergy.com | Revenue: $966 Million | Industry: Convenience Stores, Gas Stations & Liquor Stores | Employees: 51-200 | Properties: 842 GB (971,325 Files, 117,085 Folders) |
|||||