Ransomware Group intelligence

Kairos

Active

Track Kairos with 104 published victims and 3 known leak locations in a single intelligence view.

BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Victims 104 Known published victims in this dataset
First discovered 2024-11-13 Earliest victim discovery date
Last discovered 2026-10-15 Latest victim discovery date
Inactive since 1 days Days since the latest known victim
Top country United States 58 victims
Known locations 3 Leak or negotiation infrastructure tracked

Overview

Kairos is tracked by Breach House as a ransomware group with 104 published victims.

United States is currently the most targeted country in this dataset.

3 known leak locations are currently associated with this group.

Leak Status Distribution

  • Leaked 12 11.5%
  • Pending 92 88.5%
  • Deleted 0 0.0%

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (3)

    Label Type Availability Links
    Leak location 2 Onion service Down checked 4h ago nerqnacjmdy3obvevyol7qhazkwkv57dwqvye5v46k5bcujtfa6sduad.onion
    Leak location 3 Onion service Down checked 4h ago kairosgeuzkzz3ajntqcyxl3ib36szz3mg62mb3zbui33pbk3uzo4qqd.onion
    Leak location 1 Onion service Down checked 4h ago erqnacjmdy3obvevyol7qhazkwkv57dwqvye5v46k5bcujtfa6sduad.onion

    Top Activity Sectors (14)

    Victims (104)

    Search, filter and paginate the victim timeline for Kairos. Showing 1–100 of 104.

    Type Target Discovered Country Business Category Intel Link Leak status
    Ransomware Oceania Digital Communications id34132 View details Vanuatu — pending
    Ransomware Oceania Digital Communications id33865 View details Vanuatu — — pending
    Ransomware Slate Valley Unified School District id33385 View details United States Education — leaked
    Ransomware Le Centre National de l'Expertise Hospitalière (CNEH) id33354 View details France Healthcare / Pharma — leaked
    Ransomware Unique Repair Services id33291 View details United States Services — leaked
    Ransomware Krapf Group id33062 View details United States Manufacturing / Engineering — leaked
    Ransomware Leisure Coast Kitchens id32904 View details Australia Retail / E-commerce — leaked
    Ransomware Ville de Libercourt id32427 View details France Public Sector — leaked
    Ransomware Ayuntamiento de Velilla de San Antonio id31922 View details Spain — — leaked
    Ransomware Hightech Signs id31653 View details United States Manufacturing / Engineering — leaked
    Ransomware Warwick Fabrics id31052 View details New Zealand Manufacturing / Engineering — leaked
    Ransomware Thermalex Inc id30846 View details United States Manufacturing / Engineering — leaked
    Ransomware LR Reed id30761 View details Australia Manufacturing / Engineering — leaked
    Ransomware College O'Sullivan de Québec id30707 View details Canada Education — leaked
    Ransomware Collge O'Sullivan de Québec id30708 View details Canada Education — pending
    Ransomware Mortensenlawoffices id29542 View details United States Finance / Legal / Insurance — pending
    Ransomware Commune De Camiers id29396 View details France Public Sector — pending
    Ransomware McCarthy Inc id29176 View details United States Healthcare / Pharma — pending
    Ransomware Arwini id29074 View details Germany Healthcare / Pharma — pending
    Ransomware Ayuntamiento de Valdemoro id29075 View details Spain Public Sector — pending
    Ransomware Houk Air Conditioning id28933 View details United States Manufacturing / Engineering — pending
    Ransomware Gregory Jewellers id28686 View details Australia Retail / E-commerce — pending
    Ransomware Nordenta (a daughter company of LIFCO) id28722 View details Denmark Healthcare / Pharma — pending
    Ransomware Strata Republic id28279 View details Australia Construction / Real Estate — pending
    Ransomware FriendlyCare Pharmacy id28247 View details Australia Healthcare / Pharma — pending
    Ransomware Pullen Moving id28118 View details United States Transportation / Travel / Logistics — pending
    Ransomware Colonial Presbyterian Church id28115 View details United States NGOs / Associations — pending
    Ransomware South Florida Injury Centers id28048 View details United States Healthcare / Pharma — pending
    Ransomware Resch Maschinenbau id27486 View details Germany Manufacturing / Engineering — pending
    Ransomware Folet & Rivoire id27373 View details France Services — pending
    Ransomware Institute of Social Security - Paraguay id27239 View details Paraguay Education — pending
    Ransomware Katz Kantor Stonestreet & Buckner id27027 View details United States Communication / Marketing — pending
    Ransomware Rockwood Retirement Communities id26914 View details United States Communication / Marketing — pending
    Ransomware Robbins Parking Service Ltd id26505 View details Canada Communication / Marketing — pending
    Ransomware The Marena Group id26479 View details United States Healthcare / Pharma — pending
    Ransomware Seagrass Boutique Hospitality Group id26473 View details Australia Hospitality / Food & Beverage / Tourism — pending
    Ransomware Melland High id24792 View details United States Education — pending
    Ransomware Heidelberggc id24624 View details Australia Finance / Legal / Insurance — pending
    Ransomware Milkagro id24623 View details Slovakia Other — pending
    Ransomware Wilsenergy id24622 View details United States Energy — pending
    Ransomware Nurturecare id24621 View details United States Communication / Marketing — pending
    Ransomware OCBAR id24620 View details United States Hospitality / Food & Beverage / Tourism — pending
    Ransomware Hazel Mercantile id24619 View details India Services — pending
    Ransomware Summitcollege id24618 View details United States Education — pending
    Ransomware The Property Business id24617 View details Australia Construction / Real Estate — pending
    Ransomware Ekonomipoolen id24616 View details United States Other — pending
    Ransomware ocbar.org/USA/114GB id23239 View details United States Hospitality / Food & Beverage / Tourism pending
    Ransomware www.ms-security-ltd.com/Cyprus/1.48TB id22965 View details Cyprus Communication / Marketing pending
    Ransomware www.nurturecare.com/USA/192GB id22844 View details United States Other pending
    Ransomware wilsenergy.com/USA/77.1GB id22732 View details United States Energy pending
    Ransomware www.milkagro.sk/Slovakia/335GB id22556 View details Slovakia Other pending
    Ransomware heidelberggc.com.au/Australia/26.4GB id22493 View details Australia Other pending
    Ransomware thepropertybusiness.com/Australia/164GB id22434 View details Australia Construction / Real Estate pending
    Ransomware ekonomipoolen.se/Sweden/32/GB id22433 View details Sweden Other pending
    Ransomware summitcollege.edu/USA/370GB id21996 View details United States Education pending
    Ransomware trico176.org/USA/180GB id21930 View details United States Other pending
    Ransomware melland.bright-futures.co.uk id21535 View details United Kingdom Education pending
    Ransomware mortensenlawoffices.com/USA/99GB id21408 View details United States Finance / Legal / Insurance pending
    Ransomware Bouey & Black LLP id21370 View details United States Other pending
    Ransomware inspiredbeauty.com id21142 View details United States Other pending
    Ransomware oandg.com.au id20900 View details Australia Other pending
    Ransomware mcparlane.com id20850 View details United States Other pending
    Ransomware stopzbugs.com/USA/146GB id20782 View details United States Other pending
    Ransomware taoscounty.org id20747 View details United States Public Sector pending
    Ransomware evanspharmacy.com/USA/56gb/ id20705 View details United States Healthcare / Pharma pending
    Ransomware jerichofd.com/USA/157GB/ id20400 View details United States Public Sector pending
    Ransomware ndsohio.org id20167 View details United States Construction / Real Estate pending
    Ransomware durhamarts.org id20153 View details United States Public Sector pending
    Ransomware loopergoodwine.com id19987 View details United States Other pending
    Ransomware thederbyhighschool.co.uk id19324 View details United Kingdom Education pending
    Ransomware coloradopulmonary.com id19318 View details United States Other pending
    Ransomware d-line-it.com id19201 View details Denmark Other pending
    Ransomware business.galesburg.org/members/member/rfms-inc-492 id19046 View details United States Services pending
    Ransomware RFMS, Inc. id19047 View details United States Services pending
    Ransomware galesburg.org id19033 View details United States Retail / E-commerce pending
    Ransomware stattorney.org id18869 View details United States Finance / Legal / Insurance pending
    Ransomware fredsalvuccicorp.com id18306 View details United States Services pending
    Ransomware drvitenas.com id18147 View details United States Healthcare / Pharma pending
    Ransomware usarice.com id18146 View details United States Other pending
    Ransomware thefireplacewarehouse.co.uk id17758 View details United Kingdom Transportation / Travel / Logistics pending
    Ransomware danecourt.kent.sch.uk id17589 View details United Kingdom Education pending
    Ransomware toitoiusa.com id17588 View details United States Other pending
    Ransomware casperstruck.com id17225 View details United States Other pending
    Ransomware medicalreportsltd.com id17224 View details United Kingdom Healthcare / Pharma pending
    Ransomware delpackaging.com id16966 View details United States Other pending
    Ransomware theurswickschool.co.uk id16728 View details United Kingdom Education pending
    Ransomware nightingalehammerson.org id16705 View details United Kingdom Other pending
    Ransomware realtaxcanada.com id16699 View details Canada Other pending
    Ransomware combinedpoolandspa.com id16668 View details United States Other pending
    Ransomware jgele.com id16660 View details United States Other pending
    Ransomware austinsfs.com.au id16212 View details Australia Finance / Legal / Insurance pending
    Ransomware eisenhowerlaw.com id16115 View details United States Finance / Legal / Insurance pending
    Ransomware aneticaid.com id16031 View details United States Other pending
    Ransomware tcpm.com id16030 View details United States Construction / Real Estate pending
    Ransomware archlou.org id16029 View details United States Other pending
    Ransomware T&M Equipment id15899 View details United States Other pending
    Ransomware brownpacking.com id15718 View details Germany Other pending
    Ransomware tacomaengineers.com id15645 View details Canada Other pending
    Ransomware sunnydayssunshinecenter.com id15284 View details United States Other pending
    Ransomware formosacpa.com.tw id15283 View details Taiwan, Province of China Public Sector pending