Ransomware Group intelligence
Nightspire
ActiveTrack Nightspire with 307 published victims and 11 known leak locations in a single intelligence view.
Overview
Nightspire is tracked by Breach House as a ransomware group with 307 published victims.
United States is currently the most targeted country in this dataset.
11 known leak locations are currently associated with this group.
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (11)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 1 | Onion service | Unknown | nspireyzmvapgiwgtuoznlafqvlyz7ey6himtgn5bdvdcowfyto3yryd.onion |
| Leak location 2 | Onion service | Unknown | nspireyzmvapgiwgtuoznlafqvlyz7ey6himtgn5bdvdcowfyto3yryd.onion |
| Leak location 3 | Onion service | Unknown | nspireyzmvapgiwgtuoznlafqvlyz7ey6himtgn5bdvdcowfyto3yryd.onion |
| Leak location 4 | Onion service | Unknown | a2lyiiaq4n74tlgz4fk3ft4akolapfrzk772dk24iq32cznjsmzpanqd.onion |
| Leak location 5 | Onion service | Unknown | a2lyiiaq4n74tlgz4fk3ft4akolapfrzk772dk24iq32cznjsmzpanqd.onion |
| Leak location 6 | Onion service | Unknown | nspirebcv4sy3yydtaercuut34hwc4fsxqqv4b4ye4xmo6qp3vxhulqd.onion |
| Leak location 7 | Onion service | Unknown | nspirebcv4sy3yydtaercuut34hwc4fsxqqv4b4ye4xmo6qp3vxhulqd.onion |
| Leak location 8 | Onion service | Unknown | nspiremkiq44zcxjbgvab4mdedyh2pzj5kzbmvftcugq3mczx3dqogid.onion |
| Leak location 9 | Onion service | Unknown | nspiremkiq44zcxjbgvab4mdedyh2pzj5kzbmvftcugq3mczx3dqogid.onion |
| Leak location 10 | Onion service | Unknown | nspire7lugml7ybqyjaaxtsgrs4qn3fcon3lrjbih6wamttvdm5ke4qd.onion |
| Leak location 11 | Onion service | Unknown | nspirep7orjq73k2x2fwh2mxgh74vm2now6cdbnnxjk2f5wn34bmdxad.onion |
Top Activity Sectors
No sector intelligence available.
Ransom Notes (0)
▼No ransom notes available for this group.
Tools Used
▼No tools used available.
YARA Rules (0)
▼No YARA rules available.
Indicators of Compromise (0)
▼No IoCs available for this group.
Negotiation Chats (0)
▼No negotiation chats available.
Research Sources
No external research sources linked yet.
Victims (307)
Search, filter and paginate the victim timeline for Nightspire. Showing 1–100 of 307.
| Type | Target | Discovered | Country | Business Category | Intel Link |
|---|---|---|---|---|---|
| Ransomware | Cedar Crest College id30557 View details | United States | Education | — | |
|
Cedarcrest College is a private liberal arts college located in the United States, offering a range of academic programs to students. As an educational institution, it provides various courses and degree programs in different fields. Cedarcrest College was listed as a ransomware victim associated with nightspire |
|||||
| Ransomware | Cedar Crest College id30557 View details | United States | Education | — | |
|
Data is not available now. |
|||||
| Ransomware | Webosphere id30524 View details | India | IT | — | |
|
Webosphere.in is an Indian IT company, presumably offering various information technology services. The company operates in the IT sector, providing services to clients in India. Webosphere.in was listed as a ransomware victim associated with nightspire |
|||||
| Ransomware | Webosphere id30524 View details | India | IT | — | |
|
-SQL Database- Source Code |
|||||
| Ransomware | PCCC Realty LLC id30357 View details | United States | Construction / Real Estate | — | |
|
PCCC Realty LLC operates in the construction and real estate sector in the United States, providing various services related to property development and management. As a company in this sector, PCCC Realty LLC is involved in activities such as property acquisition, construction, and leasing. PCCC Realty LLC was listed as a ransomware victim associated with nightspire |
|||||
| Ransomware | PCCC Realty LLC id30357 View details | United States | Construction / Real Estate | — | |
|
Data is not available now. |
|||||
| Ransomware | Grupo Riquelme id30026 View details | Paraguay | Transportation / Travel / Logistics | — | |
|
Gruporiquelme.com is a company operating in the transportation, travel, and logistics sector in Paraguay. The company likely provides services such as cargo transportation, travel arrangements, and logistics management. Gruporiquelme.com was listed as a ransomware victim associated with nightspire |
|||||
| Ransomware | Grupo Riquelme id30026 View details | Paraguay | Transportation / Travel / Logistics | — | |
|
- Full Database Backup- Banking & Financial Data- Accounting & Ledger Records- Customer Databases- HR / Workforce Data- User, Role & Permission data- ERP & Critical Business Application Data |
|||||
| Ransomware | Artistic Smiles id30072 View details | United States | NGOs / Associations | — | |
|
Data is not available now. |
|||||
| Ransomware | legendsmn(Blue Ox, Paul Bunyan, Lumberjack Electric) id29988 View details | United States | Retail / E-commerce | — | |
|
Data is not available now. |
|||||
| Ransomware | dean cosmetic dentistry id29989 View details | United States | Healthcare / Medicine | — | |
|
Data is not available now. |
|||||
| Ransomware | Guy E******* & F*******, P.A id29948 View details | Finance / Legal / Insurance | — | ||
|
Data is not available now. |
|||||
| Ransomware | Central Texas ***** ***** id29949 View details | Energy | — | ||
|
Data is not available now. |
|||||
| Ransomware | Ri***** Co**** Europe S.r.l. id29950 View details | Retail / E-commerce | — | ||
|
Data is not available now. |
|||||
| Ransomware | B****S I******t***l id29906 View details | Finance / Legal / Insurance | — | ||
|
Data is not available now. |
|||||
| Ransomware | Sheraton Miramar Resort El Gouna id29907 View details | Egypt | Hospitality / Food & Beverage / Tourism | — | |
|
Data is not available now. |
|||||
| Ransomware | G**** R****l*e id29908 View details | Construction / Real Estate | — | ||
|
Data is not available now. |
|||||
| Ransomware | Silsbee Police Department id29857 View details | United States | Education | — | |
|
Court Information |
|||||
| Ransomware | K****** County. Mi**e**ta id29858 View details | United States | Public Sector | — | |
|
Data is not available now. |
|||||
| Ransomware | WaxWorks Inc id29859 View details | United States | IT | — | |
|
[AI generated] N/A |
|||||
| Ransomware | Blue Nile Medical Center id29860 View details | United States | Healthcare / Medicine | — | |
|
More than 3000+ Patient's EHR Records |
|||||
| Ransomware | Pattono S.r.l id29809 View details | Italy | Manufacturing / Engineering | — | |
|
[AI generated] N/A |
|||||
| Ransomware | Sierra West Jewelers id29810 View details | United States | Retail / E-commerce | — | |
|
Data is not available now. |
|||||
| Ransomware | GRIP Outreach For Youth id29684 View details | United States | NGOs / Associations | — | |
|
- Financial & Accounting Records- Sensitive Employee- Youth Participant & Child Protection Records- Governance & Legal Documents |
|||||
| Ransomware | Unique Litho, Inc id29685 View details | United States | Manufacturing / Engineering | — | |
|
Data is not available now. |
|||||
| Ransomware | A*** G*** A*S* id29686 View details | Agriculture / Food | — | ||
|
Data is not available now. |
|||||
| Ransomware | ASIA STRATEGIC id29687 View details | Finance / Legal / Insurance | — | ||
|
Data is not available now. |
|||||
| Ransomware | First Mutual Holdings id29643 View details | Zimbabwe | Finance / Legal / Insurance | — | |
|
- Internal Database |
|||||
| Ransomware | Krum Public Library id29645 View details | United States | Education | — | |
|
- Financial Documents- HR Data- Supervisor's Information |
|||||
| Ransomware | basatamfi id29505 View details | Egypt | Other | — | |
|
Data is not available now. |
|||||
| Ransomware | Red-Line id29358 View details | United States | Other | — | |
|
- QuickBooks Files- Scanned tax returns- Proposal, Contrats- QuickBooks automated backups |
|||||
| Ransomware | Qua****Pro id29359 View details | IT | — | ||
|
Data is not available now. |
|||||
| Ransomware | la familia adualt day center id29360 View details | United States | Healthcare / Medicine | — | |
|
Data is not available now. |
|||||
| Ransomware | Pat**** S.r.l id29361 View details | Other | — | ||
|
Data is not available now. |
|||||
| Ransomware | Si**** West J******* id29362 View details | Retail / E-commerce | — | ||
|
Data is not available now. |
|||||
| Ransomware | Bresme Madrid S.L. id29363 View details | Spain | IT | — | |
|
Data is not available now. |
|||||
| Ransomware | Papa John's Egypt id29364 View details | Egypt | Hospitality / Food & Beverage / Tourism | — | |
|
- Banking & Financial Records- Personal data- Critical POS Data |
|||||
| Ransomware | Rawaj Consumer Finance id29365 View details | Egypt | Finance / Legal / Insurance | — | |
|
- Sales Related Documents- Human Resources- Sensitive Employee Records- Email and SMS Data |
|||||
| Ransomware | Ueno Fine Chemicals Industry id29366 View details | Thailand | Manufacturing / Engineering | — | |
|
Ueno Fine Chemicals Industry Ltd. is a Japan-based manufacturing company with operations in Thailand and other markets, and its English site presents the company’s business profile and product information. The company develops and manufactures chemical products and LCP-related materials, with research, production, and quality-control functions across its operations. Its Thailand business is described as serving food additives and chemical products, reflecting a broader industrial and engineering-oriented manufacturing footprint. It was listed as a ransomware victim associated with nightspire. |
|||||
| Ransomware | Ueno Fine Chemicals Industry (Thailand), Ltd. id29996 View details | Thailand | Manufacturing / Engineering | — | |
|
- Financial & Accounting Records- Human Resources- Sales & Marketing |
|||||
| Ransomware | Vantage Energy LLC id29235 View details | United States | Other | — | |
|
Data is not available now. |
|||||
| Ransomware | C***r*o T**uc**n* id29236 View details | Other | — | ||
|
Data is not available now. |
|||||
| Ransomware | m***o*ul id29237 View details | Other | — | ||
|
Data is not available now. |
|||||
| Ransomware | Huse Incorporated id29245 View details | United States | Other | — | |
|
- MSSQL-DB- HR Documents- Contracts |
|||||
| Ransomware | TAKOSAN OTOMOBIL id29246 View details | Türkiye | Other | — | |
|
- Technical Documents- Financial Sheets- Contracts & Invoices- Business strategy files |
|||||
| Ransomware | A**** F***** Plas**** id28327 View details | Manufacturing / Engineering | — | ||
|
Data is not available now. |
|||||
| Ransomware | Filter to A**** F***** Plas**** id28360 View details | Manufacturing / Engineering | — | ||
|
Data is not available now. |
|||||
| Ransomware | The Country Club of Darien id28392 View details | United States | Hospitality / Food & Beverage / Tourism | — | |
|
- Sales / agent / commercial operations- Industrial / manufacturing / tooling business data- Research & development / technical project data- Business admin / office operations- Software / digital assets / branding |
|||||
| Ransomware | Progressive Oral Surgery & Implantology id28413 View details | United States | Healthcare / Medicine | — | |
|
Data is not available now. |
|||||
| Ransomware | P**g**s***e O*al S**g**y & I**la**ol**y id28586 View details | Healthcare / Medicine | — | ||
|
Data is not available now. |
|||||
| Ransomware | J**es **l*o id28587 View details | Construction / Real Estate | — | ||
|
Data is not available now. |
|||||
| Ransomware | Swansea Ambulance Corps id28637 View details | United Kingdom | Healthcare / Medicine | — | |
|
Data is not available now. |
|||||
| Ransomware | The **u***y C*** o* **r**n id28638 View details | Agriculture / Food | — | ||
|
Data is not available now. |
|||||
| Ransomware | S***s*a A**ul***e C***s id28284 View details | Healthcare / Medicine | — | ||
|
Data is not available now. |
|||||
| Ransomware | D-Troy Logistics id28204 View details | Mexico | Transportation / Travel / Logistics | — | |
|
- Internal Documents- Employee Data |
|||||
| Ransomware | BK Tomorrow id28190 View details | United States | Services | — | |
|
Source Code of BK Tomorrow |
|||||
| Ransomware | Sahara Air Products id28076 View details | United States | Communication / Marketing | — | |
|
- Confidential Technical Drawings- Documents- Customer invoices- Shipment Histories |
|||||
| Ransomware | *W* **L LLC id28029 View details | Construction / Real Estate | — | ||
|
Data is not available now. |
|||||
| Ransomware | Cabinet d’Étude en Sécurité Pyrotechnique id27939 View details | France | Manufacturing / Engineering | — | |
|
Data is not available now. |
|||||
| Ransomware | Sa**** A** Products id27933 View details | Manufacturing / Engineering | — | ||
|
Data is not available now. |
|||||
| Ransomware | Carmelo Candy Inc id27923 View details | United States | Retail / E-commerce | — | |
|
[AI generated] N/A |
|||||
| Ransomware | C***n** **tu*e *n S**ur*** P**ot**hn**u* id27922 View details | Services | — | ||
|
Data is not available now. |
|||||
| Ransomware | Advanced Vehicle Assemblies id27882 View details | United States | Construction / Real Estate | — | |
|
- Banking & Financial Systems- Accounting & Tax Records- Customer & Sales Data- Engineering & Manufacturing IP |
|||||
| Ransomware | Southeastern Conference of Seventh-day Adventists id27860 View details | United States | NGOs / Associations | — | |
|
Data is not available now. |
|||||
| Ransomware | Dubosson Frères SA id27859 View details | Switzerland | Construction / Real Estate | — | |
|
Data is not available now. |
|||||
| Ransomware | Siena Construction id27858 View details | United States | Construction / Real Estate | — | |
|
- QBOOK Data- Project Records- Employee Information- Finance Records- Technical Data- Suppliers Information- Bid Documents |
|||||
| Ransomware | PARS AR-GE id27857 View details | Türkiye | IT | — | |
|
- Project Source Code- Finance Records- Technical Data- Customer Documents- Employee Info |
|||||
| Ransomware | Neptune Mechanical, Inc. id27856 View details | United States | IT | — | |
|
- Banking & Financial Systems- Accounting & Tax Records- Payroll & Employee Financial Data- HR & Employee Personal Data- Real Estate & Tenant Data |
|||||
| Ransomware | TTAF Defense id27855 View details | Türkiye | Manufacturing / Engineering | — | |
|
- Projects- Financial Documents>- Quality & Technical & Internal Documents |
|||||
| Ransomware | Association OCACIA id27854 View details | France | Services | — | |
|
- Rapport d'audit- Plan de contrôle- Fiche d'écart- Manquement- Action corrective |
|||||
| Ransomware | S***a V**a***s id27853 View details | Finance / Legal / Insurance | — | ||
|
Data is not available now. |
|||||
| Ransomware | The GMP Group ( Premier Singapore Recruitment Firm with Global Reach ) id27818 View details | Singapore | Services | — | |
|
- Financial Documents- Salaries Documents- Candidate' PII information Resumes & CV |
|||||
| Ransomware | Notre-Dame du Grandchamp id27794 View details | France | Education | — | |
|
- Students Medical Records- HR& Employee Personal Data- Student Personal & Academic Data- Contracts & Administrative Documents |
|||||
| Ransomware | Ghazi Brothers id27793 View details | Pakistan | Agriculture / Food | — | |
|
Data is not available now. |
|||||
| Ransomware | The GMP Group id27792 View details | Singapore | Services | — | |
|
- Financial Documents- Salaries Documents- Resumes & CV |
|||||
| Ransomware | S**n* *o**tr***io* id27791 View details | Construction / Real Estate | — | ||
|
Data is not available now. |
|||||
| Ransomware | P**S****E id27790 View details | Manufacturing / Engineering | — | ||
|
Data is not available now. |
|||||
| Ransomware | *ep***e M***a*i***, Inc. id27789 View details | Transportation / Travel / Logistics | — | ||
|
Data is not available now. |
|||||
| Ransomware | T*** Defense id27788 View details | Manufacturing / Engineering | — | ||
|
Data is not available now. |
|||||
| Ransomware | A****ia**on O*A**A id27787 View details | Transportation / Travel / Logistics | — | ||
|
Data is not available now. |
|||||
| Ransomware | CERUMO Co., Ltd id27760 View details | Japan | Manufacturing / Engineering | — | |
|
Data is not accessible for now |
|||||
| Ransomware | Beltran & Garcia Financial Investment SLU id27759 View details | Spain | Finance / Legal / Insurance | — | |
|
Data is not available now. |
|||||
| Ransomware | JT-ATFP, LLC id27758 View details | United States | Manufacturing / Engineering | — | |
|
- Classified Contracts- Employee Information- ATFP Projects- Vulnerability Assessment Docs- FOUO Files- DOD Projects |
|||||
| Ransomware | *d**n*** V**i*l* **s**b***s id27757 View details | Communication / Marketing | — | ||
|
Data is not available now. |
|||||
| Ransomware | D**o*s** Fr**e* *A id27654 View details | Other | — | ||
|
Data is not available now. |
|||||
| Ransomware | S***h***t*** **n**r***e of **v***h-**y A***n***ts id27649 View details | NGOs / Associations | — | ||
|
Data is not available now. |
|||||
| Ransomware | OTNet id27647 View details | Japan | Telecommunications | — | |
|
[AI generated] N/A |
|||||
| Ransomware | Florida Therapy Services id27646 View details | United States | Healthcare / Medicine | — | |
|
[AI generated] Florida Therapy Services is a mental health organization based in Florida, USA. It provides psychiatric services, psychotherapy, and substance abuse counseling, among other services for children, adolescents, adults, and families. The organization specializes in home, school, community, and office-based treatment, aiming to support individuals struggling with various mental health issues. |
|||||
| Ransomware | *h**i **o**e** id27641 View details | Public Sector | — | ||
|
Data is not available now. |
|||||
| Ransomware | *H* G** **O** id27640 View details | IT | — | ||
|
Data is not available now. |
|||||
| Ransomware | A*v**c** *e**c** ***em**i** id27609 View details | Manufacturing / Engineering | — | ||
|
Data is not available now. |
|||||
| Ransomware | Anbogen Therapeutics Inc. id27574 View details | Taiwan, Province of China | Healthcare / Pharma | — | |
|
Data is not available now. |
|||||
| Ransomware | Eastex Environmental Laboratory id27573 View details | United States | Other | — | |
|
- Experimental Reports- Internal Documents- Financial & HR Documents |
|||||
| Ransomware | J***T*P, **C id27572 View details | Transportation / Travel / Logistics | — | ||
|
Data is not available now. |
|||||
| Ransomware | *n**g** T***a**ut*** **c id27571 View details | Taiwan, Province of China | Healthcare / Pharma | — | |
|
Data is not available now. |
|||||
| Ransomware | HLF Heizung-Sanitär GmbH id27570 View details | Germany | Transportation / Travel / Logistics | — | |
|
Data is not available now. |
|||||
| Ransomware | *o**e-*a** du ***n*c**** id27522 View details | Other | — | ||
|
Data is not available now. |
|||||
| Ransomware | *L* **i**n*-**n**** GmbH id27521 View details | Other | — | ||
|
Data is not available now. |
|||||
| Ransomware | **l**a* & ***c** **n*n**** I**e*t**** *L* id27520 View details | Other | — | ||
|
Data is not available now. |
|||||
| Ransomware | Cannavative Group id27508 View details | United States | Other | — | |
|
- QuickBook Files- METRC DB-Employeement & Clients Documents |
|||||