Ransomware Group intelligence
Nightspire
ActiveTrack Nightspire with 307 published victims and 11 known leak locations in a single intelligence view.
Overview
Nightspire is tracked by Breach House as a ransomware group with 307 published victims.
United States is currently the most targeted country in this dataset.
11 known leak locations are currently associated with this group.
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (11)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 1 | Onion service | Unknown | nspireyzmvapgiwgtuoznlafqvlyz7ey6himtgn5bdvdcowfyto3yryd.onion |
| Leak location 2 | Onion service | Unknown | nspireyzmvapgiwgtuoznlafqvlyz7ey6himtgn5bdvdcowfyto3yryd.onion |
| Leak location 3 | Onion service | Unknown | nspireyzmvapgiwgtuoznlafqvlyz7ey6himtgn5bdvdcowfyto3yryd.onion |
| Leak location 4 | Onion service | Unknown | a2lyiiaq4n74tlgz4fk3ft4akolapfrzk772dk24iq32cznjsmzpanqd.onion |
| Leak location 5 | Onion service | Unknown | a2lyiiaq4n74tlgz4fk3ft4akolapfrzk772dk24iq32cznjsmzpanqd.onion |
| Leak location 6 | Onion service | Unknown | nspirebcv4sy3yydtaercuut34hwc4fsxqqv4b4ye4xmo6qp3vxhulqd.onion |
| Leak location 7 | Onion service | Unknown | nspirebcv4sy3yydtaercuut34hwc4fsxqqv4b4ye4xmo6qp3vxhulqd.onion |
| Leak location 8 | Onion service | Unknown | nspiremkiq44zcxjbgvab4mdedyh2pzj5kzbmvftcugq3mczx3dqogid.onion |
| Leak location 9 | Onion service | Unknown | nspiremkiq44zcxjbgvab4mdedyh2pzj5kzbmvftcugq3mczx3dqogid.onion |
| Leak location 10 | Onion service | Unknown | nspire7lugml7ybqyjaaxtsgrs4qn3fcon3lrjbih6wamttvdm5ke4qd.onion |
| Leak location 11 | Onion service | Unknown | nspirep7orjq73k2x2fwh2mxgh74vm2now6cdbnnxjk2f5wn34bmdxad.onion |
Top Activity Sectors
No sector intelligence available.
Ransom Notes (0)
▼No ransom notes available for this group.
Tools Used
▼No tools used available.
YARA Rules (0)
▼No YARA rules available.
Indicators of Compromise (0)
▼No IoCs available for this group.
Negotiation Chats (0)
▼No negotiation chats available.
Research Sources
No external research sources linked yet.
Victims (307)
Search, filter and paginate the victim timeline for Nightspire. Showing 101–200 of 307.
| Type | Target | Discovered | Country | Business Category | Intel Link |
|---|---|---|---|---|---|
| Ransomware | SAS CAP ESTEL HOTEL id27507 View details | France | Hospitality / Food & Beverage / Tourism | — | |
|
Data is not available now. |
|||||
| Ransomware | Semenya Furumele Consulting Engineers id27506 View details | South Africa | Services | — | |
|
Data is not available now. |
|||||
| Ransomware | **o**d* *h**a*y ***v***s id27505 View details | Other | — | ||
|
Data is not available now. |
|||||
| Ransomware | O**e* id27501 View details | Other | — | ||
|
Data is not available now. |
|||||
| Ransomware | IASMOS id27494 View details | Greece | Other | — | |
|
Data is not available now. |
|||||
| Ransomware | Fidanque Hermanos e Hijos, S.A id27493 View details | Panama | Other | — | |
|
- Financial Documents- Internal Documents- MSSQL Database |
|||||
| Ransomware | **V**C** *E**C** ***EM**I** id27492 View details | Other | — | ||
|
Data is not available now. |
|||||
| Ransomware | GD France id27458 View details | France | Other | — | |
|
Data is not available now. |
|||||
| Ransomware | G* *r**c* id27452 View details | Other | — | ||
|
Data is not available now. |
|||||
| Ransomware | **ste* **vi**n***t** **b**a**** id27385 View details | Other | — | ||
|
Data is not available now. |
|||||
| Ransomware | G* *r**n*e id27377 View details | Other | — | ||
|
Data is not available now. |
|||||
| Ransomware | S*m**y* **ru**l* ***s**t**g **gi****r* id27376 View details | Other | — | ||
|
Data is not available now. |
|||||
| Ransomware | CFTC Metallurgie id27324 View details | France | Manufacturing / Engineering | — | |
|
Data is not available now. |
|||||
| Ransomware | S** *A* ***E* **T*L id27316 View details | Other | — | ||
|
Data is not available now. |
|||||
| Ransomware | **n*a**t** **o*p id27311 View details | Other | — | ||
|
Data is not available now. |
|||||
| Ransomware | Giaroli S.A.S id27286 View details | Italy | Other | — | |
|
Data is not available now. |
|||||
| Ransomware | I**M** id27285 View details | Other | — | ||
|
Data is not available now. |
|||||
| Ransomware | NIXVAL IT Infrastructure id27280 View details | Spain | Construction / Real Estate | — | |
|
Data is not available now. |
|||||
| Ransomware | Taylor County Property Appraiser Office id27275 View details | United States | Communication / Marketing | — | |
|
- SQL Data- All Pics- Scan Files |
|||||
| Ransomware | E-Fci id27269 View details | United States | Other | — | |
|
Data is not available now. |
|||||
| Ransomware | JJR Engineering & Fabrication id27268 View details | United States | Manufacturing / Engineering | — | |
|
Data is not available now. |
|||||
| Ransomware | Big Brothers Big Sisters id27260 View details | United States | Education | — | |
|
- Students List- Background Check Records- Internal Documents |
|||||
| Ransomware | Tecnoedil S.A. Constructora id27259 View details | Paraguay | Communication / Marketing | — | |
|
Data is not available now. |
|||||
| Ransomware | CFTC Métallurgie id27258 View details | France | Manufacturing / Engineering | — | |
|
- Customer Contacts- Internal Documents |
|||||
| Ransomware | Taylor County Property Appraiser's Office id27224 View details | United States | Communication / Marketing | — | |
|
Data is not available now. |
|||||
| Ransomware | T**n*e**l S.A. C***t**c***a id27194 View details | Other | — | ||
|
Data is not available now. |
|||||
| Ransomware | C*T* M**al***g*e id27193 View details | Other | — | ||
|
Data is not available now. |
|||||
| Ransomware | T****r ****t* P**p***y ***r***e*** **f**e id27192 View details | Other | — | ||
|
Data is not available now. |
|||||
| Ransomware | Stalwart Development Group LLC id27175 View details | United States | IT | — | |
|
Data is not available now. |
|||||
| Ransomware | CPG Documentation id27158 View details | United States | Other | — | |
|
Data is not available now. |
|||||
| Ransomware | MAGNETA LOGISTICS, UAB id27156 View details | Lithuania | Transportation / Travel / Logistics | — | |
|
Data is not available now. |
|||||
| Ransomware | 11th Street Veterinary Hospital id27155 View details | United States | Healthcare / Pharma | — | |
|
Data is not available now. |
|||||
| Ransomware | thallos AG id27153 View details | Germany | Other | — | |
|
Data is not available now. |
|||||
| Ransomware | B** *r*t**r* *i* **s***s of ***te** *i**o**i id27130 View details | Other | — | ||
|
Data is not available now. |
|||||
| Ransomware | **a****t ***el*****t Gr*up L** id27091 View details | Other | — | ||
|
Data is not available now. |
|||||
| Ransomware | KLEIN IBERICA SA id27088 View details | Spain | Communication / Marketing | — | |
|
- Internal Documents- Financial Data |
|||||
| Ransomware | N*X*** ** I**r****c**** id27087 View details | Other | — | ||
|
Data is not available now. |
|||||
| Ransomware | AKOL LAW id27048 View details | Türkiye | Finance / Legal / Insurance | — | |
|
- Internal Documents- Financial Documents |
|||||
| Ransomware | K**I* I***I*A *A id27047 View details | Other | — | ||
|
Data is not available now. |
|||||
| Ransomware | Union Laitiere de la Meuse id27017 View details | France | Other | — | |
|
Data is not available now. |
|||||
| Ransomware | IOTA HOTEL TBILISI id26998 View details | Georgia | Hospitality / Food & Beverage / Tourism | — | |
|
- VIP Lists- Invoices, Passport...- Financial Documents |
|||||
| Ransomware | Bain Oil Company id26975 View details | United States | Energy | — | |
|
Data is not available now. |
|||||
| Ransomware | SIMETRI Inc id26974 View details | United States | Services | — | |
|
Data is not available now. |
|||||
| Ransomware | Hicare.net Inc id26929 View details | United States | Services | — | |
|
Data is not available now. |
|||||
| Ransomware | PriceTable id26927 View details | United States | Communication / Marketing | — | |
|
Data is not available now. |
|||||
| Ransomware | hicare id26926 View details | United States | Other | — | |
|
Data is not available now. |
|||||
| Ransomware | GoHighLevel id26925 View details | United States | Other | — | |
|
GoHighLevel, also known as HighLevel, is a Dallas, Texas-based software company in the Other sector that offers an all-in-one sales and marketing platform for agencies and businesses. Its platform combines CRM, landing pages, forms, calendars, marketing automation, email and SMS messaging, and white-label resale features under one system. The company presents itself as a tool for agencies to capture leads, automate follow-up, and manage client workflows from a single dashboard. It was listed as a ransomware victim associated with nightspire. |
|||||
| Ransomware | [Suspended] #2036 id26967 View details | United States | Other | ||
|
We have suspended this notification since we have doubt about the claim |
|||||
| Ransomware | Whipflip id26924 View details | United States | Other | — | |
|
Data is not available now. |
|||||
| Ransomware | US.MAD DOG CONSTRUCTION id26912 View details | United States | Construction / Real Estate | — | |
|
Data is not available now. |
|||||
| Ransomware | **d* **r *e*s id26868 View details | Other | — | ||
|
Data is not available now. |
|||||
| Ransomware | *i***q** **r**n*s * H**o* id26867 View details | Other | — | ||
|
Data is not available now. |
|||||
| Ransomware | OFFICINE FRATELLI AMADORI snc id26838 View details | Italy | Other | — | |
|
Data is not available now. |
|||||
| Ransomware | Vera, spool. s.r.o. id26837 View details | Czechia | Other | — | |
|
Data is not available now. |
|||||
| Ransomware | Regal Building Materials Ltd. id26789 View details | Canada | Construction / Real Estate | — | |
|
Data is not available now. |
|||||
| Ransomware | Pearl Institute for Clinical Research LLC id26689 View details | United States | Healthcare / Pharma | — | |
|
Data is not available for now. |
|||||
| Ransomware | TCPN Inc id26664 View details | United States | Services | — | |
|
Data is not available now. |
|||||
| Ransomware | Fico Ferragens Indústria e Comércio Ltda id26663 View details | Brazil | Services | — | |
|
Data is not available now. |
|||||
| Ransomware | RS Development LLC id26662 View details | United States | IT | — | |
|
Data is not available now. |
|||||
| Ransomware | Ausgewählt Vertriebs GmbH id26661 View details | Germany | Other | — | |
|
Data is not available now. |
|||||
| Ransomware | MD Charts id26659 View details | United States | Other | — | |
|
Data is not available now. |
|||||
| Ransomware | American Piping & Boiler Co id26649 View details | United States | Energy | — | |
|
Data is not available now. |
|||||
| Ransomware | KFZ Sauter GmbH Co. KG id26646 View details | Germany | Finance / Legal / Insurance | — | |
|
- Banking Finance- Accounting Buchhaltung- Contracts Legal- GDPR Personal Data- Documents Images |
|||||
| Ransomware | Wilson Workflow Solutions id26631 View details | United States | Services | — | |
|
Data is not available now. |
|||||
| Ransomware | *m**i**n ***i*g & *o**e* Co id26580 View details | Other | — | ||
|
Data is not available now. |
|||||
| Ransomware | *e**a*c, F**t**i, *il**o id26566 View details | United States | Other | — | |
|
Data is not accessible for now. |
|||||
| Ransomware | *F* *a**e* G**H & Co. *G id26565 View details | Germany | Other | — | |
|
Data is not available now. |
|||||
| Ransomware | **ci**n* *us*i** LLC id26564 View details | United States | Services | — | |
|
Data is not accessible for now |
|||||
| Ransomware | Adirondack Networks id26563 View details | United States | Telecommunications | — | |
|
Internal Documents. |
|||||
| Ransomware | C**U*O Co., Ltd id26562 View details | Japan | Services | — | |
|
Data is not available now. |
|||||
| Ransomware | Z*e***d M**ti* id26561 View details | Germany | Other | — | |
|
Data is not available now. |
|||||
| Ransomware | A.T.I di Zuinisi srl id26560 View details | Italy | Other | — | |
|
[AI generated] N/A |
|||||
| Ransomware | PERLITE, S.L.U id26559 View details | Spain | Other | — | |
|
- Drawings- Customized data according to clients |
|||||
| Ransomware | S.Y.L Pastilhas e Sapatas de Freios id26558 View details | Brazil | Communication / Marketing | — | |
|
[AI generated] "S.Y.L Pastilhas e Sapatas de Freios" is a Brazilian company that specializes in the manufacture and marketing of brake pads and shoes. They provide products for a wide range of vehicles, maintaining focus on quality and performance for its customers. Besides, the company develops and executes technical and commercial training for professionals, promoting expertise in the automotive repair market. |
|||||
| Ransomware | A** L** Office id26557 View details | Austria | Finance / Legal / Insurance | — | |
|
Data is not available now. |
|||||
| Ransomware | *e**l I*s***u*e f*r Clinical Research LLC id26556 View details | United States | Healthcare / Pharma | — | |
|
Data is not available now. |
|||||
| Ransomware | Abrahamsom Center id26555 View details | Israel | Other | — | |
|
- customer info-HR data |
|||||
| Ransomware | Master Handlers id26554 View details | India | Other | — | |
|
- drawing data- employee personal info |
|||||
| Ransomware | RIECO Industries Limited id26553 View details | India | Other | — | |
|
drawing data |
|||||
| Ransomware | Makimura Co., Ltd. id26552 View details | Japan | Finance / Legal / Insurance | — | |
|
- Internal data- financial data- client list |
|||||
| Ransomware | UniTurn Kft. id26551 View details | Hungary | Other | — | |
|
- Drawing data- HR info-Employee data |
|||||
| Ransomware | HO** RIL** LLP id26550 View details | Canada | Other | — | |
|
Data is not available now. |
|||||
| Ransomware | **ls*n W**k*l*w So**ti**s id26549 View details | United States | Other | — | |
|
Data is not available now. |
|||||
| Ransomware | *it**a*e *ut**ot**e Ltd id26548 View details | United Kingdom | Services | — | |
|
Data is not available now. |
|||||
| Ransomware | BrandingBusiness id25916 View details | United States | Communication / Marketing | — | |
|
BrandingBusiness |
|||||
| Ransomware | CMA Flooring & Design id25888 View details | United States | Other | — | |
|
CMA Flooring & Design |
|||||
| Ransomware | DataBank id25872 View details | United States | Finance / Legal / Insurance | — | |
|
DataBank |
|||||
| Ransomware | Abu Dhabi Indian School – Branch 1, Al Wathba id25846 View details | United Arab Emirates | Education | — | |
|
Abu Dhabi Indian School – Branch 1, Al Wathba |
|||||
| Ransomware | OEC Medical Systems, Inc id25837 View details | United States | Healthcare / Pharma | — | |
|
OEC Medical Systems, Inc |
|||||
| Ransomware | Prince & Schmidt LLP id25818 View details | United States | Communication / Marketing | — | |
|
Prince & Schmidt LLP |
|||||
| Ransomware | The Successful Match id25760 View details | United States | Other | — | |
|
The Successful Match (MD2B) |
|||||
| Ransomware | KICKSTAGE id25759 View details | Taiwan, Province of China | Other | — | |
|
KICKSTAGE |
|||||
| Ransomware | BIDAIAK BANOA S.L. id25758 View details | Spain | Other | — | |
|
BIDAIAK BANOA S.L. |
|||||
| Ransomware | Aromate Industries Co., Ltd. z id25757 View details | Taiwan, Province of China | Services | — | |
|
Aromate Industries Co., Ltd. z |
|||||
| Ransomware | Lesk Engineers Limited id25756 View details | United Kingdom | Other | — | |
|
Lesk Engineers Limited |
|||||
| Ransomware | Golden Growth Biotechnology id25755 View details | Japan | IT | — | |
|
Golden Growth Biotechnology |
|||||
| Ransomware | Gianni Botsford Architects id25742 View details | United Kingdom | Other | — | |
|
Gianni Botsford Architects |
|||||
| Ransomware | Hilong Petroleum Pipe Company LLC id25735 View details | China | Energy | — | |
|
Hilong Petroleum Pipe Company LLC |
|||||
| Ransomware | Supriya Aesthetic Dermatology id25728 View details | United States | Communication / Marketing | — | |
|
Supriya Aesthetic Dermatology |
|||||
| Ransomware | Service Lane eAdvisor id25690 View details | United States | Other | — | |
|
Service Lane eAdvisor |
|||||