Ransomware Group intelligence
Nightspire
ActiveTrack Nightspire with 348 published victims and 11 known leak locations in a single intelligence view.
BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Overview
Nightspire is tracked by Breach House as a ransomware group with 348 published victims.
United States is currently the most targeted country in this dataset.
11 known leak locations are currently associated with this group.
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (11)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 11 | Onion service | Up checked 4h ago | nspirep7orjq73k2x2fwh2mxgh74vm2now6cdbnnxjk2f5wn34bmdxad.onion |
| Leak location 10 | Onion service | Up checked 4h ago | nspire7lugml7ybqyjaaxtsgrs4qn3fcon3lrjbih6wamttvdm5ke4qd.onion |
| Leak location 4 | Onion service | Down checked 4h ago | a2lyiiaq4n74tlgz4fk3ft4akolapfrzk772dk24iq32cznjsmzpanqd.onion |
| Leak location 5 | Onion service | Down checked 4h ago | a2lyiiaq4n74tlgz4fk3ft4akolapfrzk772dk24iq32cznjsmzpanqd.onion |
| Leak location 8 | Onion service | Down checked 4h ago | nspiremkiq44zcxjbgvab4mdedyh2pzj5kzbmvftcugq3mczx3dqogid.onion |
| Leak location 9 | Onion service | Down checked 4h ago | nspiremkiq44zcxjbgvab4mdedyh2pzj5kzbmvftcugq3mczx3dqogid.onion |
| Leak location 6 | Onion service | Down checked 4h ago | nspirebcv4sy3yydtaercuut34hwc4fsxqqv4b4ye4xmo6qp3vxhulqd.onion |
| Leak location 7 | Onion service | Down checked 4h ago | nspirebcv4sy3yydtaercuut34hwc4fsxqqv4b4ye4xmo6qp3vxhulqd.onion |
| Leak location 1 | Onion service | Down checked 4h ago | nspireyzmvapgiwgtuoznlafqvlyz7ey6himtgn5bdvdcowfyto3yryd.onion |
| Leak location 2 | Onion service | Down checked 4h ago | nspireyzmvapgiwgtuoznlafqvlyz7ey6himtgn5bdvdcowfyto3yryd.onion |
| Leak location 3 | Onion service | Down checked 4h ago | nspireyzmvapgiwgtuoznlafqvlyz7ey6himtgn5bdvdcowfyto3yryd.onion |
Top Activity Sectors (17)
- Not identified 118
- Services 36
- Manufacturing / Engineering 23
- Healthcare / Pharma 19
- Finance / Legal / Insurance 18
- IT 16
- Communication / Marketing 15
- Transportation / Travel / Logistics 14
- Construction / Real Estate 12
- Hospitality / Food & Beverage / Tourism 9
- Retail / E-commerce 7
- Education 7
- NGOs / Associations 7
- Energy 7
- Public Sector 7
- Agriculture / Food 4
- Telecommunications 3
Typical Attacks (10)
▼MITRE ATT&CK does not currently catalogue Nightspire, so this is our assessment of the techniques it uses, drawn from public reporting. The techniques themselves, and every "what that means" definition below, come from MITRE ATT&CK v19.2. Confidence: medium. Treat it as orientation, not attribution.
-
What they do: nightspire exploits valid domain accounts harvested during initial access to authenticate against remote systems.
What that means: Adversaries may obtain and abuse credentials of a domain account as a means of gaining Initial Access, Persistence, Privilege Escalation, or Defense Evasion.
-
T1059.001 PowerShell Execution
What they do: nightspire executes PowerShell scripts to automate reconnaissance, privilege checks, and payload deployment across compromised hosts.
What that means: Adversaries may abuse PowerShell commands and scripts for execution.
-
What they do: nightspire modifies Registry Run Keys and startup folders to maintain persistence across reboots.
What that means: Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key.
-
T1685 Disable or Modify Tools Defense Impairment
What they do: nightspire disables or modifies security tools such as EDR agents and monitoring services to hinder detection and response.
What that means: Adversaries may disable, degrade, or tamper with security tools or applications (e.g., endpoint detection and response (EDR) tools, intrusion detection systems (IDS), antivirus, logging agents, sensors, etc.) to impair or reduce visibility of defensive capabilities.
-
T1070.004 File Deletion Stealth
What they do: nightspire deletes Volume Shadow Copies and backup directories via system commands to prevent recovery from snapshots.
What that means: Adversaries may delete files left behind by the actions of their intrusion activity.
-
T1018 Remote System Discovery Discovery
What they do: nightspire performs remote system discovery to identify exposed services, hosts, and potential lateral movement paths.
What that means: Adversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for Lateral Movement from the current system.
-
T1135 Network Share Discovery Discovery
What they do: nightspire uses SMB/Windows Admin Shares discovery to map network shares and identify high-value targets for encryption.
What that means: Adversaries may look for folders and drives shared on remote systems as a means of identifying sources of information to gather as a precursor for Collection and to identify potential systems of interest for Lateral Movement.
-
T1021.002 SMB/Windows Admin Shares Lateral Movement
What they do: nightspire uses SMB/Windows Admin Shares for lateral movement into additional machines within the victim network.
What that means: Adversaries may use Valid Accounts to interact with a remote network share using Server Message Block (SMB).
-
T1486 Data Encrypted for Impact Impact
What they do: nightspire encrypts victim files using custom ransomware routines targeting business documents, databases, and backups.
What that means: Adversaries may encrypt data on target systems or on large numbers of systems in a network to interrupt availability to system and network resources.
-
T1491.001 Internal Defacement Impact
What they do: nightspire performs internal defacement by replacing victim files with ransom notes and altered content markers.
What that means: An adversary may deface systems internal to an organization in an attempt to intimidate or mislead users, thus discrediting the integrity of the systems.
Tools Observed (3)
▼Software Nightspire has been seen using, grouped by what it is used for. Legitimate administration tools appear here because these actors routinely abuse them — presence in this list is not itself malicious.
Discovery & enumeration
Everything.exe
Exfiltration
MEGA
WinSCP
Tool data from Ransomware Tool Matrix by BushidoUK, licensed CC BY 4.0. Grouped by purpose and matched to this group by Breach House.
Ransom Notes (4)
▼The note this group leaves on a compromised machine. Click a filename to read it.
[NSPIRE_MSG].txt
NightSpire Encryption Notice Your internal servers and backup & virtual infrastructure have been fully compromised. All your files encrypted by NIGHTSPIRE Ransomware. You have 72 hours to respond. The initial payment for decryption and file deletion is 30000 USD in Bitcoin. This amount is based on your annual revenue, and this is notably less amount than all of your past hard work and effort to develop all of your products. However, the amount can be renegotiated depending on the circumstances. Our Discount Service Includes: - If you respond within 48 hours, we will provide you 30% discount as service. - If you respond within 24 hours, we will provide you 50% discount as service. "The faster you pay, the lower the ransom." That's our motto. Failure to cooperate will result in public disclosure. We possess a complete list of files and document samples that serve as proof of the access. You can see the decryption demo video and the list of copied files on our website. ------------------- About NightSpire – Cooperate: The Win-Win Resolution ------------------- Full Decryption Tool + Instructions: Universal binary decrypts all affected systems in hours. Data Deletion Proof: Timestamped logs, blockchain-verified wipe certificates—your data erased forever. Secrecy Assurances: No traces online; we expunge all references post-deal. Bonus: Security Audit Report: Detailed breach vector analysis + fixes, valued at $50K+ from legit firms. Payment Flexibility: Crypto (BTC We Offer), staged if needed—processed by our financial team. NightSpire isn't a lone hacker in a basement. We're a structured syndicate with standard operating procedures, support desks, recruiters, and analysts—like a Fortune 500 but optimized for cyber efficiency. Our reputation demands we deliver: victims who pay get results, building trust for mutual long-term gains. Non-payment erodes that, but cooperation upholds it. Security researchers and reputation confirm, we're a fully fledged cyber group... built to monetize. We honor deals to ensure repeat business across the ecosystem. --------------------------- WHAT HAPPENS IF YOU DON'T PAY ------------------------------- - The hacked news about your company will be posted on our Onion site. - Source codes of your all software products will be open source. - Your clients and partners may be notified about the data breach. - The data may be shared or sold to third parties. - You will permanently lose access to your encrypted data. - We will not provide any decryption tools or support. ----------------------------------------- CAUTION --------------------------------------------- >>> Important – Do Not DO NOT modify files. DO NOT use third-party tools. Unncessary activities cause permanent loss of your data. AES-256/RSA-4096 = impossible without our key. >>> WARNING – NO INTERMEDIARIES Do NOT use recovery or negotiation companies. They are middlemen who profit from deception. For example: They charged victims $1M Secretly negotiated with us for $200K Kept $800K for themselves. Contacting us directly = 5× lower cost. Middlemen only steal from you. Deal direct. Pay less. Resolve faster. >>> IMPORTANT – INSURANCE NOTICE Do NOT involve your cyber insurance company directly. They will sabotage negotiations to avoid paying the full policy amount. If your coverage is $10M, they will offer us $100K. We will reject it. They will refuse to increase. Result: no payment, full data leak, total damage — for you. If you anonymously inform us of your insurance limits and terms, we will NOT exceed that amount in negotiations. This guarantees: • Fast resolution • Data deletion • Full decryption • No public leak Silence only benefits the insurer. Transparency benefits you. Choose wisely. >>> CONSEQUENCES OF DATA LEAK If your data is leaked: • Government fines (GDPR, compliance, tax authorities) • Lawsuits from clients and partners • Criminal abuse of employee and customer identities • Bank fraud, loan fraud, money laundering • FBI investigations and legal exposure • Competitor espionage and business sabotage • Employee poaching and loss of trade secrets • Permanent reputation destruction Your company will bleed money, clients, trust, and stability. Statistics: 2 out of 3 companies shut down within 6 months after a major data breach. The cost of recovery is hundreds of times higher than the ransom. Paying is faster. Cheaper. Safer. Your reputation took years to build. It takes minutes to destroy. Read more about the GDRP legislation:: https://en.wikipedia.org/wiki/General_Data_Protection_Regulation https://gdpr.eu/what-is-gdpr/ https://gdpr-info.eu/ -------------------------------------------- How to Contact Us --------------------------------------------- >>> Using qTox Chat App Our qTox ID: 038F61A270B8094E713E4815C4FA5086E4AD3A021575C6F90EE65A0C123D3E3BF6926C3B59EA Our qTox ID: 8D663FD10BF662930F4C076CBF95FACFCC4ABD8F1A5E328DE75D0B0237A74E1AE1E0C5C37E7F >>> Using Tor Browser: 1. Download Tor Browser: https://www.torproject.org/ 2. Install Tor Browser: • Windows: Run the installer, launch Tor Browser, and click Connect. • macOS: Open the downloaded .dmg file, drag Tor Browser to Applications, launch it, and click Connect. • Linux: Extract the downloaded package, run ./start-tor-browser.desktop, and click Connect. • Android: Install from Google Play or torproject.org, open the app, and tap Connect. • iOS (iPhone): Install Onion Browser from the App Store, open it, and tap Connect. 3. Access the under link once connected. http://nspire7lugml7ybqyjaaxtsgrs4qn3fcon3lrjbih6wamttvdm5ke4qd.onion Login with UUID "[snip]" and password "[snip]". 4. Also introduce you to our blog site where you can learn more about us through the link below. http://nspirep7orjq73k2x2fwh2mxgh74vm2now6cdbnnxjk2f5wn34bmdxad.onion/ >>> On Mail Proton Mail: [email protected] Onion Mail: [email protected] Contact us and verify with UUID "[snip]". ----------------------------------------------------- FAQ ------------------------------------------------------ Proof? Preview + Free sample decrypts. Safe tool? Universal, tested. Data gone? Solid proof. Future attacks? Pay = gone forever + fixes. Team NightSpire.
readme.txt
Dear Management,
If you are reading this message, it means that:
- your network infrastructure has been compromised,
- sensetive data was leaked,
- files are encrypted
--------------------------------------------------------------------------
The best and only thing you can do is to contact us
to settle the matter before any losses occurs.
Onion Site:
http://nspireyzmvapgiwgtuoznlafqvlyz7ey6himtgn5bdvdcowfyto3yryd.onion
Proton Mail:
[email protected]
--------------------------------------------------------------------------
1. THE FOLLOWING IS STRICTLY FORBIDDEN
1.1 EDITING FILES.
Renaming files could DAMAGE the
cipher and decryption will be impossible.
1.2 USING THIRD-PARTY SOFTWARE.
Trying to recover with any software
can also break the cipher and
file recovery will become a problem.
--------------------------------------------------------------------------------------------------
2. EXPLANATION OF THE SITUATION
2.1 WHAT HAPPENED
We encrypted your workstations and servers to make the fact of the intrusion visible and to prevent you from hiding sensetive data leaks.
We have already downloaded a huge amount of sensetive data and analyzed it. Now its fate is up to you, it will either be deleted or sold, or shared with the media.
2.2 VALUABLE DATA WE USUALLY STEAL:
- Databases, legal documents, personal information.
- Audit reports.
- Audit SQL database
- Any financial documents (Statements, invoices, accounting, transfers etc.).
- Work files and corporate correspondence.
- Any backups.
- Confidential documents.
2.3 TO DO LIST (best practies)
- Contact us as soon as possible.
- Contact us only in our live chat, otherwise you can run into scammers.
- Purchase our decryption tool and decrypt your files. There is no other way to do this.
- Realize that dealing with us is the shortest way to success and secrecy.
- Give up the idea of using decryption help programs, otherwise you will destroy the system permanently.
- Avoid any third-party negotiators and recovery groups. They can become the source of leaks.
--------------------------------------------------------------------------------------------------
3. POSSIBLE DECISIONS
3.1 NOT MAKING THE DEAL
- After 5 days starting tomorrow your leaked data will be Disclosed or sold.
- We will also send the data to all interested supervisory organizations and the media.
- Decryption key will be deleted permanently and recovery will be impossible.
- Losses from the situation can be measured based on your annual budget.
3.2 MAKING THE WIN-WIN DEAL
- You will get the only working Decryption Tool and the how-to-use Manual.
- You will get our guarantees (with log provided) of non-recovarable deletion of all your leaked data.
- You will get our guarantees of secrecy and removal of all traces related to the deal in the Internet.
- You will get our security report on how to fix your security breaches.
--------------------------------------------------------------------------------------------------
4. HOW TO CONTACT US
4.1 Download and install TOR Browser https://torproject.org
4.2 Go to our contact form website at http://nspireyzmvapgiwgtuoznlafqvlyz7ey6himtgn5bdvdcowfyto3yryd.onion/contact.php
4.3 You can request sample files chat to review leaked data samples.
4.4 In case TOR Browser is restricted in your area use VPN services.
4.5 All leaked Data samples will be Disclosed in 7 Days if you remain silent.
4.6 Your Decryption keys will be permanently destroyed at the moment the leaked Data is Disclosed.
--------------------------------------------------------------------------------------------------
5. RESPONSIBILITY
5.1 Breaking critical points of this offer will cause:
- Deletion of your decryption keys.
- Immediate sale or complete Disclosure of your leaked data.
- Notification of government supervision agencies, your competitors and clients.
--------------------------------------------------------------------------------------------------
readme_2.txt
Hi, Your hotel is hacked! Your servers and files are locked and copied. =================================== REMEMBER! We also locked files in OneDrive. And we did not change the extensions of files in OneDrive. =================================== You cannot decrypt yourself without our key, even you're using third party software or from help of security companies. Please do not waste your time. Your files will be easily decrypted with pay. Never worry. We're waiting here with UUID [snip] Method * : [email protected] Method 1 : Our qTox ID 3B61CFD6E12D789A439816E1DE08CFDA58D76EB0B26585AA34CDA617C41D5943CDD15DB0B7E6 Method 2 : Browse our Onion Site with Tor Browser http://nspiremkiq44zcxjbgvab4mdedyh2pzj5kzbmvftcugq3mczx3dqogid.onion http://a2lyiiaq4n74tlgz4fk3ft4akolapfrzk772dk24iq32cznjsmzpanqd.onion We're waiting here with UUID [snip]
nightspire_readme.txt
-Your sensetive data are stolen and encrypted! If you pay within 3 days, we will decrypt it and also, we will not public your data. After that we will public this situation and all data. -DO NOT MODIFY FILES YOURSELF. -DO NOT USE THIRD PARTY SOFTWARE TO RESTORE YOUR DATA. -YOU MAY DAMAGE YOUR FILES, IT WILL RESULT IN PERMANENT DATA LOSS. -YOUR DATA IS STRONGLY ENCRYPTED, YOU CAN NOT DECRYPT IT WITHOUT OUR HELP. CONTACT US: Onion Mail : [email protected] qTox ID: 3B61CFD6E12D789A439816E1DE08CFDA58D76EB0B26585AA34CDA617C41D5943CDD15DB0B7E6 http://a2lyiiaq4n74tlgz4fk3ft4akolapfrzk772dk24iq32cznjsmzpanqd.onion http://nspiremkiq44zcxjbgvab4mdedyh2pzj5kzbmvftcugq3mczx3dqogid.onion Send this message first "NSPIRE[snip]" when contact with us, so to make sure it's you.
Ransom-note text from RansomLook, licensed CC BY 4.0.
Victims (348)
Search, filter and paginate the victim timeline for Nightspire. Showing 101–200 of 348.
| Type | Target | Discovered | Country | Business Category | Intel Link |
|---|---|---|---|---|---|
| Ransomware | Sa**** A** Products id27933 View details | Manufacturing / Engineering | — | ||
|
Data is not available now. |
|||||
| Ransomware | Carmelo Candy Inc id27923 View details | United States | Retail / E-commerce | — | |
|
[AI generated] N/A |
|||||
| Ransomware | C***n** **tu*e *n S**ur*** P**ot**hn**u* id27922 View details | Services | — | ||
|
Data is not available now. |
|||||
| Ransomware | Advanced Vehicle Assemblies id27882 View details | United States | Construction / Real Estate | — | |
|
- Banking & Financial Systems- Accounting & Tax Records- Customer & Sales Data- Engineering & Manufacturing IP |
|||||
| Ransomware | Southeastern Conference of Seventh-day Adventists id27860 View details | United States | NGOs / Associations | — | |
|
Data is not available now. |
|||||
| Ransomware | Dubosson Frères SA id27859 View details | Switzerland | Construction / Real Estate | — | |
|
Data is not available now. |
|||||
| Ransomware | Siena Construction id27858 View details | United States | Construction / Real Estate | — | |
|
- QBOOK Data- Project Records- Employee Information- Finance Records- Technical Data- Suppliers Information- Bid Documents |
|||||
| Ransomware | PARS AR-GE id27857 View details | Türkiye | IT | — | |
|
- Project Source Code- Finance Records- Technical Data- Customer Documents- Employee Info |
|||||
| Ransomware | Neptune Mechanical, Inc. id27856 View details | United States | IT | — | |
|
- Banking & Financial Systems- Accounting & Tax Records- Payroll & Employee Financial Data- HR & Employee Personal Data- Real Estate & Tenant Data |
|||||
| Ransomware | TTAF Defense id27855 View details | Türkiye | Manufacturing / Engineering | — | |
|
- Projects- Financial Documents>- Quality & Technical & Internal Documents |
|||||
| Ransomware | Association OCACIA id27854 View details | France | Services | — | |
|
- Rapport d'audit- Plan de contrôle- Fiche d'écart- Manquement- Action corrective |
|||||
| Ransomware | S***a V**a***s id27853 View details | Finance / Legal / Insurance | — | ||
|
Data is not available now. |
|||||
| Ransomware | The GMP Group ( Premier Singapore Recruitment Firm with Global Reach ) id27818 View details | Singapore | Services | — | |
|
- Financial Documents- Salaries Documents- Candidate' PII information Resumes & CV |
|||||
| Ransomware | Notre-Dame du Grandchamp id27794 View details | France | Education | — | |
|
- Students Medical Records- HR& Employee Personal Data- Student Personal & Academic Data- Contracts & Administrative Documents |
|||||
| Ransomware | Ghazi Brothers id27793 View details | Pakistan | Agriculture / Food | — | |
|
Data is not available now. |
|||||
| Ransomware | The GMP Group id27792 View details | Singapore | Services | — | |
|
- Financial Documents- Salaries Documents- Resumes & CV |
|||||
| Ransomware | S**n* *o**tr***io* id27791 View details | Construction / Real Estate | — | ||
|
Data is not available now. |
|||||
| Ransomware | P**S****E id27790 View details | Manufacturing / Engineering | — | ||
|
Data is not available now. |
|||||
| Ransomware | *ep***e M***a*i***, Inc. id27789 View details | Transportation / Travel / Logistics | — | ||
|
Data is not available now. |
|||||
| Ransomware | T*** Defense id27788 View details | Manufacturing / Engineering | — | ||
|
Data is not available now. |
|||||
| Ransomware | A****ia**on O*A**A id27787 View details | Transportation / Travel / Logistics | — | ||
|
Data is not available now. |
|||||
| Ransomware | CERUMO Co., Ltd id27760 View details | Japan | Manufacturing / Engineering | — | |
|
Data is not accessible for now |
|||||
| Ransomware | Beltran & Garcia Financial Investment SLU id27759 View details | Spain | Finance / Legal / Insurance | — | |
|
Data is not available now. |
|||||
| Ransomware | JT-ATFP, LLC id27758 View details | United States | Manufacturing / Engineering | — | |
|
- Classified Contracts- Employee Information- ATFP Projects- Vulnerability Assessment Docs- FOUO Files- DOD Projects |
|||||
| Ransomware | *d**n*** V**i*l* **s**b***s id27757 View details | Communication / Marketing | — | ||
|
Data is not available now. |
|||||
| Ransomware | D**o*s** Fr**e* *A id27654 View details | Other | — | ||
|
Data is not available now. |
|||||
| Ransomware | S***h***t*** **n**r***e of **v***h-**y A***n***ts id27649 View details | NGOs / Associations | — | ||
|
Data is not available now. |
|||||
| Ransomware | OTNet id27647 View details | Japan | Telecommunications | — | |
|
[AI generated] N/A |
|||||
| Ransomware | Florida Therapy Services id27646 View details | United States | Healthcare / Pharma | — | |
|
[AI generated] Florida Therapy Services is a mental health organization based in Florida, USA. It provides psychiatric services, psychotherapy, and substance abuse counseling, among other services for children, adolescents, adults, and families. The organization specializes in home, school, community, and office-based treatment, aiming to support individuals struggling with various mental health issues. |
|||||
| Ransomware | *h**i **o**e** id27641 View details | Public Sector | — | ||
|
Data is not available now. |
|||||
| Ransomware | *H* G** **O** id27640 View details | IT | — | ||
|
Data is not available now. |
|||||
| Ransomware | A*v**c** *e**c** ***em**i** id27609 View details | Manufacturing / Engineering | — | ||
|
Data is not available now. |
|||||
| Ransomware | Anbogen Therapeutics Inc. id27574 View details | Taiwan, Province of China | Healthcare / Pharma | — | |
|
Data is not available now. |
|||||
| Ransomware | Eastex Environmental Laboratory id27573 View details | United States | Other | — | |
|
- Experimental Reports- Internal Documents- Financial & HR Documents |
|||||
| Ransomware | J***T*P, **C id27572 View details | Transportation / Travel / Logistics | — | ||
|
Data is not available now. |
|||||
| Ransomware | *n**g** T***a**ut*** **c id27571 View details | Taiwan, Province of China | Healthcare / Pharma | — | |
|
Data is not available now. |
|||||
| Ransomware | HLF Heizung-Sanitär GmbH id27570 View details | Germany | Transportation / Travel / Logistics | — | |
|
Data is not available now. |
|||||
| Ransomware | *o**e-*a** du ***n*c**** id27522 View details | Other | — | ||
|
Data is not available now. |
|||||
| Ransomware | *L* **i**n*-**n**** GmbH id27521 View details | Other | — | ||
|
Data is not available now. |
|||||
| Ransomware | **l**a* & ***c** **n*n**** I**e*t**** *L* id27520 View details | Other | — | ||
|
Data is not available now. |
|||||
| Ransomware | Cannavative Group id27508 View details | United States | Other | — | |
|
- QuickBook Files- METRC DB-Employeement & Clients Documents |
|||||
| Ransomware | SAS CAP ESTEL HOTEL id27507 View details | France | Hospitality / Food & Beverage / Tourism | — | |
|
Data is not available now. |
|||||
| Ransomware | Semenya Furumele Consulting Engineers id27506 View details | South Africa | Services | — | |
|
Data is not available now. |
|||||
| Ransomware | **o**d* *h**a*y ***v***s id27505 View details | Other | — | ||
|
Data is not available now. |
|||||
| Ransomware | O**e* id27501 View details | Other | — | ||
|
Data is not available now. |
|||||
| Ransomware | IASMOS id27494 View details | Greece | Other | — | |
|
Data is not available now. |
|||||
| Ransomware | Fidanque Hermanos e Hijos, S.A id27493 View details | Panama | Other | — | |
|
- Financial Documents- Internal Documents- MSSQL Database |
|||||
| Ransomware | **V**C** *E**C** ***EM**I** id27492 View details | Other | — | ||
|
Data is not available now. |
|||||
| Ransomware | GD France id27458 View details | France | Other | — | |
|
Data is not available now. |
|||||
| Ransomware | G* *r**c* id27452 View details | Other | — | ||
|
Data is not available now. |
|||||
| Ransomware | **ste* **vi**n***t** **b**a**** id27385 View details | Other | — | ||
|
Data is not available now. |
|||||
| Ransomware | G* *r**n*e id27377 View details | Other | — | ||
|
Data is not available now. |
|||||
| Ransomware | S*m**y* **ru**l* ***s**t**g **gi****r* id27376 View details | Other | — | ||
|
Data is not available now. |
|||||
| Ransomware | CFTC Metallurgie id27324 View details | France | Manufacturing / Engineering | — | |
|
Data is not available now. |
|||||
| Ransomware | S** *A* ***E* **T*L id27316 View details | Other | — | ||
|
Data is not available now. |
|||||
| Ransomware | **n*a**t** **o*p id27311 View details | Other | — | ||
|
Data is not available now. |
|||||
| Ransomware | Giaroli S.A.S id27286 View details | Italy | Other | — | |
|
Data is not available now. |
|||||
| Ransomware | I**M** id27285 View details | Other | — | ||
|
Data is not available now. |
|||||
| Ransomware | NIXVAL IT Infrastructure id27280 View details | Spain | Construction / Real Estate | — | |
|
Data is not available now. |
|||||
| Ransomware | Taylor County Property Appraiser Office id27275 View details | United States | Communication / Marketing | — | |
|
- SQL Data- All Pics- Scan Files |
|||||
| Ransomware | E-Fci id27269 View details | United States | Other | — | |
|
Data is not available now. |
|||||
| Ransomware | JJR Engineering & Fabrication id27268 View details | United States | Manufacturing / Engineering | — | |
|
Data is not available now. |
|||||
| Ransomware | Big Brothers Big Sisters id27260 View details | United States | Education | — | |
|
- Students List- Background Check Records- Internal Documents |
|||||
| Ransomware | Tecnoedil S.A. Constructora id27259 View details | Paraguay | Communication / Marketing | — | |
|
Data is not available now. |
|||||
| Ransomware | CFTC Métallurgie id27258 View details | France | Manufacturing / Engineering | — | |
|
- Customer Contacts- Internal Documents |
|||||
| Ransomware | Taylor County Property Appraiser's Office id27224 View details | United States | Communication / Marketing | — | |
|
Data is not available now. |
|||||
| Ransomware | T**n*e**l S.A. C***t**c***a id27194 View details | Other | — | ||
|
Data is not available now. |
|||||
| Ransomware | C*T* M**al***g*e id27193 View details | Other | — | ||
|
Data is not available now. |
|||||
| Ransomware | T****r ****t* P**p***y ***r***e*** **f**e id27192 View details | Other | — | ||
|
Data is not available now. |
|||||
| Ransomware | Stalwart Development Group LLC id27175 View details | United States | IT | — | |
|
Data is not available now. |
|||||
| Ransomware | CPG Documentation id27158 View details | United States | Other | — | |
|
Data is not available now. |
|||||
| Ransomware | MAGNETA LOGISTICS, UAB id27156 View details | Lithuania | Transportation / Travel / Logistics | — | |
|
Data is not available now. |
|||||
| Ransomware | 11th Street Veterinary Hospital id27155 View details | United States | Healthcare / Pharma | — | |
|
Data is not available now. |
|||||
| Ransomware | thallos AG id27153 View details | Germany | Other | — | |
|
Data is not available now. |
|||||
| Ransomware | B** *r*t**r* *i* **s***s of ***te** *i**o**i id27130 View details | Other | — | ||
|
Data is not available now. |
|||||
| Ransomware | **a****t ***el*****t Gr*up L** id27091 View details | Other | — | ||
|
Data is not available now. |
|||||
| Ransomware | KLEIN IBERICA SA id27088 View details | Spain | Communication / Marketing | — | |
|
- Internal Documents- Financial Data |
|||||
| Ransomware | N*X*** ** I**r****c**** id27087 View details | Other | — | ||
|
Data is not available now. |
|||||
| Ransomware | AKOL LAW id27048 View details | Türkiye | Finance / Legal / Insurance | — | |
|
- Internal Documents- Financial Documents |
|||||
| Ransomware | K**I* I***I*A *A id27047 View details | Other | — | ||
|
Data is not available now. |
|||||
| Ransomware | Union Laitiere de la Meuse id27017 View details | France | Other | — | |
|
Data is not available now. |
|||||
| Ransomware | IOTA HOTEL TBILISI id26998 View details | Georgia | Hospitality / Food & Beverage / Tourism | — | |
|
- VIP Lists- Invoices, Passport...- Financial Documents |
|||||
| Ransomware | Bain Oil Company id26975 View details | United States | Energy | — | |
|
Data is not available now. |
|||||
| Ransomware | SIMETRI Inc id26974 View details | United States | Services | — | |
|
Data is not available now. |
|||||
| Ransomware | Hicare.net Inc id26929 View details | United States | Services | — | |
|
Data is not available now. |
|||||
| Ransomware | PriceTable id26927 View details | United States | Communication / Marketing | — | |
|
Data is not available now. |
|||||
| Ransomware | hicare id26926 View details | United States | Other | — | |
|
Data is not available now. |
|||||
| Ransomware | GoHighLevel id26925 View details | United States | Other | — | |
|
GoHighLevel, also known as HighLevel, is a Dallas, Texas-based software company in the Other sector that offers an all-in-one sales and marketing platform for agencies and businesses. Its platform combines CRM, landing pages, forms, calendars, marketing automation, email and SMS messaging, and white-label resale features under one system. The company presents itself as a tool for agencies to capture leads, automate follow-up, and manage client workflows from a single dashboard. It was listed as a ransomware victim associated with nightspire. |
|||||
| Ransomware | [Suspended] #2036 id26967 View details | United States | Other | ||
|
We have suspended this notification since we have doubt about the claim |
|||||
| Ransomware | Whipflip id26924 View details | United States | Other | — | |
|
Data is not available now. |
|||||
| Ransomware | US.MAD DOG CONSTRUCTION id26912 View details | United States | Construction / Real Estate | — | |
|
Data is not available now. |
|||||
| Ransomware | **d* **r *e*s id26868 View details | Other | — | ||
|
Data is not available now. |
|||||
| Ransomware | *i***q** **r**n*s * H**o* id26867 View details | Other | — | ||
|
Data is not available now. |
|||||
| Ransomware | OFFICINE FRATELLI AMADORI snc id26838 View details | Italy | Other | — | |
|
Data is not available now. |
|||||
| Ransomware | Vera, spool. s.r.o. id26837 View details | Czechia | Other | — | |
|
Data is not available now. |
|||||
| Ransomware | Regal Building Materials Ltd. id26789 View details | Canada | Construction / Real Estate | — | |
|
Data is not available now. |
|||||
| Ransomware | Pearl Institute for Clinical Research LLC id26689 View details | United States | Healthcare / Pharma | — | |
|
Data is not available for now. |
|||||
| Ransomware | TCPN Inc id26664 View details | United States | Services | — | |
|
Data is not available now. |
|||||
| Ransomware | Fico Ferragens Indústria e Comércio Ltda id26663 View details | Brazil | Services | — | |
|
Data is not available now. |
|||||
| Ransomware | RS Development LLC id26662 View details | United States | IT | — | |
|
Data is not available now. |
|||||