Ransomware Group intelligence
Nightspire
ActiveTrack Nightspire with 307 published victims and 11 known leak locations in a single intelligence view.
Overview
Nightspire is tracked by Breach House as a ransomware group with 307 published victims.
United States is currently the most targeted country in this dataset.
11 known leak locations are currently associated with this group.
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (11)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 1 | Onion service | Unknown | nspireyzmvapgiwgtuoznlafqvlyz7ey6himtgn5bdvdcowfyto3yryd.onion |
| Leak location 2 | Onion service | Unknown | nspireyzmvapgiwgtuoznlafqvlyz7ey6himtgn5bdvdcowfyto3yryd.onion |
| Leak location 3 | Onion service | Unknown | nspireyzmvapgiwgtuoznlafqvlyz7ey6himtgn5bdvdcowfyto3yryd.onion |
| Leak location 4 | Onion service | Unknown | a2lyiiaq4n74tlgz4fk3ft4akolapfrzk772dk24iq32cznjsmzpanqd.onion |
| Leak location 5 | Onion service | Unknown | a2lyiiaq4n74tlgz4fk3ft4akolapfrzk772dk24iq32cznjsmzpanqd.onion |
| Leak location 6 | Onion service | Unknown | nspirebcv4sy3yydtaercuut34hwc4fsxqqv4b4ye4xmo6qp3vxhulqd.onion |
| Leak location 7 | Onion service | Unknown | nspirebcv4sy3yydtaercuut34hwc4fsxqqv4b4ye4xmo6qp3vxhulqd.onion |
| Leak location 8 | Onion service | Unknown | nspiremkiq44zcxjbgvab4mdedyh2pzj5kzbmvftcugq3mczx3dqogid.onion |
| Leak location 9 | Onion service | Unknown | nspiremkiq44zcxjbgvab4mdedyh2pzj5kzbmvftcugq3mczx3dqogid.onion |
| Leak location 10 | Onion service | Unknown | nspire7lugml7ybqyjaaxtsgrs4qn3fcon3lrjbih6wamttvdm5ke4qd.onion |
| Leak location 11 | Onion service | Unknown | nspirep7orjq73k2x2fwh2mxgh74vm2now6cdbnnxjk2f5wn34bmdxad.onion |
Top Activity Sectors
No sector intelligence available.
Ransom Notes (0)
▼No ransom notes available for this group.
Tools Used
▼No tools used available.
YARA Rules (0)
▼No YARA rules available.
Indicators of Compromise (0)
▼No IoCs available for this group.
Negotiation Chats (0)
▼No negotiation chats available.
Research Sources
No external research sources linked yet.
Victims (307)
Search, filter and paginate the victim timeline for Nightspire. Showing 201–300 of 307.
| Type | Target | Discovered | Country | Business Category | Intel Link |
|---|---|---|---|---|---|
| Ransomware | Serometrix LLC id25676 View details | United States | Services | — | |
|
Serometrix LLC |
|||||
| Ransomware | TriApex US Laboratories id25615 View details | United States | Other | — | |
|
TriApex US Laboratories |
|||||
| Ransomware | Hyatt Place New York / Chelsea Hotel id25490 View details | United States | Hospitality / Food & Beverage / Tourism | — | |
|
Hyatt Place New York / Chelsea Hotel |
|||||
| Ransomware | AUTOCARES CARRETERO id25488 View details | Spain | Other | — | |
|
AUTOCARES CARRETERO |
|||||
| Ransomware | Midkiff, Muncie & Ross, P.C id25223 View details | United States | Finance / Legal / Insurance | — | |
|
Midkiff, Muncie & Ross, P.C |
|||||
| Ransomware | THT Bio-Science, France id25094 View details | France | Other | — | |
|
THT Bio-Science, France |
|||||
| Ransomware | International Door, Inc id25048 View details | United States | Services | — | |
|
International Door, Inc |
|||||
| Ransomware | Red Star Studio Ltd id24693 View details | United Kingdom | Services | — | |
|
Red Star Studio Ltd |
|||||
| Ransomware | The Center of Association Management id24657 View details | United States | NGOs / Associations | — | |
|
The Center of Association Management |
|||||
| Ransomware | Ermat Grup id24487 View details | Türkiye | Other | — | |
|
Ermat Grup |
|||||
| Ransomware | Pioneer Ocean Freight Co., Ltd. id24429 View details | Hong Kong | Transportation / Travel / Logistics | — | |
|
Pioneer Ocean Freight Co., Ltd. |
|||||
| Ransomware | Davis Kitchens, United States id24415 View details | United States | Public Sector | — | |
|
Davis Kitchens, United States |
|||||
| Ransomware | Balkrishna Paper Mills LTD, India id24197 View details | India | Services | — | |
|
Balkrishna Paper Mills LTD, India |
|||||
| Ransomware | NONC, India id24196 View details | India | Other | — | |
|
NONC, India |
|||||
| Ransomware | LAMAICA, Egypt id24195 View details | Egypt | Other | — | |
|
LAMAICA, Egypt |
|||||
| Ransomware | Lotus Powergear Pvt. Ltd, India id23928 View details | India | Energy | — | |
|
Lotus Powergear Pvt. Ltd, India |
|||||
| Ransomware | Vascara, Vietnam id23783 View details | Viet Nam | Other | — | |
|
Vascara, Vietnam |
|||||
| Ransomware | Servicios del Valle del Fuerte, Mexico id23753 View details | Mexico | Other | — | |
|
Servicios del Valle del Fuerte, Mexico |
|||||
| Ransomware | Fidelity Pension Managers, Nigeria id23752 View details | Nigeria | Other | — | |
|
Fidelity Pension Managers, Nigeria |
|||||
| Ransomware | Eastern Cape Department of Human Settlements, South Africa id23751 View details | South Africa | Public Sector | — | |
|
Eastern Cape Department of Human Settlements, South Africa |
|||||
| Ransomware | Instituto Nacional de Oftalmologia, Peru id23750 View details | Peru | Other | — | |
|
Instituto Nacional de Oftalmologia, Peru |
|||||
| Ransomware | speedmais id23643 View details | Brazil | Other | — | |
|
speedmais |
|||||
| Ransomware | vratatech id23642 View details | India | IT | — | |
|
vratatech |
|||||
| Ransomware | Brihta id23641 View details | Slovenia | Communication / Marketing | — | |
|
Brihta |
|||||
| Ransomware | Enem Nostrum Remedies Pvt. Ltd id23604 View details | India | Services | — | |
|
Enem Nostrum Remedies Pvt. Ltd |
|||||
| Ransomware | Dayal Metal Containers Factory LLC id23574 View details | United Arab Emirates | Manufacturing / Engineering | — | |
|
Dayal Metal Containers Factory LLC |
|||||
| Ransomware | BR Group id23573 View details | Colombia | Services | — | |
|
BR Group |
|||||
| Ransomware | We R Family Foundation id23485 View details | United States | NGOs / Associations | — | |
|
We R Family Foundation |
|||||
| Ransomware | Bestlog Logistic Solutions id23462 View details | Brazil | Services | — | |
|
Bestlog Logistic Solutions |
|||||
| Ransomware | NSC PLUS CO, LTD id23433 View details | Thailand | Services | — | |
|
NSC PLUS CO, LTD |
|||||
| Ransomware | Sangeetha Mobiles id23432 View details | India | Telecommunications | — | |
|
Sangeetha Mobiles |
|||||
| Ransomware | KONCISE COMPANY LIMITED id23431 View details | Hong Kong | Services | — | |
|
KONCISE COMPANY LIMITED |
|||||
| Ransomware | romar industrial company limited id23430 View details | Hong Kong | Manufacturing / Engineering | — | |
|
romar industrial company limited |
|||||
| Ransomware | Twaweza id21127 View details | Tanzania, United Republic of | Other | — | |
|
Twaweza |
|||||
| Ransomware | Tuna Processors Phillipines, Inc id21126 View details | Philippines | Communication / Marketing | — | |
|
Tuna Processors Phillipines, Inc |
|||||
| Ransomware | conasa infraestrutura s.a. id21125 View details | Brazil | Other | — | |
|
conasa infraestrutura s.a. |
|||||
| Ransomware | Kinik Gross Toptan Market id20913 View details | Türkiye | Retail / E-commerce | — | |
|
Kinik Gross Toptan Market |
|||||
| Ransomware | Premier 1888 Ltd. id20912 View details | Hong Kong | Communication / Marketing | — | |
|
Premier 1888 Ltd. |
|||||
| Ransomware | JIEI CO., LTD id20911 View details | Japan | Services | — | |
|
JIEI (THAILAND) CO., LTD |
|||||
| Ransomware | Eversendai id20910 View details | Malaysia | Other | — | |
|
Eversendai |
|||||
| Ransomware | ALFA Testing Equipment id20760 View details | Türkiye | Other | — | |
|
ALFA Testing Equipment (Turkey) |
|||||
| Ransomware | Comelesa id20750 View details | Ecuador | Other | — | |
|
Comelesa |
|||||
| Ransomware | Petroquim Chile id20549 View details | Chile | Other | — | |
|
Petroquim Chile |
|||||
| Ransomware | Al Tadawi Specialty Hospital id20532 View details | United Arab Emirates | Healthcare / Pharma | — | |
|
Al Tadawi Specialty Hospital |
|||||
| Ransomware | Ingonyama Trust Board id20508 View details | South Africa | NGOs / Associations | — | |
|
Ingonyama Trust Board (South Africa) |
|||||
| Ransomware | The Green Flame Gas Co. id20507 View details | Kuwait | Energy | — | |
|
The Green Flame Gas Co. (Kuwait) |
|||||
| Ransomware | QuadMiners id20506 View details | Korea, Republic of | Other | — | |
|
QuadMiners (South Korea) |
|||||
| Ransomware | Pistolero id20531 View details | Mexico | Other | ||
|
Pistolero (Mexico) |
|||||
| Ransomware | Hospital José Agurto Tello de Chosica id20386 View details | Peru | Healthcare / Pharma | — | |
|
Hospital José Agurto Tello de Chosica (Peru) |
|||||
| Ransomware | Lars Myhre Ostfold AS id20342 View details | Norway | Other | — | |
|
Lars Myhre Ostfold AS (Norway) |
|||||
| Ransomware | Datatrykk id20341 View details | Norway | Other | — | |
|
Datatrykk (Norway) |
|||||
| Ransomware | Siena Hotel id20248 View details | Hospitality / Food & Beverage / Tourism | — | ||
|
Siena Hotel (United States) |
|||||
| Ransomware | Tan Logistics in Turkey id20247 View details | Türkiye | Transportation / Travel / Logistics | — | |
|
Tan Logistics in Turkey |
|||||
| Ransomware | Calcadawines id20211 View details | Portugal | Other | — | |
|
Calcadawines (Portugal) |
|||||
| Ransomware | Simalga id20195 View details | Spain | Other | — | |
|
Simalga (Spain) |
|||||
| Ransomware | TeamLease id20182 View details | India | Other | — | |
|
TeamLease (India) |
|||||
| Ransomware | Ecoinside id20181 View details | Germany | Other | — | |
|
Ecoinside (Portugal) |
|||||
| Ransomware | Ertl ELECKTRO FELDBACH id20156 View details | Austria | Other | — | |
|
Ertl ELECKTRO FELDBACH (Austria) |
|||||
| Ransomware | Valentin Hotels id20155 View details | Spain | Hospitality / Food & Beverage / Tourism | — | |
|
Valentin Hotels (Spain) |
|||||
| Ransomware | EPK id20139 View details | Venezuela, Bolivarian Republic of | Other | — | |
|
EPK (Venezuela) |
|||||
| Ransomware | branchcore id20138 View details | Venezuela, Bolivarian Republic of | Other | — | |
|
branchcore (Venezuela) |
|||||
| Ransomware | North Kitsap School District id19953 View details | United States | Education | — | |
|
North Kitsap School District (USA) |
|||||
| Ransomware | C.E.E. APTA id19952 View details | Spain | Other | — | |
|
C.E.E. APTA (Spain) |
|||||
| Ransomware | Julia Evans accountants id19858 View details | United Kingdom | Other | — | |
|
Julia Evans accountants (United Kingdom) |
|||||
| Ransomware | Future Association for Microfinance id19764 View details | Egypt | Finance / Legal / Insurance | — | |
|
Future Association for Microfinance (Egypt) |
|||||
| Ransomware | w8textil id19624 View details | Brazil | Other | — | |
|
w8textil (Brazil) |
|||||
| Ransomware | csspv id19623 View details | Czechia | Other | — | |
|
csspv (Czechia) |
|||||
| Ransomware | Melco Capital Pte. Ltd. id19622 View details | Singapore | Services | — | |
|
Melco Capital Pte. Ltd. (Singapore) |
|||||
| Ransomware | Sisnet, Costa Rica id19578 View details | Costa Rica | Other | — | |
|
Sisnet, Costa Rica |
|||||
| Ransomware | MFR CULTIVONS LES REUSSITES, France id19323 View details | France | Other | — | |
|
MFR CULTIVONS LES REUSSITES, France |
|||||
| Ransomware | M-POWER Information, Taiwan id19305 View details | Taiwan, Province of China | Energy | — | |
|
M-POWER Information, Taiwan |
|||||
| Ransomware | promenade-village-dental, Canada id19304 View details | Canada | Healthcare / Pharma | — | |
|
promenade-village-dental, Canada |
|||||
| Ransomware | Accueil - Site Offciel de la commune d'Ardon id19272 View details | France | Other | ||
|
Accueil - Site Offciel de la commune d'Ardon |
|||||
| Ransomware | ChangShen Hospital, Taiwan id19257 View details | Taiwan, Province of China | Healthcare / Pharma | — | |
|
ChangShen Hospital (長慎醫院), Taiwan |
|||||
| Ransomware | Wilmington Personal Injury Lawyer - DPLAW id19236 View details | United States | Finance / Legal / Insurance | — | |
|
Wilmington Personal Injury Lawyer - DPLAW(US) |
|||||
| Ransomware | Compliance Consulting Group id19235 View details | United States | Services | — | |
|
Compliance Consulting Group (US) |
|||||
| Ransomware | Mid-America POOL RENOVATION, Inc id19234 View details | United States | Services | — | |
|
Mid-America POOL RENOVATION, Inc (US) |
|||||
| Ransomware | REFFINDO-PT Pupk Indonesia id19144 View details | Indonesia | Other | — | |
|
REFFINDO-PT Pupk Indonesia (Indonesia) |
|||||
| Ransomware | Tanaka Electronics Taiwan Co., LTD id19138 View details | Taiwan, Province of China | Services | — | |
|
Tanaka Electronics Taiwan Co., LTD |
|||||
| Ransomware | SUMITOMOTOOL id19137 View details | Türkiye | Other | — | |
|
SUMITOMOTOOL(TURKEY) |
|||||
| Ransomware | INI Investments id19136 View details | Egypt | Finance / Legal / Insurance | — | |
|
INI Investments(Egypt) |
|||||
| Ransomware | STORT id19135 View details | Sweden | Other | — | |
|
STORT(Sweden) |
|||||
| Ransomware | Powiatowy Urząd Pracy w Żorach id19134 View details | Poland | Communication / Marketing | — | |
|
Powiatowy Urząd Pracy w Żorach(Poland) |
|||||
| Ransomware | OMCI S.p.a id19133 View details | Italy | Other | — | |
|
OMCI S.p.a(Italy) |
|||||
| Ransomware | Sistel Connections id19132 View details | Italy | Other | — | |
|
Sistel Connections(Italy) |
|||||
| Ransomware | InterLOGIC Inc id19131 View details | United States | Services | — | |
|
InterLOGIC Inc(US) |
|||||
| Ransomware | Secretaria de Educacion de Veracruz, SEV id19130 View details | Mexico | Other | — | |
|
Secretaria de Educacion de Veracruz, SEV(Mexico) |
|||||
| Ransomware | Nicera id19129 View details | Japan | Other | — | |
|
Nicera(Japan) |
|||||
| Ransomware | Emotrans Chile id19128 View details | Chile | Other | — | |
|
Emotrans Chile(Chile) |
|||||
| Ransomware | Zaphira Uniformes id19127 View details | Argentina | Other | — | |
|
Zaphira Uniformes (Argentina) |
|||||
| Ransomware | Audit Accounting Advisory Taxes id19126 View details | Luxembourg | Finance / Legal / Insurance | — | |
|
Audit Accounting Advisory Taxes (Luxemburg) |
|||||
| Ransomware | 6ixty8ight id18683 View details | Hong Kong | Other | — | |
|
6ixty8ight(HongKong) |
|||||
| Ransomware | Sanyo Special Steel India Pvt. Ltd. id18682 View details | India | Manufacturing / Engineering | — | |
|
Sanyo Special Steel India Pvt. Ltd.(India) |
|||||
| Ransomware | KHAZMODAN STUDIOS id18681 View details | Korea, Republic of | Other | — | |
|
KHAZMODAN STUDIOS(Korea) |
|||||
| Ransomware | MISR AL MAHABA HOSPITAL id18680 View details | Egypt | Healthcare / Pharma | — | |
|
MISR AL MAHABA HOSPITAL(Egypt) |
|||||
| Ransomware | Far East Consortium id18482 View details | Hong Kong | Other | — | |
|
Far East Consortium (Hong Kong) |
|||||
| Ransomware | Views: 17 id18480 View details | Other | — | ||
|
Views: 17 appears as an organization in the Other sector with a United States location in threat-intelligence victim listings. Publicly available intelligence does not provide reliable detail on its offerings, so it is best described generically as an entity operating outside a more specific industry classification. The listing is used as a catalog entry for ransomware monitoring rather than as proof of compromise or disclosure. Views: 17 was listed as a ransomware victim associated with nightspire. |
|||||
| Ransomware | Bridgewater Retirement Community id18481 View details | United States | Public Sector | ||
|
Bridgewater Retirement Community(United States) |
|||||
| Ransomware | Tanaka Electronics Taiwan Co.,LTD id18436 View details | Taiwan, Province of China | Services | — | |
|
Tanaka Electronics Taiwan Co.,LTD (Taiwan) |
|||||
| Ransomware | Waihong Environmental Services Limited id18435 View details | Hong Kong | Services | — | |
|
Waihong Environmental Services Limited (Hong Kong) |
|||||