Ransomware Group intelligence

Storm

Active

Track Storm with 105 published victims and 1 known leak locations in a single intelligence view.

BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Victims 105 Known published victims in this dataset
First discovered 2026-08-07 Earliest victim discovery date
Last discovered 2026-09-21 Latest victim discovery date
Inactive since 1 days Days since the latest known victim
Top country United States 77 victims
Known locations 1 Leak or negotiation infrastructure tracked

Overview

Storm is tracked by Breach House as a ransomware group with 105 published victims.

United States is currently the most targeted country in this dataset.

1 known leak locations are currently associated with this group.

Leak Status Distribution

  • Leaked 24 37.5%
  • Pending 40 62.5%
  • Deleted 0 0.0%

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (1)

    Label Type Availability Links
    Leak location 1 Onion service Up checked 12h ago yqhecvqtdvq6p7duqcgw2qca77spbgakxcoibtx6zpvfshltsbbbhfqd.onion

    Top Activity Sectors (13)

    Victims (105)

    Search, filter and paginate the victim timeline for Storm. Showing 1–100 of 105.

    Type Target Discovered Country Business Category Intel Link Leak status
    Ransomware The Money Store id33026 View details United States Finance / Legal / Insurance pending
    Ransomware TrueCore Behavioral Solutions id33027 View details United States IT pending
    Ransomware Manroc Developments id33028 View details Canada Construction / Real Estate pending
    Ransomware American Casting Company id32951 View details United States Manufacturing / Engineering pending
    Ransomware Johnson Investment Counsel id32952 View details United States Finance / Legal / Insurance pending
    Ransomware First Secure Community Bank id32953 View details United States Finance / Legal / Insurance pending
    Ransomware The State Bank id32954 View details United States Finance / Legal / Insurance pending
    Ransomware First Secure Bank and Trust id32955 View details United States Finance / Legal / Insurance pending
    Ransomware McCarthy Tire Service id32858 View details United States Manufacturing / Engineering pending
    Ransomware PANTHERx Rare id32859 View details United States Retail / E-commerce pending
    Ransomware Insight Credit Union id32860 View details United States Finance / Legal / Insurance pending
    Ransomware Technology Dynamics id32704 View details United States pending
    Ransomware Technology Dynamics id32704 View details United States pending
    Ransomware Flexmaster id32705 View details Canada IT pending
    Ransomware Flexmaster id32705 View details Canada IT pending
    Ransomware Lowerys id32706 View details Canada null pending
    Ransomware Lowerys id32706 View details Canada null pending
    Ransomware Melitron id32707 View details Canada Manufacturing / Engineering pending
    Ransomware Melitron id32707 View details Canada Manufacturing / Engineering pending
    Ransomware Petrocare Construction id32436 View details Canada Construction / Real Estate leaked
    Ransomware Petrocare Construction id32436 View details Canada Construction / Real Estate leaked
    Ransomware Star Aviation, Inc id32437 View details United States Manufacturing / Engineering pending
    Ransomware Star Aviation, Inc id32437 View details United States Manufacturing / Engineering pending
    Ransomware GSAC Auto Financing id32438 View details United States Finance / Legal / Insurance pending
    Ransomware GSAC Auto Financing id32438 View details United States Finance / Legal / Insurance pending
    Ransomware GSAC id32439 View details United States Other pending
    Ransomware GSAC id32439 View details United States Other pending
    Ransomware Superior Ag id32440 View details United States pending
    Ransomware Superior Ag id32440 View details United States pending
    Ransomware Chicago Partners Wealth Advisors id32441 View details United States Finance / Legal / Insurance pending
    Ransomware Chicago Partners Wealth Advisors id32441 View details United States Finance / Legal / Insurance pending
    Ransomware Macquarrie id32442 View details Australia Manufacturing / Engineering leaked
    Ransomware Macquarrie id32442 View details Australia Manufacturing / Engineering leaked
    Ransomware SITES Medical id32443 View details United States Healthcare / Pharma leaked
    Ransomware SITES Medical id32443 View details United States Healthcare / Pharma leaked
    Ransomware Agrimac id32210 View details Australia Agriculture / Food pending
    Ransomware Agrimac id32210 View details Australia Agriculture / Food pending
    Ransomware Sprachakademie Rhein-Ruhr id32211 View details Germany Education pending
    Ransomware Sprachakademie Rhein-Ruhr id32211 View details Germany Education pending
    Ransomware Otto Sieve GmbH id32212 View details Germany Manufacturing / Engineering pending
    Ransomware Otto Sieve GmbH id32212 View details Germany Manufacturing / Engineering pending
    Ransomware ITD Informations technologie id32213 View details Germany Retail / E-commerce pending
    Ransomware ITD Informations technologie id32213 View details Germany Retail / E-commerce pending
    Ransomware Our Hospice Of South Central Indiana id32214 View details United States Healthcare / Pharma leaked
    Ransomware Our Hospice Of South Central Indiana id32214 View details United States Healthcare / Pharma leaked
    Ransomware National Salvage id32215 View details United States Transportation / Travel / Logistics leaked
    Ransomware National Salvage id32215 View details United States Transportation / Travel / Logistics leaked
    Ransomware Sharp Motor Group id32063 View details Australia Manufacturing / Engineering leaked
    Ransomware Sharp Motor Group id32063 View details Australia Manufacturing / Engineering leaked
    Ransomware City of Mitchell id32064 View details United States Public Sector leaked
    Ransomware City of Mitchell id32064 View details United States Public Sector leaked
    Ransomware Ruggles Sign Company id32014 View details United States Services pending
    Ransomware Ruggles Sign Company id32014 View details United States Services pending
    Ransomware AutoDie id32015 View details United States IT leaked
    Ransomware AutoDie id32015 View details United States IT leaked
    Ransomware Proveli id32016 View details United States IT leaked
    Ransomware Proveli id32016 View details United States IT leaked
    Ransomware Pinnacle Hospital id32017 View details United States Healthcare / Pharma leaked
    Ransomware Pinnacle Hospital id32017 View details United States Healthcare / Pharma leaked
    Ransomware Phoenix Group of Companies id32018 View details United States Manufacturing / Engineering leaked
    Ransomware Phoenix Group of Companies id32018 View details United States Manufacturing / Engineering leaked
    Ransomware Schardein Mechanical id32019 View details United States Agriculture / Food leaked
    Ransomware Schardein Mechanical id32019 View details United States Agriculture / Food leaked
    Ransomware The Cecilian Bank id32020 View details United States Finance / Legal / Insurance leaked
    Ransomware The Cecilian Bank id32020 View details United States Finance / Legal / Insurance leaked
    Ransomware American Contractors Insurance Group id31916 View details United States leaked
    Ransomware Valor Defense Solutions, Inc id31815 View details United States pending
    Ransomware Standard Tool & Die id31816 View details United States pending
    Ransomware Westco Motors Cairns id31817 View details Australia pending
    Ransomware WindRose Health Network id31818 View details United States pending
    Ransomware Penfold id31819 View details United Kingdom leaked
    Ransomware Ramsey Bros id31820 View details Australia leaked
    Ransomware Hinman Straub id31697 View details United States Finance / Legal / Insurance leaked
    Ransomware Hinman Straub id31697 View details United States Finance / Legal / Insurance leaked
    Ransomware 3-point Australia id31698 View details Australia pending
    Ransomware Rood & Riddle Equine Hospital id31699 View details United States pending
    Ransomware Canadian Mental Health Association id31700 View details Canada pending
    Ransomware Tapper Cuddy LLP id31701 View details Canada leaked
    Ransomware Integra Castings id31702 View details Canada leaked
    Ransomware Southern Metals Company id31703 View details United States pending
    Ransomware Southern Metals id31523 View details United States Manufacturing / Engineering pending
    Ransomware Southern Metals id31523 View details United States Manufacturing / Engineering pending
    Ransomware TRP International id31524 View details United States Transportation / Travel / Logistics pending
    Ransomware TRP International id31524 View details United States Transportation / Travel / Logistics pending
    Ransomware Supportive Insurance Services id31525 View details United States IT pending
    Ransomware Supportive Insurance Services id31525 View details United States IT pending
    Ransomware United Group of Companies id31475 View details United States Other pending
    Ransomware United Group of Companies id31475 View details United States Other pending
    Ransomware Sawyer Savings Bank id31476 View details United States Finance / Legal / Insurance pending
    Ransomware Sawyer Savings Bank id31476 View details United States Finance / Legal / Insurance pending
    Ransomware Pioneer Bank id31463 View details United States IT pending
    Ransomware Pioneer Bank id31463 View details United States IT pending
    Ransomware NCA Alarms id31398 View details United States IT leaked
    Ransomware NCA Alarms id31398 View details United States IT leaked
    Ransomware Nelson Manufacturing id31399 View details United States Transportation / Travel / Logistics leaked
    Ransomware Nelson Manufacturing id31399 View details United States Transportation / Travel / Logistics leaked
    Ransomware Southern Indiana Radiological Associates id31400 View details United States Healthcare / Pharma leaked
    Ransomware Southern Indiana Radiological Associates id31400 View details United States Healthcare / Pharma leaked
    Ransomware Liberty Healthcare Corporation id31401 View details United States Healthcare / Pharma leaked
    Ransomware Liberty Healthcare Corporation id31401 View details United States Healthcare / Pharma leaked