Ransomware Group intelligence

Stormous

Active

Track Stormous with 262 published victims and 7 known leak locations in a single intelligence view.

Victims 262 Known published victims in this dataset
First discovered 2022-03-22 Earliest victim discovery date
Last discovered 2026-07-01 Latest victim discovery date
Inactive since 17 days Days since the latest known victim
Top country United States 27 victims
Known locations 7 Leak or negotiation infrastructure tracked

Overview

Stormous is tracked by Breach House as a ransomware group with 262 published victims.

United States is currently the most targeted country in this dataset.

7 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (7)

    Label Type Availability Links
    Leak location 1 Onion service Unknown 3slz4povugieoi3tw7sblxoowxhbzxeju427cffsst5fo2tizepwatid.onion
    Leak location 2 Onion service Unknown h3reihqb2y7woqdary2g3bmk3apgtxuyhx4j2ftovbhe3l5svev7bdyd.onion
    Leak location 3 Onion service Unknown pdcizqzjitsgfcgqeyhuee5u6uki6zy5slzioinlhx6xjnsw25irdgqd.onion
    Leak location 4 Onion service Unknown stmxylixiz4atpmkspvhkym4xccjvpcv3v67uh3dze7xwwhtnz4faxid.onion
    Leak location 5 Onion service Unknown pdcizqzjitsgfcgqeyhuee5u6uki6zy5slzioinlhx6xjnsw25irdgqd.onion
    Leak location 6 Onion service Unknown 6sf5xa7eso3e3vk46i5tpcqhnlayczztj7zjktzaztlotyy75zs6j7qd.onion
    Leak location 7 Onion service Unknown zib7duoiglvzvnpjs5faly6bio4xhwiby2lupsnxrkjnx46gmwdfyrid.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (262)

    Search, filter and paginate the victim timeline for Stormous. Showing 1–100 of 262.

    Type Target Discovered Country Business Category Intel Link
    Ransomware BN: higuchi-inc Report Error & Warning⁠ id30163 View details Japan Manufacturing / Engineering
    Ransomware BN: higuchi-inc Report Error & Warning⁠ id30163 View details Japan Manufacturing / Engineering
    Ransomware maglificioliliana.com UPDATE-FULL DATA DUMP FREE PART1 id30070 View details Retail / E-commerce
    Ransomware maglificioliliana.com UPDATE-FULL DATA DUMP FREE PART1 id30070 View details Retail / E-commerce
    Ransomware lorenzoni-store.com UPDATE-FULL DATA DUMP FREE PART1 id30071 View details Retail / E-commerce
    Ransomware lorenzoni-store.com UPDATE-FULL DATA DUMP FREE PART1 id30071 View details Retail / E-commerce
    Ransomware montechiaro-store.com UPDATE-FULL DATA DUMP FREE PART1 id30072 View details Retail / E-commerce
    Ransomware montechiaro-store.com UPDATE-FULL DATA DUMP FREE PART1 id30072 View details Retail / E-commerce
    Ransomware impulso-store.com UPDATE-FULL DATA DUMP FREE PART1 id30073 View details Retail / E-commerce
    Ransomware impulso-store.com UPDATE-FULL DATA DUMP FREE PART1 id30073 View details Retail / E-commerce
    Ransomware higuchi-inc.co.jp id30074 View details Japan Manufacturing / Engineering
    Ransomware higuchi-inc.co.jp id30074 View details Japan Manufacturing / Engineering
    Ransomware HIGUCHI USA, INC id30075 View details United States Manufacturing / Engineering
    Ransomware HIGUCHI USA, INC id30075 View details United States Manufacturing / Engineering
    Ransomware eogb.co.uk id30076 View details United Kingdom Energy
    Ransomware eogb.co.uk id30076 View details United Kingdom Energy
    Ransomware eshacloudqa.com id30077 View details United States IT
    Ransomware eshacloudqa.com id30077 View details United States IT
    Ransomware monoprix.tn id30078 View details Tunisia Retail / E-commerce
    Ransomware monoprix.tn id30078 View details Tunisia Retail / E-commerce
    Ransomware Official Statement: Protecting palatineschool.org Infrastructure id30079 View details United States Education
    Ransomware Official Statement: Protecting palatineschool.org Infrastructure id30079 View details United States Education
    Ransomware mlit.com.my UPDATE-FULL DATA DUMP NEW LINK 10GB id30008 View details Malaysia IT
    Ransomware mlit.com.my UPDATE-FULL DATA DUMP NEW LINK 10GB id30008 View details Malaysia IT
    Ransomware jaggroup.com UPDATE-FULL DATA DUMP NEW LINK id30009 View details United States IT
    Ransomware jaggroup.com UPDATE-FULL DATA DUMP NEW LINK id30009 View details United States IT
    Ransomware maglificioliliana.com id30010 View details Italy Retail / E-commerce
    Ransomware maglificioliliana.com id30010 View details Italy Retail / E-commerce
    Ransomware lorenzoni-store.com id30011 View details Italy Retail / E-commerce
    Ransomware lorenzoni-store.com id30011 View details Italy Retail / E-commerce
    Ransomware montechiaro-store.com id30012 View details Italy Retail / E-commerce
    Ransomware montechiaro-store.com id30012 View details Italy Retail / E-commerce
    Ransomware impulso-store.com id30013 View details Mexico Retail / E-commerce
    Ransomware impulso-store.com id30013 View details Mexico Retail / E-commerce
    Ransomware jaggroup.com UPDATE-FULL DATA DUMP id30074 View details IT
    Ransomware mlit.com.my UPDATE-FULL DATA DUMP 10GB id29999 View details Malaysia IT
    Ransomware mlit.com.my id29835 View details Malaysia Manufacturing / Engineering
    Ransomware katholiekamersfoort.nl UPDATE-FOR SALE id29700 View details Netherlands NGOs / Associations
    Ransomware sa2000.com UPDATE-FULL DATA DUMP id29701 View details IT
    Ransomware SA2000.COM id29597 View details Saudi Arabia IT
    Ransomware katholiekamersfoort.nl id29573 View details Netherlands NGOs / Associations
    Ransomware vspsolutions.com.au FULL DATA DUMP id29332 View details Australia Other
    Ransomware ttt.vn UPDATE-FULL DATA DUMP id29138 View details Viet Nam Public Sector
    Ransomware vspsolutions.com.au SAMPLE-FREE 20GB id29139 View details Australia Other
    Ransomware FANASA.COM UPDATE-FULL DATA DUMP id29071 View details Other
    Ransomware arc-reins.com + fidelityunited.ae UPDATE-FULL DATA DUMP id29072 View details United Arab Emirates Finance / Legal / Insurance
    Ransomware ams-group.co.uk FULL DATA DUMP 33GB id29001 View details United Kingdom Finance / Legal / Insurance
    Ransomware ttt.vn TTT Corporation id28826 View details Viet Nam Construction / Real Estate
    Ransomware or-technology.com id28788 View details Germany Healthcare / Medicine
    Ransomware FANASA.COM id28789 View details Mexico Healthcare / Pharma
    Ransomware cgcsa.co.za id28790 View details South Africa NGOs / Associations
    Ransomware Ministerio de Cultura de la Republica de Cuba - STORMOUS + GhostSec id28777 View details Cuba
    Ransomware Ministry of Energy and Mines (Cuba) - STORMOUS + GhostSec id28778 View details Cuba
    Ransomware www.kai.id (FF) id28779 View details Indonesia
    Ransomware Abelsantosyasoc.com.ar (FF) id28780 View details Argentina
    Ransomware calcomp.co.th id28781 View details Thailand
    Ransomware fractal id28782 View details GERMANY
    Ransomware transak id28783 View details United Kingdom Public Sector
    Ransomware uatf id28784 View details Bolivia, Plurinational State of Education
    Ransomware biodimed id28785 View details ECUADOR Other
    Ransomware ascires.com id28786 View details United Kingdom
    Ransomware vouch.co.uk id28787 View details United Kingdom
    Ransomware vouch.co.uk + KYC UK id28788 View details United Kingdom
    Ransomware Details of bank card data for over 50,000 Moroccan id28789 View details Morocco
    Ransomware Welcome to phish.pw id28790 View details
    Ransomware FRANCE TRAVAIL DATA BREACH - 2025 id28791 View details France
    Ransomware americanadecolchones id28792 View details Mexico
    Ransomware visioninksltd id28793 View details United Kingdom
    Ransomware Sincroslab Sas id28794 View details Italy
    Ransomware Important Announcement id28795 View details
    Ransomware bulentklise id28796 View details TURKEY
    Ransomware rinaldi id28797 View details CANADA
    Ransomware thewatermansarms id28798 View details United Kingdom
    Ransomware atolon-parkhotel id28799 View details Germany
    Ransomware Hy-Vee id28800 View details United States
    Ransomware crystalhotels id28801 View details TURKEY
    Ransomware jparkislandresort id28802 View details Singapore
    Ransomware regencyrestors id28803 View details United States
    Ransomware regencycountryclub id28804 View details United States
    Ransomware regencytorviscas id28805 View details SPAIN
    Ransomware enersolcr id28806 View details Costa Rica
    Ransomware acuity id28807 View details United States Other
    Ransomware VPN Access Sale id28808 View details
    Ransomware holidaypalace id28809 View details Macao
    Ransomware bkcolombia id28810 View details Colombia
    Ransomware arc-reins.com + fidelityunited.ae id28326 View details United Arab Emirates Finance / Legal / Insurance
    Ransomware www.goodmanmfg.com id24612 View details United States Communication / Marketing
    Ransomware www.futureal.hu id24611 View details Hungary Communication / Marketing
    Ransomware www.bkcolombia.org id24610 View details Colombia Communication / Marketing
    Ransomware www.holidaypalace.com id24609 View details Cambodia Communication / Marketing
    Ransomware ! id23734 View details Telecommunications
    Ransomware www.wilmar.co.id id23668 View details Indonesia Telecommunications
    Ransomware www.danareksa.com id23667 View details Indonesia Telecommunications
    Ransomware www.marjane.ma id23666 View details Morocco Retail / E-commerce
    Ransomware French Government id23416 View details France Public Sector
    Ransomware Volkswagen id23415 View details Germany Other
    Ransomware usbmemorydirect.com id23414 View details United States Communication / Marketing
    Ransomware www.sincroslab.com id23413 View details Spain Services
    Ransomware www.visioninksltd.in id23412 View details India Manufacturing / Engineering
    Ransomware www.americanadecolchones.com id23411 View details Colombia Telecommunications