Ransomware Group intelligence
THE SEVEN DEADLY SINS
ActiveTrack THE SEVEN DEADLY SINS with 8 published victims and 1 known leak locations in a single intelligence view.
BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Overview
THE SEVEN DEADLY SINS is tracked by Breach House as a ransomware group with 8 published victims.
United States is currently the most targeted country in this dataset.
1 known leak locations are currently associated with this group.
Leak Status Distribution
8
- Leaked 0 0.0%
- Pending 8 100.0%
- Deleted 0 0.0%
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (1)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 1 | Onion service | Up checked 1h ago | sinsp6ibw32abbcoagbjwetgm2w56u7tr4izy3xzp7ehqoenxvdd3qyd.onion |
Top Activity Sectors (3)
- IT 5
- Retail / E-commerce 2
- Services 1
Victims (8)
Search, filter and paginate the victim timeline for THE SEVEN DEADLY SINS. Showing 1–8 of 8.
| Type | Target | Discovered | Country | Business Category | Intel Link | Leak status |
|---|---|---|---|---|---|---|
| Ransomware | Cradlewise Inc. id34548 View details | United States | Retail / E-commerce | pending | ||
|
Cradlewise Inc. cradlewise.com SOLD · IoT / consumer VC-backed smart crib manufacturer; ~$14M/yr DTC revenue plus Nurture subscription layer. SOLD COMPANY VALUE $26M raised · ~$14M/yr rev ROWS EXFILTRATED 3.2M+ AFFECTED 43K baby registries · parent emails · home addresses · baby names & DOB · IoT device private keys · Klaviyo/Shopify · COPPA ARCHIVE SOLD Data sold to private buyer SOLD |
||||||
| Ransomware | Globeia Inc. id34550 View details | United States | IT | pending | ||
|
Globeia Inc. globeia.com SOLD · compliance / background checks Document-processing platform for FBI clearance, RCMP criminal records, and Canadian corporate screening via portal.globeia.app. SOLD COMPANY VALUE $2.0M est. ROWS EXFILTRATED 920K+ AFFECTED FBI/RCMP applicants · SSN · passport paths · bank details · 587K file records · Strapi admin tokens ARCHIVE SOLD Data sold to private buyer SOLD |
||||||
| Ransomware | Canva id34553 View details | Australia | IT | pending | ||
|
Canva canva.com SOLD · design / SaaS Global design platform; entire Salesforce org plus platform data warehouse export. SOLD COMPANY VALUE ~$40B val ROWS EXFILTRATED 200M+ AFFECTED Salesforce CRM 2M+ records · enterprise license orders · user seats · billing PDFs · warehouse tables ARCHIVE SOLD Data sold to private buyer SOLD |
||||||
| Ransomware | Hospital Sírio-Libanês id34556 View details | Brazil | IT | pending | ||
|
Hospital Sírio-Libanês hsl.org.br Company value$750M est. Rows exfiltrated3.5M+ AffectedAppointments · telessaúde · PROADI · DATASUS · FHIR patients · SOAP notes · LGPD PHI No contact · 72h |
||||||
| Ransomware | Verano Holdings id34558 View details | United States | Retail / E-commerce | pending | ||
|
Verano Holdings verano.com Publishing soon · cannabis / retail |
||||||
| Ransomware | Harness Inc. id34561 View details | United States | IT | pending | ||
|
Harness Inc. harness.io TBD · DevOps / CI-CD Enterprise continuous delivery platform; entire Salesforce org with global prospect and customer pipeline. Notified · no response COMPANY VALUE ~$5B val ROWS EXFILTRATED 2.5M+ AFFECTED Salesforce leads/contacts · emails · phones · titles · LinkedIn · MQL/SDR notes · deployment metadata COUNTDOWN · 48H WINDOW 00 D : 00 H : 00 M : 00 S Contact or pay before deadline · INFORMATION.txt on archive node 48h to contact · sample |
||||||
| Ransomware | iHeartJane id34564 View details | United States | Services | pending | ||
|
iHeartJane iheartjane.com TBD · cannabis marketplace Leading cannabis e-commerce marketplace connecting dispensaries, brands, and POS integrations nationwide. Notified · no response COMPANY VALUE $400M+ raised ROWS EXFILTRATED 19M+ AFFECTED Entire Salesforce dump · Case/Contact/Account · dispensary emails · phones · store locations · SKU catalog COUNTDOWN · 48H WINDOW 00 D : 00 H : 00 M : 00 S Contact or pay before deadline · INFORMATION.txt on archive node 48h to contact · sample |
||||||
| Ransomware | CureMetrix, Inc. id34669 View details | United States | IT | pending | ||
|
curemetrix.com operates within the IT sector and is situated in the United States. The entity is documented in the threat-intelligence index under the listing type ransomware victim, specifically associated with THE SEVEN DEADLY SINS as the identified threat actor or source. This classification reflects the entity's inclusion in ransomware incident tracking data connected to this actor group. No specific incident details, such as data stolen, ransom demands, or breach confirmation, are elaborated here to maintain factual neutrality. The entry serves to catalog the relationship between curemetrix.com and THE SEVEN DEADLY SINS within cybersecurity intelligence frameworks. |
||||||