Ransomware Group intelligence

Trigona

Inactive

Track Trigona with 49 published victims and 5 known leak locations in a single intelligence view.

BREACH HOUSE ALERTS

Want an alert every time a new ransomware post is published?

Choose the feeds and the countries you care about — we email you when they move.

Victims 49 Known published victims in this dataset

First discovered 2023-04-17 Earliest victim discovery date

Last discovered 2024-03-30 Latest victim discovery date

Inactive since 885 days Days since the latest known victim

Top country United States 8 victims

Known locations 5 Leak or negotiation infrastructure tracked

Trigona is tracked by Breach House as a ransomware group with 49 published victims.

United States is currently the most targeted country in this dataset.

5 known leak locations are currently associated with this group.

Top Countries

Distribution

Label	Type	Availability	Links
Leak location 2	Onion service	Down checked 1h ago	`6n5tfadusp4sarzuxntz34q4ohspiaya2mc6aw6uhlusfqfsdomavyyd.onion`
Leak location 4	Onion service	Down checked 1h ago	`krsbhaxbki6jr4zvwblvkaqzjkircj7cxf46qt3na5o5sj2hpikbupqd.onion`
Leak location 5	Onion service	Down checked 1h ago	`aeey7hxzgl6zowiwhteo5xjbf6sb36tkbn5hptykgmbsjrbiygv4c4id.onion`
Leak location 3	Onion service	Down checked 1h ago	`trigonax2zb3fw34rbaap4cqep76zofxs53zakrdgcxzq6xzt24l5lqd.onion`
Leak location 1	Onion service	Down checked 1h ago	`3x55o3u2b7cjs54eifja5m3ottxntlubhjzt6k6htp5nrocjmsxxh7ad.onion`

Communication / Marketing 11
Services 7
Healthcare / Pharma 6
IT 4
Construction / Real Estate 4
Manufacturing / Engineering 4
Finance / Legal / Insurance 3
Not identified 3
Energy 2
Hospitality / Food & Beverage / Tourism 1
Telecommunications 1
NGOs / Associations 1
Education 1
Retail / E-commerce 1

Typical Attacks (12)

▼

MITRE ATT&CK does not currently catalogue Trigona, so this is our assessment of the techniques it uses, drawn from public reporting. The techniques themselves, and every "what that means" definition below, come from MITRE ATT&CK v19.2. Confidence: medium. Treat it as orientation, not attribution.

T1059.001 PowerShell Execution

What they do: trigona uses PowerShell to execute malicious payloads and perform initial system modifications on compromised hosts.

What that means: Adversaries may abuse PowerShell commands and scripts for execution.
T1106 Native API Execution

What they do: trigona leverages native API calls to bypass detection and execute stealthy commands during lateral movement.

What that means: Adversaries may interact with the native OS application programming interface (API) to execute behaviors.
T1547.001 Registry Run Keys / Startup Folder PersistencePrivilege Escalation

What they do: trigona modifies registry run keys to establish persistence and ensure recurring execution after reboots.

What that means: Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key.
T1685 Disable or Modify Tools Defense Impairment

What they do: trigona disables antivirus tools and security software to prevent system recovery and hinder forensic analysis.

What that means: Adversaries may disable, degrade, or tamper with security tools or applications (e.g., endpoint detection and response (EDR) tools, intrusion detection systems (IDS), antivirus, logging agents, sensors, etc.) to impair or reduce visibility of defensive capabilities.
T1027.002 Software Packing Stealth

What they do: trigona applies software packing to obfuscate malicious binaries and evade signature-based detection.

What that means: Adversaries may perform software packing or virtual machine software protection to conceal their code.
T1070.004 File Deletion Stealth

What they do: trigona deletes Volume Shadow Copies and backup directories to eliminate recovery options for victims.

What that means: Adversaries may delete files left behind by the actions of their intrusion activity.
T1018 Remote System Discovery Discovery

What they do: trigona conducts remote system discovery to map network topology and identify high-value targets for encryption.

What that means: Adversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for Lateral Movement from the current system.
T1057 Process Discovery Discovery

What they do: trigona performs process discovery to identify critical system processes and services for targeted disruption.

What that means: Adversaries may attempt to get information about running processes on a system.
T1021.002 SMB/Windows Admin Shares Lateral Movement

What they do: trigona exploits SMB/Windows Admin Shares for lateral movement across networked systems within the victim environment.

What that means: Adversaries may use Valid Accounts to interact with a remote network share using Server Message Block (SMB).
T1486 Data Encrypted for Impact Impact

What they do: trigona encrypts victim files using strong symmetric cryptography to maximize impact and ransom demand leverage.

What that means: Adversaries may encrypt data on target systems or on large numbers of systems in a network to interrupt availability to system and network resources.
T1490 Inhibit System Recovery Impact

What they do: trigona invokes system recovery mechanisms to be inhibited, ensuring operational disruption and preventing restoration.

What that means: Adversaries may delete or remove built-in data and turn off services designed to aid in the recovery of a corrupted system to prevent recovery.
T1491.001 Internal Defacement Impact

What they do: trigona performs internal defacement by replacing victim files with ransom notes to demonstrate impact and pressure.

What that means: An adversary may deface systems internal to an organization in an attempt to intimidate or mislead users, thus discrediting the integrity of the systems.

Tools Observed (11)

▼

Software Trigona has been seen using, grouped by what it is used for. Legitimate administration tools appear here because these actors routinely abuse them — presence in this list is not itself malicious.

Credential theft

Mimikatz

Discovery & enumeration

Advanced Port Scanner SoftPerfect NetScan

Exfiltration

MEGA RClone

Offensive security tooling

Cobalt Strike

Remote monitoring & management

AnyDesk LogMeIn ScreenConnect Splashtop TeamViewer

Tool data from Ransomware Tool Matrix by BushidoUK, licensed CC BY 4.0. Grouped by purpose and matched to this group by Breach House.

Ransom Notes (1)

▼

The note this group leaves on a compromised machine. Click a filename to read it.

how_to_decrypt.hta txt · 8668 chars

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<html>
<title>ENCRYPTED</title>
<hta:application showInTaskBar="no" APPLICATION="yes" ICON='msiexec.exe' SINGLEINSTANCE='yes' SysMenu="no" applicationname="ENCRYPTED" border="thick" contexmenu="no" scroll="no" selection="yes" singleinstance="yes" windowstate="normal" MAXIMIZEBUTTON="NO" BORDER="DIALOG" width="100" height="100" MINIMIZEBUTTON="NO"></hta:application>
<script language="JavaScript">
  var authkey = '';
  var email = '[email protected]';
  var url = 'http://3x55o3u2b7cjs54eifja5m3ottxntlubhjzt6k6htp5nrocjmsxxh7ad.onion/';
  var vid = '[snip]';
  var cid = '[snip]';
  var uniqueid;

  function Start() {
    window.resizeTo(658,500);
    
    if (vid == '') {
      uniqueid = cid;
    } else {
      uniqueid = vid;
    }
  }
  function copytext(s) {
    window.clipboardData.setData("Text", s);
    alert('Auth Key copied to clipboard');
  };
  function openpage(url) {
    window.clipboardData.setData("Text", url);
    alert('URL copied to buffer. Open it in TOR Browser');
  }
  function help() {
    window.clipboardData.setData("Text", uniqueid);
    alert('If you have trouble with the main contacts, write to '+email+'. Your ID copied to buffer');
  }
  function document.onkeydown() {
    var alt = window.event.altKey;
    if (event.keyCode == 116 || event.keyCode == 27 || alt && event.keyCode == 115) {
      event.keyCode = 0;
      event.cancelBubble = true;
      return false;
    }
  }
  Start();
</script>

<body style="background: #ffffff; font: 12px 'Arial', sans-serif; padding: 0; margin: 0; overflow-x: hidden;" onload="Start();">
<textarea style="display: none" id="authkey">--START_OF_DATA--
[snip]
--END_OF_DATA--</textarea>
<div style="">
  <div style="width: 100%; height: 100%; position: absolute; top: 0; left: 0; box-sizing: border-box; padding: 0px; overflow-x: hidden;overflow-y: hidden; background-color: #ffffff;">
    
<div style="background-color: #A0031D; box-sizing: border-box; width: 100%; padding: 14px 0;">
      <div style="text-align: center; color: #ffffff; font-size: 25px; font-weight: 700; text-transform: uppercase;">the entire network is encrypted <br>your business is losing money</div>
    </div>

    <div style="background-color: #ffffff; width: 600px; padding: 20px; box-sizing: border-box;">
      <div style="margin-right: 18px; float: left; width: 31%;">
        <span style="float: left; font-weight: 700; color: #F80129; margin-right: 2px;">&#9650;</span>
        <div style="float: left; font-size: 12px; color: #000000; width: 170px;">All documents, databases, backups and other critical data were encrypted and leaked</div>
        <div style="clear: both; float: none; height: 18px; width: 100%;"></div>
      </div>

      <div style="margin-right: 18px; float: left; width: 31%;">
        <span style="float: left; font-weight: 700; color: #F80129; margin-right: 2px;">&#9650;</span>
        <div style="float: left; font-size: 12px; color: #000000; width: 170px;">The program uses a secure AES algorithm, which makes decryption impossible without contacting us</div>
        <div style="clear: both; float: none; height: 18px; width: 100%;"></div>
      </div>

      <div style="float: left; width: 31%;">
        <span style="float: left; font-weight: 700; color: #F80129; margin-right: 2px;">&#9650;</span>
        <div style="float: left; font-size: 12px; color: #000000; width: 160px;">If you refuse to negotiate, the data will be auctioned off</div>
        <div style="clear: both; float: none; height: 18px; width: 100%;"></div>
      </div>
      <div style="clear: both; float: none; height: 0px; width: 100%;"></div>

      <div style="border: 1px solid #e5e5e5; padding: 20px; box-sizing: border-box;">
        <div style="font-size: 14px; font-weight: 700; color: #000000; text-align: center;">To recover your data, please follow the instructions</div>

        <div style="margin-top: 10px;">
          <div style="float: left; margin-right: 10px; margin-left: 10px; width: 31%;">
            <div style="font-size: 40px; font-weight: bold; color: #e5e5e5; float: left; margin-right: 13px;">1</div>
            <div style="float: left; margin-top: 5px;">
              <div style="font-size: 12px; color: #5E5C5C; margin-bottom: 3px;">Download Tor Browser</div>
              <a href="https://www.torproject.org/dist/torbrowser/11.5.7/torbrowser-install-win64-11.5.7_en-US.exe" style="font-size: 14px; font-weight: 700; color: #0C94E0; text-decoration: none;" target="_blank">Download</a>
            </div>
            <div style="clear: both; float: none;"></div>
          </div>

          <div style="float: left; margin-right: 10px; margin-left: 10px; width: 31%;">
            <div style="font-size: 40px; font-weight: bold; color: #e5e5e5; float: left; margin-right: 13px;">2</div>
            <div style="float: left; margin-top: 5px;">
              <div style="font-size: 12px; color: #5E5C5C; margin-bottom: 3px;">Open decryption page</div>
              <a href="#" style="font-size: 14px; font-weight: 700; color: #0C94E0; text-decoration: none;" target="_blank" onclick="openpage(url); return false;">Copy</a>
            </div>
            <div style="clear: both; float: none;"></div>
          </div>

          <div style="float: left; margin-right: 10px; margin-left: 10px; width: 31%;">
            <div style="font-size: 40px; font-weight: bold; color: #e5e5e5; float: left; margin-right: 13px;">3</div>
            <div style="float: left; margin-top: 5px;">
              <div style="font-size: 12px; color: #5E5C5C; margin-bottom: 3px;">Auth using this key</div>
              <a href="#" style="font-size: 14px; font-weight: 700; color: #0C94E0; text-decoration: none;" onclick="copytext(authkey); return false;">Copy</a>
            </div>
            <div style="clear: both; float: none;"></div>
          </div>

          <div style="clear: both; float: none;"></div>
        </div>
      </div>

      <div style="margin-top: 18px; width: 100%;">
        <div style="float: left; font-size: 12px; color: #5E5C5C;">The price depends on how soon you will contact us</div>
        <a href="" style="float: right; font-size: 12px; color: #0C94E0; text-decoration: none;" onclick="help(); return false;">Need help?</a>
        <div style="clear: both; float: none;"></div>
      </div>
    </div>

    <div style="padding: 20px 30px; width: 600px; background-color: #f7f2f3; box-sizing: border-box;">
      <div style="float: left; margin-right: 21px;">
        <div style="float: left; font-size: 11px; color: #F80129; font-weight: 700; margin-right: 6px;">●</div>
        <div style="float: left; width: 110px;">
          <div style="font-size: 11px; font-weight: 700; color: #000000; margin-bottom: 2px; margin-top: 1px;">Don't doubt</div>
          <div style="font-size: 11px; color: #5E5C5C;">You can decrypt 3 files for free as a guarantee</div>
        </div>
      </div>

      <div style="float: left; margin-right: 27px;">
        <div style="float: left; font-size: 11px; color: #F80129; font-weight: 700; margin-right: 6px;">●</div>
        <div style="float: left; width: 103px;">
          <div style="font-size: 11px; font-weight: 700; color: #000000; margin-bottom: 2px; margin-top: 1px;">Don't waste time</div>
          <div style="font-size: 11px; color: #5E5C5C;">Decryption price increases every hour</div>
        </div>
      </div>

      <div style="float: left; margin-right: 27px;">
        <div style="float: left; font-size: 11px; color: #F80129; font-weight: 700; margin-right: 6px;">●</div>
        <div style="float: left;  width: 114px;">
          <div style="font-size: 11px; font-weight: 700; color: #000000; margin-bottom: 2px; margin-top: 1px;">Don't contact resellers</div>
          <div style="font-size: 11px; color: #5E5C5C;">They resell our services at a premium</div>
        </div>
      </div>

      <div style="float: left;">
        <div style="float: left; font-size: 11px; color: #F80129; font-weight: 700; margin-right: 6px;">●</div>
        <div style="float: left; width: 108px;">
          <div style="font-size: 11px; font-weight: 700; color: #000000; margin-bottom: 2px; margin-top: 1px;">Don't recover files</div>
          <div style="font-size: 11px; color: #5E5C5C;">Additional recovery software will damage your data</div>
        </div>
      </div>

      <div style="clear: both; float: none; height: 0px; width: 100%;"></div>
    </div>
  </div>
</div>
<script language="JavaScript">
authkey = document.getElementById('authkey').value;
</script>
</body>

</html>

View on RansomLook

Ransom-note text from RansomLook, licensed CC BY 4.0.

Victims (49)

Search, filter and paginate the victim timeline for Trigona. Showing 1–49 of 49.

Type	Target	Discovered	Country	Business Category	Intel Link
Ransomware	Claro id11460 View details	2024-03-30	Mexico	IT
Claro, a subsidiary of América Móvil, stands at the forefront of telecommunications innovation, recognizing the vital role of connectivity in shaping a better world. Originating from a public telephone company, Claro has evolved into a global connectivity, communication, and Information Technology solutions provider, driven by a commitment to continuous innovation and customer-centric services. ID 11460
Ransomware	South Star Electronics id11285 View details	2024-03-20	China	Communication / Marketing
South Star Electronics Co., Ltd. is a prominent electronics company based in Dongguan City, China. Specializing in the design, manufacturing, and distribution of electronic products, SouthStar Electronics has established itself as a leading player in the industry. ID 11285
Ransomware	Indoarsip id11256 View details	2024-03-16	Indonesia	Communication / Marketing
Indoarsip is a leading provider of archival solutions, dedicated to preserving and managing critical documents and records for organizations across Indonesia. With a strong presence in the archiving industry, Indoarsip offers comprehensive services and innovative technologies to meet the diverse needs of its clients. ID 11256
Ransomware	Bwizer id11255 View details	2024-03-16	Portugal	Communication / Marketing
Bwizer is a prominent entity known for its dedication to advancing the fields of healthcare and wellness education. With a stronghold in Portugal, Bwizer has emerged as a leading platform providing comprehensive educational resources and training programs tailored to professionals in the healthcare and wellness sectors. Founded with a vision to bridge the gap between traditional education and the evolving needs of modern healthcare practices, Bwizer offers a diverse range of courses, workshops, and events designed to empower professionals with the latest knowledge and skills. ID 11255
Ransomware	Topa Partners id11254 View details	2024-03-16	New Zealand	Construction / Real Estate
Topa Electrical, led by Electrical Inspector Jeff Zhao, boasts a rich legacy of over a decade in providing top-notch electrical services to the Canterbury region in New Zealand. With a steadfast commitment to excellence and a focus on building enduring relationships with clients, Topa Electrical has emerged as a trusted name in the industry. ID 11254
Ransomware	ATMCo id11236 View details	2024-03-15	United States	Services
ATMCo is a reputable tax management company based in Broken Arrow, Oklahoma. With a commitment to simplifying tax-related processes for businesses and individuals, ATMCo offers comprehensive services in tax preparation, bookkeeping, and accounting. Company is headquartered at 2220 W Houston St Ste A, Broken Arrow, Oklahoma. Situated in a convenient location, the company is easily accessible to clients seeking professional tax management services. ID 11236
Ransomware	Dinamic Oil id11022 View details	2024-02-28	Italy	Energy
Established in 1970, Dinamic Oil S.p.A. is a renowned Italian manufacturer specializing in hoisting winches and planetary gearboxes. With its headquarters in Modena, the company has flourished over the years, solidifying its position in the global market through three production units, eight subsidiaries across Europe, the Americas, and Asia, and an extensive network of distributors worldwide. ID 11022
Ransomware	Hotel Avenida, Hostal Espoz y Mina, Hostal Arriazu, Pension Alemana id11020 View details	2024-02-28	Spain	Hospitality / Food & Beverage / Tourism
Welcome to the Boutique Hospitality Collection, where every property offers a unique and unforgettable experience for guests seeking comfort, convenience, and charm. From the cosmopolitan streets of Lisbon to the historic city center of Pamplona, our collection of hotels and hostels promises exceptional accommodations and personalized service. ID 11020
Ransomware	America Movil id10842 View details	2024-02-14	Mexico	Telecommunications
América Móvil, S.A.B. de C.V. ("América Móvil" or "the Company") stands as one of the foremost telecommunications conglomerates globally, with its roots firmly planted in Mexico. Established in 2000, it emerged from the wireless operations spun off by Teléfonos de México, S.A.B. de C.V. ("Telmex"), a pivotal moment that marked its inception into the competitive telecommunications landscape. ID 10842
Ransomware	FALCO Electronics id10841 View details	2024-02-14	Mexico	Communication / Marketing
Founded in 1991, Falco Electronics is a prominent designer and manufacturer specializing in a diverse range of magnetic-based electronic components and assemblies. With operations established in the USA, Mexico, China, and India, Falco has been a key player in the industry for over three decades. Renowned for its ability to deliver effective solutions, Falco has earned the status of a preferred supplier in the power conversion, energy metering, and solar inverter sectors. ID 10841
Ransomware	Ausa id10623 View details	2024-01-31	Spain	Communication / Marketing
AUSA, established in 1956 by four visionary individuals driven by a passion for engines, has evolved into a global force in compact all-terrain machines. With a profound history and an expansive presence, the company boasts a network of 600 dealers, operating in 90 countries across five continents. ID 10623
Ransomware	Genesis Motors id10622 View details	2024-01-31	Australia	Communication / Marketing
Genesis Motors Isuzu UTE, situated in Lilydale, South East Melbourne, Victoria, stands as a premier Isuzu UTE dealership in Australia. Established initially in Ringwood in March 2011, Genesis Motors has rapidly grown under the leadership of Dealer Principal, Sumil Salgadoe, who began his journey with Isuzu UTE Australia in Brisbane in 2008. With a profound belief in the quality and reliability of Isuzu UTE products, Salgadoe ventured to establish Genesis Motors Isuzu UTE, offering the renowned Isuzu D-MAX UTE and Isuzu MU-X SUV. In response to the company's exponential growth in 2016, Genesis Motors expanded its office space, prompting a relocation to Lilydale, Victoria. ID 10622
Ransomware	CMG Drainage Engineering id10621 View details	2024-01-31	United States	Manufacturing / Engineering
Established in 1986, CMG Drainage Engineering stands as a prominent Civil Engineering consulting firm nestled in Tucson, Arizona, United States. For over three decades, CMG has been dedicated to providing exceptional water resource engineering services to both public and private sectors across Central and Southern Arizona. Strategically headquartered at 3555 North Mountain Avenue in Tucson, CMG oversees and manages a wide array of projects, offering comprehensive solutions tailored to meet the diverse needs of its clientele. ID 10621
Ransomware	Daher Contracting id10620 View details	2024-01-31	United States	Construction / Real Estate
Daher Contracting stands as the foremost excavation and site development contractor serving Okaloosa and Walton County. With roots dating back to January 1998, Daher has consistently upheld a commitment to delivering superior quality, cost-efficient results, and meeting even the most rigorous project schedules. ID 10620
Ransomware	Lomma Crane & Rigging id10602 View details	2024-01-29	United States	Services
J.F. Lomma, Inc. is a distinguished provider of crane services, offering a wide range of equipment and rigging solutions to meet the evolving needs of the construction industry. With a commitment to excellence and customer satisfaction, J.F. Lomma, Inc. strives to exceed expectations and build long-term relationships with clients. ID 10602
Ransomware	Samuel Sekuritas Indonesia & Samuel Aset Manajemen id10462 View details	2024-01-18	Indonesia	Finance / Legal / Insurance
PT Samuel Sekuritas Indonesia (SSI) is a prominent financial advisory company based in Jakarta, Indonesia. Established in 1992, the company operates as a full-service investment bank, offering a wide range of financial services to both institutional and retail clients. SSI adopts a selective approach in choosing its businesses and clients. ID 10462
Ransomware	Premier Facility Management id10461 View details	2024-01-18	United States	Communication / Marketing
Premier Facility Management (PFM) stands as a leader in sustainable green programs, offering customized and innovative solutions to meet the demands of today's environmentally conscious market. With a commitment to keeping it green, PFM specializes in sustainable by-product marketing, surplus material exchanges, and global outlets for recyclables. The company, founded in 1987, has built a highly reputable track record of donating reusable items to charity organizations. ID 10461
Ransomware	Fertility North id10460 View details	2024-01-18	Australia	Healthcare / Pharma
Fertility North, a leading fertility clinic, boasts a cohesive, multidisciplinary team of approximately 50 highly skilled and qualified staff. The collaborative approach of Fertility Doctors, Fertility Nurses, and Scientists, supported by Administration and Support staff, ensures that patients benefit from a wealth of combined knowledge and skill. Fertility North offers a comprehensive range of treatment options from its custom-designed, state-of-the-art facilities, strategically located away from the hustle and bustle of Perth's inner suburbs. The clinic's core values are deeply rooted in providing individualized care and guidance to patients, reflecting kindness, integrity, teamwork, and excellence. ID 10460
Ransomware	Vision Plast id10459 View details	2024-01-18	France	Manufacturing / Engineering
Founded in 2006, Vision Plast Group stands as a prominent player in the automotive, industrial, building, and home automation sectors. The group excels in providing comprehensive solutions for the automotive, construction, manufacturing, and home automation industries. With a focus on mono-material, bi-material, and over-molding injection molding products, Vision Plast Group has become synonymous with technical expertise and innovation. ID 10459
Ransomware	Alconex Specialty Products id9079 View details	2023-10-13		Communication / Marketing
No additional victim description available. ID 9079
Ransomware	FPZ id9060 View details	2023-10-12		Other
No additional victim description available. ID 9060
Ransomware	Flamingo Holland id8916 View details	2023-10-01	Netherlands	NGOs / Associations
Flamingo Holland is a Dutch-based flower company that specializes in growing, exporting, and wholesaling high-quality cut flowers, specifically, roses, peonies, tulips, and other seasonal flowers globally. The company was founded in 1985 and has since then become one of the leading flower companies in the Netherlands. ID 8916
Ransomware	Aria Care Partners id8915 View details	2023-10-01		Healthcare / Pharma
Aria Care Partners is a healthcare provider that offers post-acute care services to patients in Kansas. It was founded in 2016 and is headquartered in Overland Park, KS. Company specializes in post-acute care services such as transitional care, home health, and hospice care. It aims to provide customized care plans to help patients recover, regain independence, and improve their quality of life. ID 8915
Ransomware	Portesa id8914 View details	2023-10-01		Communication / Marketing
Portesa is a forward-thinking livestock company with a strong commitment to innovation, sustainability, and the circular economy. Company is dedicated to transforming raw materials into high-quality products directly at the source. The company operates in collaboration with Cartesa and Aire Sano, forming an integrated production process that sets the industry benchmark for product traceability throughout Europe. ID 8914
Ransomware	Grupo Boreal id8913 View details	2023-10-01		Healthcare / Pharma
Grupo Boreal plays a pivotal role in the healthcare industry, extending medical care to over 250,000 beneficiaries across thirteen provinces in the nation. Company is entrusted with the healthcare needs of over 11,000 residents in San Juan. It offers comprehensive coverage at competitive rates. ID 8913
Ransomware	Quest International id8912 View details	2023-10-01		Services
Quest International is a leading global post-sales service support partner for original equipment manufacturers (OEMs) across various industries, founded in 1982. Company offers services supporting OEM customers through depot repairs, field services, supply-chain logistics, and other professional services. ID 8912
Ransomware	Steelforce id8630 View details	2023-09-15		Manufacturing / Engineering
No additional victim description available. ID 8630
Ransomware	Cedar Holdings id8606 View details	2023-09-13		Other
No additional victim description available. ID 8606
Ransomware	Unimed id8488 View details	2023-09-05	Brazil	Other
No additional victim description available. ID 8488
Ransomware	Cyberport id8487 View details	2023-09-05	Germany	IT
No additional victim description available. ID 8487
Ransomware	Public Health Management Corporation id6767 View details	2023-06-06		Healthcare / Pharma	—
Public Health Management Corporation (PHMC) is a non-profit organisation providing public health services in Philadelphia, Pennsylvania. It was established in 1972 and has since served as a leading provider of comprehensive health and human services to individuals, families, and communities in the area. ID 6767
Ransomware	Pacific Union College id6687 View details	2023-05-30		Education	—
Pacific Union College (PUC) is a private, Seventh-day Adventist college located in Angwin, California. It was established in 1882 and is accredited by the WASC Senior College and University Commission. ID 6687
Ransomware	Marshall Construction Ltd id6639 View details	2023-05-26		Construction / Real Estate
Marshall Construction Ltd is a construction company established in 1995. The company is committed to providing high-quality and innovative construction services to its clients. At Marshall Construction Ltd, the emphasis is on building relationships and delivering quality projects. ID 6639
Ransomware	Leidos id6628 View details	2023-05-25		IT	—
Leidos Holdings, Inc. is an American defense, aviation, information technology, biomedical research, and engineering company. ID 6628
Ransomware	Technology and Telecommunications Consultants Inc id6495 View details	2023-05-22		IT	—
Technology and Telecommunications Consultants Inc (TTC) is a US-based consulting firm that specializes in providing technology and telecommunications solutions to businesses across different industries. ID 6495
Ransomware	Rolser id6472 View details	2023-05-19		Retail / E-commerce	—
Rolser is a Spanish company that manufactures and sells a wide range of shopping trolleys, bags, and accessories. The company was founded in 1965 and has since then become a popular brand among customers who prioritize functionality, convenience, and style. ID 6472
Ransomware	Lolaico Impianti id6462 View details	2023-05-18	Italy	Manufacturing / Engineering	—
Lolaico Impianti is a leading engineering and construction company based in Italy. It was founded in 1975 by Pietro Lolaico ID 6462
Ransomware	Feit Electric id6449 View details	2023-05-16	United States	Energy	—
Feit Electric is a leading lighting manufacturer and distributor in California, United States known for its energy-efficient and high-quality LED lighting solutions. ID 6449
Ransomware	Accudo Investments LTD id6441 View details	2023-05-15	United Kingdom	Finance / Legal / Insurance	—
Accudo Investments LTD is a private limited company registered in the United Kingdom. It specializes in providing financial and investment services to its clients. ID 6441
Ransomware	TTCCPA id6432 View details	2023-05-13		Services	—
Treadwell Tamplin is an accounting firm that provides a range of financial services to individuals and businesses in the San Francisco Bay area. The company's team of accounting and tax professionals has extensive knowledge in their respective fields and is committed to delivering personalized services to their clients. ID 6432
Ransomware	Axiom Professional Solutions id6404 View details	2023-05-11		Services
Axiom Professional Solutions providing comprehensive recruiting, placement and staffing services for a variety of positions within the automotive industry and light industrial sectors. ID 6404
Ransomware	Fresh Insurance IT Services id6376 View details	2023-05-09		Services	—
Fresh Insurance IT Services is a UK-based company that specializes in providing innovative technology solutions for the insurance industry. The company’s portfolio of services includes insurance software development, web and mobile application development, IT consulting and outsourcing, and digital marketing services. ID 6376
Ransomware	Treadwell, Tamplin & Company, Certified Public Accountants, Madison, GA id6167 View details	2023-04-18		Services
Treadwell Tamplin is an accounting firm that provides a range of financial services to individuals and businesses in the San Francisco Bay area. The company's team of accounting and tax professionals has extensive knowledge in their respective fields and is committed to delivering personalized services to their clients. With their expertise and dedication, Treadwell Tamplin helps businesses and individuals achieve their financial goals. By acquiring this company's confidential data, you will get access to valuable information that can help you grow your business. You will learn about the company's strategies, strengths, weaknesses, opportunities and threats. You will also discover the needs, pain points, motivations and behaviors of its customers. You will be able to use this information to create better products and services, target the right prospects, craft compelling sales pitches and close more deals. ID 6167
Ransomware	McKinney Trailers id6150 View details	2023-04-17	United States	Communication / Marketing
McKinney Trailers is a leading transportation equipment and trailer manufacturer in the United States. The company operates several manufacturing plants and retail locations across the United States, providing customers with easy access to their products and services. Their diverse range of products includes dry and refrigerated trailers, flatbed and drop-deck trailers, intermodal chassis, and specialty trailers. ID 6150
Ransomware	Albany Clinic id6151 View details	2023-04-17	Australia	Healthcare / Pharma
Albany Clinic is a medical center that provides family doctors, specialists, speciality services, diagnostic services and walk-in clinic in Australia. It offers a range of services such as general practice, skin cancer checks, travel medicine, immunisations and more. It has been serving the community for 30 years and prides itself on providing medical care with experience, empathy, understanding and consistency. ID 6151
Ransomware	Office Notarial de Baillargues id6152 View details	2023-04-17	France	Finance / Legal / Insurance
L’Office Notarial de Baillargues is a notarial office that provides legal advice and services in various fields of law, such as family and inheritance law, urban planning and construction law, rural and agricultural law, etc. It was founded in 1976 and is located in Baillargues, a commune in the Montpellier Métropole in southern France. ID 6152
Ransomware	Winter Park Construction id6153 View details	2023-04-17	United States	Construction / Real Estate
Winter Park Construction (WPC) is a well-established company that has been providing general contractor, pre-construction, construction management and renovation services to Central Florida and the southeast United States since 1974. With over $200M in projects set for completion in 2020 and employment for 140+ full-time employees, WPC has established itself as a leader in the construction industry. ID 6153
Ransomware	Amouage id6154 View details	2023-04-17	Oman	Communication / Marketing
Amouage is a High Perfumery House renowned for creating some of the most finely crafted perfumes in the world. Founded in the Sultanate of Oman in 1983 to be ‘The Gift of Kings’, the House has redefined the Arabian art of perfumery and garnered a global reputation for bringing innovative modernity and true artistry to all its creations. Masterfully paying tribute to its heritage, Amouage is a unique fusion of East meets West that defines avant-garde opulence. It expresses the contemporary majesty of Oman - a historic trading center for incense and myrrh - around the globe, with arresting and alluring collections that speak to a sophisticated, confident and well-traveled discerning clientele who seek something compellingly precious, extraordinary and personal, every day. ID 6154
Ransomware	Unique Imaging id6155 View details	2023-04-17		Healthcare / Pharma
Unique Technology, Unique Care. We are proud to offer the latest and greatest in innovative medical imaging services, delivering the fastest and most convenient imaging results, unmatched in South Florida, Latin America and the Caribbean. Our new medical diagnostic imaging equipment can detect pathology and track the effectiveness of treatment that your physician has prescribed. When looking for the right medical imaging or radiology services, look no further than Unique Imaging. 2 Medical imaging centers in Miami conveniently located in Aventura and Miami Beach. Unique Imaging focuses on advance radiology including MRI, CT, US, PET/CT, MRA, CTA, & Echo. Our advanced medical imaging equipment and talented team make us the preferred center for referring physicians. ID 6155

Trigona

Overview