Ransomware Group intelligence
Vortex
ActiveTrack Vortex with 14 published victims and 1 known leak locations in a single intelligence view.
BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Overview
Vortex is tracked by Breach House as a ransomware group with 14 published victims.
United States is currently the most targeted country in this dataset.
1 known leak locations are currently associated with this group.
Leak Status Distribution
14
- Leaked 2 14.3%
- Pending 12 85.7%
- Deleted 0 0.0%
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (1)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 1 | Onion service | Up checked 37m ago | zyz6phauvraxghujxmecpwzlg34gtogybb4wzcmw6pvps5m2nzvsriid.onion |
Top Activity Sectors (8)
Victims (14)
Search, filter and paginate the victim timeline for Vortex. Showing 1–14 of 14.
| Type | Target | Discovered | Country | Business Category | Intel Link | Leak status |
|---|---|---|---|---|---|---|
| Ransomware | Scripps id38666 View details | United States | Services | pending | ||
|
Type: FULL Patient clinical records and PHI, physician credentialing files, workforce timekeeping and leave records, emergency notification and contact data, legal-hold an... |
||||||
| Ransomware | Storage Mart id38668 View details | United States | Retail / E-commerce | pending | ||
|
Type: FULL Massive tenant PII exposure at scale: tens of thousands of rental agreements containing names, addresses, ID and driver's-license copies and payment data, plus... |
||||||
| Ransomware | Air Communities id38669 View details | United States | Services | pending | ||
|
Type: DATA accounts payable/receivable, audited financials FY2006–FY2013, TRS restructuring, total ownership summaries, disposition closing CDs, debt documents, per-proper... |
||||||
| Ransomware | Karlstorz id38670 View details | Germany | null | pending | ||
|
Type: FULL Surgical-device R&D and product design files, regulatory and quality documentation, thousands of hospital and vendor contracts, tens of thousands of mail export... |
||||||
| Ransomware | Andersen Construction id38671 View details | United States | Construction / Real Estate | pending | ||
|
Type: FULL ════════════════════════════════════════════════════════════════ ANDERSEN CONSTRUCTION — CONSOLIDATED FINANCIALS Sources: SLT Meeting Financial Update (07-08-... |
||||||
| Ransomware | SimonMed id38672 View details | United States | Healthcare / Pharma | pending | ||
|
Type: FULL Imaging-center operations: tens of thousands of mailbox exports, patient scheduling and imaging-adjacent documents, HR, insurance and vendor files. |
||||||
| Ransomware | El Camino Health id38674 View details | United States | Healthcare / Pharma | pending | ||
|
Type: FULL Severe healthcare exposure: tens of thousands of patient clinical records and PHI, physician credentialing files with licensure and identity documents, employee... |
||||||
| Ransomware | SOLENIS id38676 View details | United States | IT | leaked | ||
|
SOLENIS — full corporate data dump 1.65 TB · 58,249 files · 336,782,341 CRM records · 20.9 billion Foundry rows · captured October 2026 SOLENIS - - Cu... |
||||||
| Ransomware | ARTHREX id38678 View details | United States | IT | leaked | ||
|
MORE TIERS WILL RELEASE |
||||||
| Ransomware | SAMTEC id38680 View details | United States | Manufacturing / Engineering | pending | ||
|
[AI generated] Samtec, Inc. is a privately held American manufacturer specializing in electronic interconnect solutions, including connectors, cables, and high-speed data transmission components. Founded in 1976, it serves industries such as telecommunications, aerospace, defense, automotive, medical, and computing. Headquartered in New Albany, Indiana, United States, Samtec operates globally with manufacturing facilities and sales offices across multiple countries, supporting electronics and technology sectors. |
||||||
| Ransomware | BOZZUTO id38682 View details | United States | Other | pending | ||
|
[AI generated] Bozzuto is a U.S.-based real estate company headquartered in Greenbelt, Maryland. It operates across the residential property sector, providing services including property management, development, construction, acquisitions, and homebuilding. The company manages a large portfolio of apartment communities across the United States, serving residents, investors, and property owners primarily in major metropolitan markets along the East Coast and beyond. |
||||||
| Ransomware | CRESA id38683 View details | United States | Services | pending | ||
|
Deadline: 2026-11-12T23:18:56Z |
||||||
| Ransomware | ALEXION id38685 View details | United States | Healthcare / Pharma | pending | ||
|
Deadline: 2026-11-12T23:18:56Z |
||||||
| Ransomware | PYRAMID HEALTHCARE id38687 View details | United States | Healthcare / Pharma | pending | ||
|
Deadline: 2026-11-12T23:18:56Z |
||||||