abyss-data
ransomware group · aka Abyss Locker, AbyssLocker · unknown (vendor analysis has reported code-level ties to the HelloKitty ransomware family, but no public attribution to a country or named operators) · active since 2023 (first documented in vendor research); leak site tracked by this dashboard since 2026-08-26
Abyss Locker, tracked on this dashboard as 'abyss-data', is a ransomware and data-extortion operation first documented by vendor research in 2023, known for encryptors spanning Windows, Linux, and VMware ESXi environments. Trend Micro's 2023 analysis reported code overlap with the older HelloKitty family, and vendor, industry, and press reporting through 2024 highlighted attacks on virtualization, network-attached storage, and food and agriculture targets, including Taylor Farms and Moon Valley Nurseries. The group practices double extortion, publishing victims and stolen data on a Tor leak site; no ransom demands or payment totals have been publicly confirmed. Its leak-site listings skew toward mid-sized organizations across manufacturing, healthcare, real estate, and local government in multiple countries, including several US and German victims. Current activity is low: this dashboard recorded a single new victim since tracking began on 2026-08-26 (last post 2026-08-26), though the site lists roughly a dozen victims in total.
- Multi-platform encryptors covering Windows, Linux, and VMware ESXi (vendor research, 2023)
- ESXi attacks reportedly shut down running virtual machines before encrypting datastores (Trend Micro, 2023)
- Reported targeting of network-attached storage (NAS) devices (vendor research, 2023)
- Double extortion: data theft plus encryption, with victims and stolen files published on a Tor leak site
- Code overlap with the HelloKitty ransomware family indicates shared or recycled tooling (Trend Micro, 2023)
- Opportunistic targeting of mid-sized organizations; 2024 industry alerts and press reporting flagged attacks on the food and agriculture sector
Moon Valley Nurseries (US nursery chain; reported Abyss Locker victim per 2024 press/industry reporting), Taylor Farms (US fresh-produce supplier; reported Abyss Locker victim per 2024 press/industry reporting), MEMSIC (semiconductor sensor maker; leak-site listing), Sitoy Group (Hong Kong-listed leather goods manufacturer; leak-site listing), The Moinian Group (New York real estate developer; leak-site listing), Crown Laboratories (US skincare company; leak-site listing), ENT & Allergy Associates (New York-area physician group; leak-site listing), Landkreis Limburg-Weilburg (German district administration; leak-site listing), Technic Inc. (specialty chemicals; leak-site listing)
No public figure.
Leak-site victims92 posts · newest first
| Victim | Discovered | Details |
|---|---|---|
| MEMSIC | · 20d ago | memsic.com |
| School Facility Consultants | · Jun 1, 2026 | s-f-c.org 1.3Tb uncompressed data |
| landkreis-limburg-weilburg.de | · Jun 1, 2026 | landkreis-limburg-weilburg.de 132Gb uncompressed data |
| technic.com | · May 14, 2026 | technic.com |
| thinlinetech.com | · Feb 26, 2026 | thinlinetech.com 29Gb uncompressed data |
| sitoy.com | · Jan 26, 2026 | sitoy.com 1.7Tb uncompressed data |
| dillonyarn.com | · Dec 10, 2025 | dillonyarn.com 117Gb uncompressed data |
| optimumdesign.com | · Sep 22, 2025 | optimumdesign.com 795Gb uncompressed data |
| moinian.com | · Sep 11, 2025 | moinian.com 4.7Tb uncompressed data |
| hptc.org | · Jul 26, 2025 | hptc.org 1.8Tb uncompressed data |
| crownlaboratories.com | · Apr 2, 2025 | crownlaboratories.com 8Tb uncompressed data |
| entandallergy.com | · Mar 28, 2025 | entandallergy.com 139Gb uncompressed data |
| mdm-insurance.com | · Mar 15, 2025 | mdm-insurance.com 2Tb uncompressed data |
| ceratec.com | · Mar 3, 2025 | ceratec.com 700Gb uncompressed data |
| halex.com | · Feb 15, 2025 | halex.com 39Gb uncompressed data |
| Four Eye Clinics | · Feb 2, 2025 | 313Gb uncompressed data |
| jpcgroupinc.com | · Feb 2, 2025 | jpcgroupinc.com 178Gb uncompressed data |
| envirosep.com | · Jan 25, 2025 | envirosep.com 304Gb uncompressed data |
| kingpower.com | · Jan 8, 2025 | kingpower.com 1.2Tb uncompressed data |
| berkotfoods.com | · Dec 21, 2024 | berkotfoods.comt 968Gb uncompressed data |
| bataviacontainer.com | · Dec 19, 2024 | bataviacontainer.com 506Gb uncompressed data |
| pez.com | · Dec 6, 2024 | pez.com 1.1Tb uncompressed data |
| glts.net | · Nov 25, 2024 | glts.net 1.1Tb uncompressed data |
| projektalp.ch | · Oct 29, 2024 | projektalp.ch 120Gb uncompressed data |
| anhf.org.auh | · Oct 29, 2024 | anhf.org.au 1.5Tb uncompressed data |
| In the depths of software development. Unlocking the secrets of Promise Technology, Inc. | · Oct 15, 2024 | Today we publish the first part from a major leak at Promise Technology, Inc. |
| promise.com | · Oct 11, 2024 | promise.com 1.8Tb uncompressed data |
| victrongroup.com | · Oct 9, 2024 | victrongroup.com 2.3Tb uncompressed data |
| tolsa.com | · Sep 26, 2024 | tolsa.com 5.1Tb uncompressed data |
| f-t.com | · Sep 23, 2024 | f-t.com 8.4Tb uncompressed data |
| tims.com | · Sep 19, 2024 | tims.com 680Gb uncompressed data |
| ecbawm.com | · Sep 14, 2024 | ecbawm.com 246Gb uncompressed data |
| pfsbrands.com | · Aug 30, 2024 | pfsbrands.com 1.3Tb uncompressed data |
| comtruck.ca | · Aug 28, 2024 | comtruck.ca 1Tb uncompressed data |
| idahopacific.com | · Aug 23, 2024 | idahopacific.com 3.5Tb uncompressed data |
| spvmhc.org | · Aug 21, 2024 | spvmhc.org 15Gb uncompressed data |
| robertshvac.com | · Aug 11, 2024 | robertshvac.com 240Gb uncompressed data |
| q-cells.de | · Aug 2, 2024 | q-cells.de 5.4Tb uncompressed data |
| zoppo.com | · Jul 28, 2024 | zoppo.com 233Gb uncompressed data |
| crimsonwinegroup.com | · Jul 25, 2024 | crimsonwinegroup.com.com 1.6Tb uncompressed data |
| greenlightbiosciences.com | · Jul 15, 2024 | greenlightbiosciences.com 726Gb uncompressed data |
| landmarklife.com | · Jun 27, 2024 | landmarklife.com 2.4Tb uncompressed data |
| conferenceusa.com | · Jun 27, 2024 | conferenceusa.com 1Tb uncompressed data |
| tpocc.org | · Jun 25, 2024 | tpocc.org 570Gb uncompressed data |
| malca-amit.com | · Jun 18, 2024 | malca-amit.com 30Gb + VMware images CHKC-NGSQL.MAFE.COM HKG-TSPLS.MAFE.COM 1.2Tb |
| woldae.com | · May 7, 2024 | woldae.com 9.7Tb uncompressed data |
| rangam.com | · Apr 23, 2024 | rangam.com 1.1Tb uncompressed data |
| rameywine.com | · Mar 29, 2024 | rameywine.com 61Gb uncompressed data |
| lindquistinsurance.com | · Mar 27, 2024 | lindquistinsurance.com 12Gb uncompressed data |
| iamdesign.com | · Mar 14, 2024 | iamdesign.com 78Gb uncompressed data |
In the newsAll →
No articles mention this group yet.