abyss-data
ransomware group · aka Abyss Locker, AbyssLocker · unknown (vendor analysis has reported code-level ties to the HelloKitty ransomware family, but no public attribution to a country or named operators) · active since 2023 (first documented in vendor research); leak site tracked by this dashboard since 2026-08-26
Abyss Locker, tracked on this dashboard as 'abyss-data', is a ransomware and data-extortion operation first documented by vendor research in 2023, known for encryptors spanning Windows, Linux, and VMware ESXi environments. Trend Micro's 2023 analysis reported code overlap with the older HelloKitty family, and vendor, industry, and press reporting through 2024 highlighted attacks on virtualization, network-attached storage, and food and agriculture targets, including Taylor Farms and Moon Valley Nurseries. The group practices double extortion, publishing victims and stolen data on a Tor leak site; no ransom demands or payment totals have been publicly confirmed. Its leak-site listings skew toward mid-sized organizations across manufacturing, healthcare, real estate, and local government in multiple countries, including several US and German victims. Current activity is low: this dashboard recorded a single new victim since tracking began on 2026-08-26 (last post 2026-08-26), though the site lists roughly a dozen victims in total.
- Multi-platform encryptors covering Windows, Linux, and VMware ESXi (vendor research, 2023)
- ESXi attacks reportedly shut down running virtual machines before encrypting datastores (Trend Micro, 2023)
- Reported targeting of network-attached storage (NAS) devices (vendor research, 2023)
- Double extortion: data theft plus encryption, with victims and stolen files published on a Tor leak site
- Code overlap with the HelloKitty ransomware family indicates shared or recycled tooling (Trend Micro, 2023)
- Opportunistic targeting of mid-sized organizations; 2024 industry alerts and press reporting flagged attacks on the food and agriculture sector
Moon Valley Nurseries (US nursery chain; reported Abyss Locker victim per 2024 press/industry reporting), Taylor Farms (US fresh-produce supplier; reported Abyss Locker victim per 2024 press/industry reporting), MEMSIC (semiconductor sensor maker; leak-site listing), Sitoy Group (Hong Kong-listed leather goods manufacturer; leak-site listing), The Moinian Group (New York real estate developer; leak-site listing), Crown Laboratories (US skincare company; leak-site listing), ENT & Allergy Associates (New York-area physician group; leak-site listing), Landkreis Limburg-Weilburg (German district administration; leak-site listing), Technic Inc. (specialty chemicals; leak-site listing)
No public figure.
Leak-site victims92 posts · newest first
| Victim | Discovered | Details |
|---|---|---|
| yarco.com | · Mar 14, 2024 | yarco.com 1.9Tb uncompressed data |
| neigc.com | · Mar 11, 2024 | neigc.com 2.9Tb uncompressed data |
| sunharbormanor.com | · Feb 29, 2024 | sunharbormanor.com 91Gb uncompressed data |
| vanwingerden.com | · Feb 14, 2024 | vanwingerden.com 337Gb uncompressed data |
| mranet.org | · Feb 10, 2024 | mranet.org 3Tb uncompressed data |
| posen.com | · Feb 9, 2024 | Posen Architects 724Gb uncompressed data |
| transaxle.com | · Feb 7, 2024 | transaxle.com 795Gb uncompressed data |
| deltron.com | · Feb 6, 2024 | deltron.com 8.9Gb uncompressed data |
| vidalung.ai | · Jan 27, 2024 | vidalung.ai 1.7Tb uncompressed data |
| synergyfinancialgrp.com | · Jan 23, 2024 | Synergy Financial Group 97Gb uncompressed data |
| micrometals.com | · Jan 23, 2024 | Micrometals, Inc. 997Gb uncompressed data |
| concertus.co.uk | · Dec 5, 2023 | Concertus Design and Property Consultants 1,9Tb uncompressed data |
| aurobindousa.com | · Nov 30, 2023 | Aurobindo 3,7Tb uncompressed data |
| shawneemilling.com | · Nov 11, 2023 | Shawnee Mills 805Gb uncompressed data |
| motordepot.co.uk | · Nov 11, 2023 | Motor Depot 636Gb uncompressed data |
| lathamcenters.org | · Nov 5, 2023 | lathamcenters.org 75Gb uncompressed data |
| apexga.bank | · Oct 26, 2023 | apexga.bank 5 VMware VM from Production Servers |
| njsba.com | · Sep 10, 2023 | NJSBA , 529Gb uncompressed data |
| www.northriverco.com | · Sep 9, 2023 | North River Co LLC, 303Gb uncompressed data |
| www.lasaterandmartin.com | · Aug 31, 2023 | Lasater & Martin, P.C. Attorneys, 697Gb uncompressed data |
| www.finitia.net | · Aug 9, 2023 | finitia ag, 465Gb uncompressed data |
| plbint.com | · Jul 21, 2023 | PLB International, 990Gb uncompressed data |
| www.brockhouse.co.uk | · Jul 18, 2023 | Brockhouse Group Ltd, 35Gb uncompressed data |
| www.tractrad.com | · Jul 17, 2023 | Tractrad.com, 35Gb uncompressed data |
| www.stri.se | · Jul 16, 2023 | STRI, 189Gb uncompressed data |
| www.arb.ch | · Jul 16, 2023 | arb Architekten AG, 220Gb uncompressed data |
| www.l3harris.com | · May 15, 2023 | 17 VM from wsots.net (Wideband Satellite Communications Operations and Technical Support) |
| wsots.net | · May 15, 2023 | 17 VM from wsots.net (Wideband Satellite Communications Operations and Technical Support) |
| pwlawfirm.com | · May 12, 2023 | Piasecki & Whitelaw, LLC 385G uncompressed data |
| brett-robinson.com | · May 8, 2023 | Brett-Robinson, 393Gb database backups and data from production servers |
| avidxchange.com | · May 8, 2023 | AvidXchange, Inc All database backups from production servers |
| pandol.com | · Apr 18, 2023 | Pandol Bros., Inc 389Gb uncompressed data |
| 7x7oralsurgery.com | · Mar 30, 2023 | 7x7 Dental Implant & Oral Surgery 114Gb uncompressed data |
| bienvilleortho.com | · Mar 27, 2023 | bienvilleortho.com 147Gb uncompressed data |
| largest provider of orthopedic care | · Mar 22, 2023 | 147Gb uncompressed data |
| largest provider of orthopaedic care | · Mar 22, 2023 | 147Gb uncompressed data |
| A large company | · Mar 20, 2023 | 223Gb uncompressed data |
| hosemanufacturing.com | · Mar 20, 2023 | Ratermann Manufacturing 113Gb uncompressed data |
| igadiltd.com | · Mar 20, 2023 | IgadI 84Gb uncompressed data |
| jones-hamilton.com | · Mar 20, 2023 | Jones-Hamilton Co. 230Gb uncompressed data |
| stonehillcontracting.com | · Mar 20, 2023 | Stone Hill Contracting, Inc. 176Gb uncompressed data |
| siebold.com | · Mar 20, 2023 | The Siebold Company, Inc. 700Gb uncompressed data |
In the newsAll →
No articles mention this group yet.