ZeroHour

barracuda

ransomware group · aka Barracuda · unknown · active since unknown (leak-site activity tracked on this dashboard since 2026-08-06)

Victims · 7d
0flat
Victims · 30d
0active targets
Victims · 90d
5
All-time (tracked)
5since 2026-08-06
Last post
08-15 14:27UTC
Estimated earnings
public reporting
Profile · glm-5.3-flash · updated

Barracuda is a low-volume data-extortion group that operates a dedicated leak site naming victim organizations; it shares its name with the security vendor Barracuda Networks, but no connection is documented. Public vendor research on the group is limited, and no confirmed operator attribution, origin, ransomware-family linkage, or affiliate structure has been published. Activity on this dashboard has been modest, with five victim listings since tracking began on 2026-08-06 and the most recent post on 2026-08-15, suggesting a small or selective operation. Its self-reported victims span multiple geographies and sectors, including a Brazilian law firm, South Korean industrial companies, and a US dental practice, which is consistent with broad, opportunistic targeting. No specific CVE exploitation or ransom-payment figures have been publicly attributed to the group as of this profile.

Tactics & tooling
  • Operates a dedicated data-leak site that names victim organizations
  • Implied double-extortion model (data theft with threatened publication), as evidenced by leak-site listings; whether encryption is used in each case is unconfirmed
  • Victim set spans multiple regions (South America, East Asia, North America), indicating broad or opportunistic selection
  • Low posting cadence (five listings across the 90-day window on this dashboard)
  • Initial access vector, tooling, and affiliate structure: not documented in widely reported public research (unknown)
Targeted sectors
legal servicesmanufacturing / industrialindustrial automationhealthcare (dental / periodontics)
Notable public victims

VR Advogados (law firm, Brazil), Namyang Industrial Co., Ltd. / NAMYANG NEXMO (South Korea-linked industrial company), RS Automation Co., Ltd. (South Korean industrial automation / robotics company), Ferrell / Skyline Implants & Periodontics / Dr. Scott Ferguson (US dental / periodontics practice), Micro-Comm Inc. (sector and location not publicly detailed; unknown)

Estimated earnings

No public figure.

Leak-site victims

VictimDiscoveredDetails
VR Advogados · Aug 15, 2026[upcoming] VR Advogados, a Brazilian law firm, neglected its clients’ personal data, violating laws regarding data storage and confidentiality—they posted and shared all of their clients’ documents, passport information, and powers of attorney via a Discord server. We hacked it. Now we have 3,000 documents belonging to all of their clients—passports, powers of attorney, declarations, personal and work-related correspondence, and more. The firm hasn’t responded to us for three days; if this continues, we’ll start selling the data.
Namyang Industrial Co., Ltd. \ NAMYANG NEXMO · Aug 6, 2026Selling fresh full database dumps of company Namyang Industrial Co., Ltd. (renamed to Namyang Nexmo). Infrastructure dump, not website! There information about employers, manufacturing, parts, clients, partners and etc. Total lines (csv format): 17 641 181.
RS Automation Co., Ltd. · Aug 6, 2026Full dump of all files from the servers and developers personal files and NAS. Legal documents, letters, drawings, assembly, C, and C++ source codes. Official manufacturer website: rsautomation.co.kr
Ferrell \ Skyline Implants & Periodontics \ Dr. Scott Ferguson · Aug 6, 2026Full personal and servers files dumps from Skyline Implants & Periodontics company. The data files contain: medical documents of patients (including MRI scans of various parts of the body — files with the .dcm extension), personal photos, and the personal data of the doctor, Scott Ferguson, as well as documents from the company Skyline Implants & Periodontics — in particular, information on equipment and pharmaceutical procurement and other related materials.
Micro-Comm Inc. · Aug 6, 2026Micro-Comm, Inc. is an industrial automation company based in Olathe, Kansas, that provides water and wastewater control systems, manufacturing control panels, micro-controllers, and SCADA software. [http://www.micro-comm-inc.com]. Tree of all files: https://www.filemail.com/d/vpqdvykqwssupsw. Files count: 894 963, documents type: maps, schemes, personal employers information, personal citizens information, work photos, emails, partners personal information

In the newsAll →

No articles mention this group yet.

Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .