belsen group
Ransomware / extortion group tracked from leak-site posts
Victims · 7d
0flat
Victims · 30d
0active targets
Victims · 90d
0
All-time (tracked)
11since 2024-01-14
Last post
03-04 01:24UTC
Estimated earnings
—public reporting
Profile not written yet: the pipeline profiles the most active groups first, a few per run.
Leak-site victims11 posts · newest first
| Victim | Discovered | Details |
|---|---|---|
| Building Materials Company | · Mar 4, 2025 | Revenue: $300 Million |
| Manufacturing Company in North Africa(Sold out) | · Feb 19, 2025 | Revenue: $6 BillionAssets Value: $100 - $200 BillionIndustry: Energy, Electrical, and Electronics Manufacturing, Telecommunication Equipment, Electrical Distribution, Cables, Accessories and more. |
| FortiGate (New) | · Feb 19, 2025 | FortiGate 1,000 Targets (Configs+VPN Passwords) |
| FortiGate | · Feb 19, 2025 | FortiGate 15K+ Targets (Configs+VPN Passwords) |
| Architecture, Engineering & Design Company in Japan | · Feb 10, 2025 | Revenue: $700 Million 2025-02-10 Japan $10K (Negotiable) |
| Cosmetics, Beauty Supply & Personal Care Products In United States | · Feb 10, 2025 | Revenue: $500 Million Hosts: +5K 2025-02-10 USA $10K (Negotiable) |
| Manufacturing Company in North Africa (Sold out) | · Feb 10, 2025 | Revenue: $6 Billion Assets Value: $100 - $200 Billion Industry: Energy, Electrical, and Electronics Manufacturing, Telecommunication Equipment, Electrical Distribution, Cables, Accessories and more. 2025-02-10 North Africa $20K (Negotiable) |
| Airways in East Africa | · Feb 9, 2025 | Revenue: $2 Billion Assets Value: $40 - $100 Billion 2025-02-09 East Africa $15K (Negotiable) |
| Bank in East Asia | · Feb 3, 2025 | Revenue: $2 Billion Assets Value: $350 - $400 Billion 2025-02-03 East Asia $15K (Negotiable) |
| FortiGate 1,000 Targets (Configs+VPN Passwords) | · Jan 31, 2025 | Global/All The world 103 MB. 500$ |
| FortiGate 15K+ Targets (Configs+VPN Passwords) | · Jan 14, 2024 | — |
In the newsAll →
No articles mention this group yet.
Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .