ZeroHour

cloak

ransomware group · unknown · active since 2026-06-16 (earliest leak-site post tracked by this dashboard; earlier activity unknown)

Victims · 7d
0flat
Victims · 30d
0active targets
Victims · 90d
1
All-time (tracked)
151since 2023-08-24
Last post
06-18 22:25UTC
Estimated earnings
public reporting
Profile · glm-5.3-flash · updated

Cloak is a data-theft and extortion brand known primarily from its public leak site, and the operators' origin, aliases, and affiliate lineage remain unknown. This dashboard first tracked the brand on 2026-06-16 and recorded four victim listings within the following 90 days, none after 2026-06-18, with several additional recent victim entries visible only in partially masked form. Identified victims span Germany and the United States - a German law firm, a German corporate group, a New York hotel group, and a Virginia municipal government - indicating opportunistic, multi-sector targeting across two regions. The very low publication rate may reflect small affiliate capacity, selective targeting, or victims resolving incidents without being listed, so an idle leak site should not be read as inactivity. No widely reported vendor research, law-enforcement advisories, or blockchain-analytics reporting yet ties the group to specific operators, exploited vulnerabilities, or ransom-payment figures.

Tactics & tooling
  • Data-theft extortion with public leak-site victim listings (double-extortion pattern)
  • Targets organizations in both the United States and Germany
  • Victim mix spans municipal government, legal, hospitality, and industrial/corporate targets, indicating opportunistic rather than single-vertical selection
  • Very low publication volume (4 tracked listings in 90 days; none since 2026-06-18)
  • Initial access techniques, malware tooling, and exploited vulnerabilities: unknown (no public technical reporting)
Targeted sectors
Government (local/municipal)Legal servicesHospitality (hotels)Industrial/corporate
Notable public victims

suffolkva.us - City of Suffolk, Virginia (municipal government), Fitzpatrickhotels.com - Fitzpatrick Hotels (New York City hotel group), Dinnebiergruppe.de - Dinnebier Gruppe (German corporate group), ra-vogeler.de - German law firm ('RA' indicates Rechtsanwaltskanzlei)

Estimated earnings

No public figure.

Leak-site victims

VictimDiscoveredDetails
ra-vogeler.de · Jun 18, 2026Country: germany | Size: 1.1TB | Private | Views: 1
ra-*******e · Jun 16, 2026Country: *** | Size: 1.1TB | Private | Views: 1
d**********e · Jun 16, 2026Country: *** | Size: 359GB | Private | Views: 0
W******S*******D · Jun 16, 2026Country: *** | Size: 102GB | Private | Views: 0
suffolkva.us · Feb 24, 2026
****el-p*****.de · Feb 24, 2026
Dinnebiergruppe.de · Feb 19, 2026
****ne*i***pe.de · Feb 3, 2026
Fitzpatrickhotels.com · Dec 30, 2025
****patr**h**s.com · Dec 19, 2025
*****l*****.us · Dec 19, 2025
Con*******.com · Nov 18, 2025
****e-det**.de · Nov 18, 2025
*****.com · Oct 16, 2025
L********den.com · Oct 16, 2025
TuftsMedicine · Sep 7, 2025
Wstg-steuerberater.de · Aug 9, 2025
Tu*******ne · Aug 9, 2025
Go********l · Aug 9, 2025
*********.bh · Aug 9, 2025
*******roup.ro · Aug 9, 2025
Nos********om.br · Jul 7, 2025
Ws*******.de · Jul 7, 2025
Pensions.gov.lk · Jun 27, 2025
Productionsaw.com · Jun 6, 2025Country: USA Views: 164
**********li.com · May 6, 2025
Bosshard-farben.ch · Apr 18, 2025
Pe*************.lk · Apr 18, 2025
Orl***********.com · Apr 18, 2025
pea**********.uk · Apr 18, 2025
Pc***********.org · Apr 18, 2025
Oag.state.va.us · Mar 20, 2025
Wr-recht.de · Mar 20, 2025
Baltimorecityschools · Mar 20, 2025
Fi***************.pa · Mar 20, 2025
St***********.nl · Mar 20, 2025
ba**********.org · Feb 25, 2025
Waggonereng.com · Feb 20, 2025
op*********.eu · Feb 20, 2025
wr********.de · Feb 20, 2025
pen********.de · Feb 20, 2025
oa*************.us · Feb 20, 2025
Ad***********.ca · Feb 3, 2025
Centromedicoenova · Jan 30, 2025Country: Spain Views: 69 View more /enova Public <100GB
Premierautocredit.com · Jan 29, 2025Country: USA Views: 53 View more /pac Public 156GB
Kaisersbach.de · Jan 28, 2025Country: germany Views: 106 View more /kaiser Public <100GB
Neovita.de · Jan 28, 2025Country: germany Views: 88 View more /neovita Public 227GB
Bwfg.at · Jan 23, 2025
pre*************.com · Jan 21, 2025
Wa**********.com · Jan 21, 2025

In the newsAll →

No articles mention this group yet.

Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .