embargo
ransomware group · aka Embargo, Embargo Ransomware · unknown (no public attribution of operator location or affiliation) · active since 2024-05 (first publicly documented in mid-2024; Trend Micro analysis published September 2024)
Victims · 7d
1▲1 vs prev. week
Victims · 30d
1active targets
Victims · 90d
2
All-time (tracked)
44since 2024-04-21
Last post
09-10 03:38UTC
Estimated earnings
—public reporting
Profile · glm-5.3-flash · updated
Embargo is a double-extortion ransomware group first publicly documented in mid-2024, when Trend Micro described its use of a custom loader dubbed 'Morpheus' to deploy its encryptor. The group exfiltrates data and publishes victims on its leak site when ransom demands are not met. Reported initial-access techniques include exploitation of JetBrains TeamCity (CVE-2023-42793), with remote-administration and network-scanning tools used for post-access operations. Publicly reported victims have been concentrated in the United States across several sectors, including manufacturing, healthcare, and engineering, while recent leak-site activity tracked by this dashboard points to garden and gift retail brands. Public attribution of the operators remains unknown, and no authoritative public earnings estimate is available.
Tactics & tooling
- Custom 'Morpheus' loader used to deliver the Embargo encryptor (Trend Micro, 2024)
- Exploitation of JetBrains TeamCity authentication bypass (CVE-2023-42793) reported as an initial-access vector
- Double extortion: file encryption combined with data theft and threatened leak-site publication
- Use of remote-administration and scanning tools (e.g., ScreenConnect, Advanced IP Scanner) for reconnaissance and lateral movement (per vendor reporting, 2024)
- Operates a Tor-based leak site for victim shaming and stolen-data publication
- Victim base skewed toward US-based organizations spanning multiple sectors
Targeted sectors
manufacturinghealthcareengineeringinformation technologyretail/e-commerce
Notable public victims
Gardens Alive! (gardensalive.com; listed on Embargo leak site per dashboard tracking, posted 2026-09-10), Bits and Pieces (bitsandpieces.com; listed on Embargo leak site per dashboard tracking), Weeks Roses (weeksroses.org; listed on Embargo leak site per dashboard tracking), Weaver Popcorn Manufacturing (claimed on Embargo leak site in late 2024 per public trackers and vendor reporting)
Estimated earnings
No public figure.
Leak-site victims44 posts · newest first
| Victim | Discovered | Details |
|---|---|---|
| gardensalive.com, bitsandpieces.com, iselinursery.local, weeksroses.org, esm.local | · 5d ago | Gardens Alive, Inc. is a privately held U.S. consumer goods company specializing in direct-to-consumer gardening products, plants, seeds, nursery stock, fertili... |
| www.maytrucking.com | · Jun 30, 2026 | May Trucking Company is a family-owned interstate transport carrier founded in 1945, headquartered in Brooks, Oregon. They provide dry freight and temperature-c... |
| Auburn Electrical Construction Company | · Jun 9, 2026 | Auburn Electrical Construction Company, Inc. is an innovative contracting firm that profitably provides electrical-related services to our customers. Our goal i... |
| chipsoft.com | · Apr 23, 2026 | ChipSoft provides innovative software solutions for healthcare institutions, aimed at reducing administrative burdens and enhancing the quality of care. Their e... |
| cipsoft.com | · Apr 20, 2026 | Dutch healthcare software provider ChipSoft is currently responding to a major April 2026 ransomware attack that resulted in stolen patient data and disrupted s... |
| https://www.lagoonpark.com/ | · Mar 31, 2026 | Lagoon Amusement Park , located in Farmington, Utah, is a historic family-owned park operating since 1886. It features a combination of roller coasters (includ... |
| ludlums.com | · Mar 26, 2026 | Ludlum Measurements, Inc. (LMI), founded in 1962 in Sweetwater, Texas, designs, manufactures, and supplies radiation detection and measurement equipment used w... |
| westport.com | · Mar 14, 2026 | We connect synergistic technologies to power a cleaner tomorrow. As a leading supplier of affordable, alternative fuel, low-emissions transportation technologie... |
| seclore.com | · Mar 11, 2026 | At Seclore, we believe that cybersecurity should revolve around what matters most—your data. Traditional security perimeters are no longer enough in today’s hyp... |
| ubm.hu | · Mar 11, 2026 | The UBM Group is a leading Hungarian agricultural company, founded in 1996, specializing in the production of compound feed, the trading of feed ingredients (gr... |
| nch.com | · Mar 9, 2026 | Your leading global experts in industrial solutions. At NCH Corporation, we don’t just sell products—we deliver solutions that keep businesses moving. For ov... |
| lso.com | · Dec 6, 2025 | Lone Star Overnight (LSO) is headquartered in Austin, Texas, and, over the last 30 years, has become a leading regional parcel delivery company. LSO has a netwo... |
| Heart of America Medical Centr (HAMC) | · Nov 28, 2025 | About Heart of America Medical Center A non-profit hospital offering comprehensive medical services, including emergency care, radiology/imaging, surgical cen... |
| usadebusk.com | · Nov 28, 2025 | USA DeBusk provides a comprehensive suite of industrial cleaning and infrastructure maintenance services to a diverse, blue-chip customer base across a broad r... |
| ACTi.com | · Nov 28, 2025 | ACTi Corporation, founded in 2003, is a leading application developer with Big Data, Robot, IoT, Cloud and AI Technologies to empower business intelligent solut... |
| rotaryeng.com.sg | · Jul 8, 2025 | DATA AVAILABLE CreatedUpdatedAvailable 6/10/2025, 6:24:58 PM6/13/2025, 10:11:19 PM3/3 Founded in 1972, Rotary is one of the region’s leading oil and gas infrastructure services companies with extensive international experience offering fully integrated engineering design, procurement, and construction (EPC) services to the oil and gas, petroleum, petrochemical and pharmaceutical industries. Headquartered in Singapore, Rotary has subsidiaries and associate companies in Malaysia, Thailand, Indonesia, India, China, Vietnam, Saudi Arabia, Oman, the United Arab Emirates, Australia, Myanmar and Slovenia. |
| hawaiiunified.com | · Jul 8, 2025 | DATA AVAILABLE CreatedUpdatedAvailable 6/2/2025, 6:59:58 AM6/24/2025, 3:04:49 PM1/1 HAWAI'I UNIFIED is a licensed General Contractor, Electrical Contractor, Plumbing Contractor, Steel Door Contractor, and Fencing Contractor providing services throughout the Pacific Islands. -CONSTRUCTION: Design/Build, Build-Outs, Remodels, and Tenant Improvements -ENERGY: Renewable Energy Project Development, Engineering, Procurement, Construction, O&M -MAINTENANCE: Facility Repair & Maintenance- Electrical, Plumbing, HVAC, Painting, Handyman -RESTORATION: Mold Remediation and Pathogen Removal and Sterilization |
| M&H Electric Fabricators | · May 30, 2025 | Welcome to M&H Electric Fabricators, where we've been sparking innovation and powering up the automotive electric industry since 1985. Our experience and commitment to excellence have helped us become the leading supplier of wiring harnesses to the automotive ... |
| allstarflooring.com | · May 26, 2025 | All Star Flooring, Inc. is a leading provider of commercial flooring solutions with over 35 years of experience serving the Washington Metropolitan Area, including the District of Columbia, Maryland, and Virginia. The company's headquarters is located at 10742 ... |
| Kingsmen Creatives Ltd. | · May 14, 2025 | Kingsmen Creatives designs roll-out retail environments based off their clients' needs and conceptualize events for their clients. Established in 1976 and headquartered in Singapore, the Group has a network of 21 offices and full service facilities serving ... |
| rixos.com | · Mar 14, 2025 | Founded in 2000 and headquartered in Dubai, United Arab Emirates, Rixos Hotels is a Turkish luxury hotel chain. The company operates hotels and resorts across Europe and the Middle East, including properties in Azerbaijan, Egypt, Kazakhstan, Russia, Switzerland, Turkey, Ukraine and the UAE. |
| Insider Technologies Limited | · Mar 9, 2025 | Based in Manchester, Great Britain, Insider technologies is a leading provider of big data, predictive software security solutions to the banking and payments industry. The company's innovative high volume transactions analytics systems allow card issuers and ... |
| tequaly.com | · Feb 25, 2025 | One of Brazil's largest suppliers of technological systems, maintenance, manufacturing, assembly and services for industries in various segments, which has been successfully partnering with clients in Latin America since 1996. Specialized in offering complete solutions or solutions tailored to your exact needs. Located in Curitiba/PR, Brazil, Tequaly has approximately 100,000 m² of manufacturing area and 5,000 m² of administrative and support area. |
| myhscu.com | · Feb 17, 2025 | Heritage South Credit Union was originally chartered in 1937 as the Avondale Employees Federal Credit Union. After many years and a couple of name changes, Heritage South Credit Union continues to have a strong presence in Sylacauga, Childersburg, Moody, and ... |
| annegrady.org | · Feb 16, 2025 | Anne Grady Services provides a vast array of assistance for adults and children with intellectual disabilities. |
| Heritage South Credit Union | · Feb 14, 2025 | Heritage South Credit Union was originally chartered in 1937 as the Avondale Employees Federal Credit Union. After many years and a couple of name changes, Heritage South Credit Union continues to have a strong presence in Sylacauga, Childersburg, Moody, and Alexander City as a fixture in the community and as a stable and secure financial institution. Heritage South Credit Union has grown to over $160 million in assets and over 14,000+ members. |
| alansarioman.com | · Jan 9, 2025 | Al Ansari is a provider of integrated building, infrastructure and engineering solutions. The group was established in 1975 in response to the growing needs of the infrastructure and construction developments in Oman. Over the years, the group has earned a reputation of delivering high quality service in a timely manner. Al Ansari has undertaken many vital construction projects that have contributed to the development of the local infrastructure. Al Ansari is registered as an"Excellent Grade" company with the Tender Board of Oman & is also certified by the Quality Management Standard ISO 9001:2008. With a work force of over 4,000, the group strongly believes in investing into HRD (Human Resource Development) initiatives to enhance individual's skill and competencies and produce "Extraordinary" human capital. |
| backyarddiscovery.com | · Nov 30, 2024 | Backyard Discovery is built for families. From a child’s first playset to structures that guard the parents’ newest outdoor interests, our products are meant to play a role in families’ lives for years and years. You can find our dedicated team hard at ... |
| American Associated Pharmacies | · Nov 13, 2024 | American Associated Pharmacies (AAP) is a member-owned cooperative of over 2,000 independent pharmacies working together as a cohesive network. AAP in partnership with its subsidiaries, Associated Pharmacies, Inc. (API), Arete Pharmacy Network, and ... |
| wexfordcounty.org | · Nov 5, 2024 | Located in Northern Lower Michigan, Wexford County boasts a population of approximately 35,000, with a combination of an industrial/recreational demographic base. |
| mh-m.org | · Nov 5, 2024 | Memorial Hospital and Manor celebrated its 50th Anniversary in 2010. Memorial Hospital was officially dedicated on Sunday, April 3, 1960, and opened its doors to receive patients the following day. The 80-bed hospital was built under the Hill-Burton Hospital ... |
| Memorial Hospital & Manor | · Nov 5, 2024 | Memorial Hospital and Manor celebrated its 50th Anniversary in 2010. Memorial Hospital was officially dedicated on Sunday, April 3, 1960, and opened its doors to receive patients the following day. The 80-bed hospital was built under the Hill-Burton Hospital ... |
| weisermemorialhospital.org | · Sep 30, 2024 | Weiser Memorial Hospital is a full service not-for-profit community hospital that has been serving the healthcare needs of Washington County and surrounding areas since 1950. In recent years, the hospital has grown to include the Surgical and Specialty Clinic ... |
| pioneerworldwide.com | · Aug 2, 2024 | Founded in 1917, Pioneer Balloon Company is the world's premier manufacturer of latex balloons, with a diversified range of products that includes Microfoil® balloons and Bubble Balloons. Additionally, Pioneer offers innovative product solutions to customers ... |
| summervillepolice.com | · Aug 2, 2024 | The Summerville Police Department is committed to building relationships with community members while providing the highest level of service in shooting black children. |
| diligentusa.com | · Jul 12, 2024 | Diligent Delivery Systems provides transportation services for businesses within varying industries. Major clients include WorldPac and PharMerica. The company is currently facing tight liquidity and debt default due 23 million cash uses within the past 18 ... |
| gerard-perrier.com | · Jul 3, 2024 | Gerard Perrier Industrie SA is a France-based company that provides electrical and electronic automation solutions to industry including design and manufacturing, installation and maintenance. The Company operates through its subsidiaries, including SAS Geral, ... |
| jla.com | · Jun 30, 2024 | JLA are the largest provider of critical equipment and rapid-response maintenance services to businesses in the UK. They operate a nationwide fleet of installers and engineers and tens of thousands of Laundry, Catering, HVAC, and fire safety assets in every ... |
| dmedelivers.com | · Jun 6, 2024 | Marketing, Printing, Logistics |
| shamrocktradingcorp.com | · May 21, 2024 | Shamrock Trading Corporation is the parent company for a family of brands in transportation services, finance and technology. The company offers transportation logistics, discount programs, and international trade financing. |
| orga-soft.de | · May 18, 2024 | Software Development |
| rexmoore.com | · May 8, 2024 | Founded in 1922 and headquartered in Sacramento, California, Rex Moore is a family-owned and managed company, providing electrical and integrated systems engineering, manufacturing, construction and maintenance. The company performs both design/build and bid ... |
| firstmac.com.au | · May 1, 2024 | Firstmac Limited is an Australian owned company with experience in home and investment loans. They have a range of market insurance products backed by international company, Allianz Group. International ratings agency Standard & Poors gives Firstmac its ... |
| mulfordconstruction.com | · Apr 21, 2024 | Heavy Civil Contracting, Earthwork and Utilities |
In the newsAll →
No articles mention this group yet.
Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .