ZeroHour

ethics

ransomware group · aka Ethics · unknown · active since 2026-08-10 (first observed on this dashboard's leak-site tracking; earlier activity, if any, unknown)

Victims · 7d
0flat
Victims · 30d
0active targets
Victims · 90d
4
All-time (tracked)
4since 2026-08-10
Last post
08-10 16:19UTC
Estimated earnings
public reporting
Profile · glm-5.3-flash · updated

Ethics is a ransomware and data-extortion operation tracked on this dashboard through its leak site, which has posted 4 claimed victims since tracking began on 2026-08-10, with no posts since that date. Publicly named victims span insurance, legal services, and manufacturing in the United States and Germany, though the sample is small and one listing is partially redacted. The group follows a leak-site extortion model in which stolen data is used as leverage; whether it also encrypts victim systems is not publicly confirmed. Origin, operators, affiliate structure, and possible ties to other ransomware brands are unknown, and no earnings figures or CVE attributions have been widely reported. The low victim count is consistent with a newly emerged or low-volume operation, and the quiet period since 2026-08-10 should not be read as a definitive takedown or shutdown.

Tactics & tooling
  • Operates a public leak site naming claimed extortion victims
  • Data-theft extortion; use of file encryption not publicly confirmed
  • Multi-victim posting bursts (4 claimed victims posted on/around 2026-08-10)
  • Targets organizations in the United States and Germany
  • Targets insurance, legal services, and manufacturing (based on 3 publicly named victims)
  • Low overall victim count (4), suggesting a new or low-volume operation
Targeted sectors
InsuranceLegal servicesManufacturing
Notable public victims

Philadelphia Insurance Companies (US commercial insurer), Holstrom, Block & Parke, A Professional Law (US law firm), BerlinerLuft. Technology GmbH (German industrial ventilation/climate-technology manufacturer)

Estimated earnings

No public figure.

Leak-site victims

VictimDiscoveredDetails
BerlinerLuft. Technology GmbH · Aug 10, 2026
Holstrom, Block & Parke, A Professional Law · Aug 10, 2026
Philadelphia Insurance Companies · Aug 10, 2026
•••••••••• · Aug 10, 2026

In the newsAll →

No articles mention this group yet.

Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .