ZeroHour

insomnia

ransomware group · aka Insomnia · unknown (no public attribution to a region, language group, or known ransomware brand/family in widely available vendor reporting) · active since 2024 (first widely reported public claim: Panera Bread breach, mid-2024); first post tracked by this dashboard: 2026-09-07

Victims · 7d
3flat
Victims · 30d
10active targets
Victims · 90d
16
All-time (tracked)
52since 2026-02-08
Last post
09-15 19:25UTC
Estimated earnings
public reporting
Profile · glm-5.3-flash · updated

Insomnia is a low-volume ransomware and data-extortion operation that uses a double-extortion model and names victims on a Tor-hosted leak site. It first drew public attention in mid-2024 when it claimed a breach of Panera Bread, an incident the company publicly acknowledged. Public technical reporting on the group is scarce, with no widely published malware analysis, IOC sets, or affiliate relationships documented as of the latest vendor research. Activity on this dashboard is minimal: a single leak-site listing (NorthShore Health Centers) tracked since 2026-09-07. Leak-site posts represent gang claims and are not independently confirmed breaches.

Tactics & tooling
  • Double extortion: exfiltrates data and threatens publication if ransom is unpaid
  • Operates a Tor-hosted data-leak site naming non-paying victims
  • Sporadic, low-volume victim claims rather than sustained high-volume campaigns
  • Public claims to date assert bulk data theft; specific tooling, initial-access methods, and encryption tradecraft not widely documented
  • Sector targeting appears opportunistic (hospitality and healthcare claims to date; sample size too small to infer a pattern)
Targeted sectors
hospitality/restaurantshealthcareothers unknown (very small sample of public claims)
Notable public victims

Panera Bread - claimed by the gang on its leak site in 2024; company acknowledged a cybersecurity incident (per BleepingComputer/vendor reporting, 2024), NorthShore Health Centers - listed on the group's leak site 2026-09-07 (per this dashboard's leak-site tracking; claim not independently confirmed)

Estimated earnings

No public figure.

Leak-site victims

VictimDiscoveredDetails
Wiggins, Childs, Pantazis, Fisher, & Goldfarb LLC · 2h agoLarge U.S. plaintiffs firm with Alabama, D.C., and Florida offices. Since 1985, it’s been known for excellence in discrimination, consumer protection, and employment law, leading class actions that advance protections for victims.
Metropolitan Community Health Services · 1d agoAgape Health Services, a CCBHC/FQHC run by Metropolitan Community Health Services, offers sliding-scale primary, preventive, dental, pharmacy, and behavioral health care, plus mobile, law-enforcement, training, and reentry services.
Massey, Stotser & Nichols · 1d agoMassey, Stotser & Nichols is a Birmingham, AL law firm offering real estate, family law, and civil/corporate litigation. They serve Fortune 500, businesses, and individuals, delivering personalized solutions with big-firm capability.
NorthShore Health Centers · 7d agoNorthShore Health Centers offers comprehensive care in Indiana, including behavioral health, dental, pediatrics, and women’s health. It runs multiple health centers and mobile units across Porter, Lake, La Porte, and Jasper counties.
Maglin, Miskiv & Associates · 12d agoMaglin Miskiv & Associates in Parsippany, NJ offers personalized accounting, tax planning, bookkeeping, payroll, financial consulting, tax prep, and audit support for individuals and businesses.
N*************** · 13d agoMedical center with 9 locations offers coordinated care for patients and families, including dentistry, digital X-rays, ultrasound, bone density scans, mammograms, lab testing, and mental health counseling in a comfortable setting.
Metro Tulsa Foot · 15d agoA comprehensive foot and ankle treatment center with five locations in the Tulsa Metro area. They offer a range of services including treatment for common foot pains, deformities, and injuries, and provide same-day appointments for urgent needs.
Aurora Health Management · 27d agoAurora Health Management, LLC operates a skilled nursing and rehab center in Frederick, MD. With nearly 25 years in long-term care, it improves troubled facilities through comprehensive management, programs, and Medicare/Medicaid standards.
*********** · 27d agoA private firm offering fluid system solutions for the oil, gas, chemical, and semiconductor sectors. It employs 3,600+ people across 10 factories, three tech centers, and about 100 sales and service locations in 50 different countries.
Codinter · 28d agoPrivate company supplying welding, cutting, finishing products and services across North/Central/South America. Offers equipment, tools, accessories, consumables - from mobile units to robotic systems. Oil industry: pipeline, tanks, refinery, platforms.
Park Place Behavioral Health Care · Aug 6, 2026PPBHC provides mental health and substance use services in Osceola County, Florida, with 40+ years’ experience. They offer crisis intervention, therapy, recovery-oriented care, telehealth, and partner with GENOA for medication access.
Merritt Woodwork · Jul 31, 2026Merritt provides strategic interior solutions for global estates and superyachts, from concept to execution. With precision planning and careful craftsmanship, it partners with top designers and craftsmen to deliver unparalleled results for generations.
Laempe Reich · Jul 31, 2026Laempe Reich is North America’s leading foundry core machine supplier, providing sand core equipment and technology for metal casting. As partner of Laempe Mössner Sinto, it serves the industry for over 80 years.
Sky Solutions · Jul 29, 2026Sky Solutions is a leading distribution company for Telecommunication products and services in Panamá. Currently serving 4 regions in Panama covering +4,000 points of sales; retail chains and supermarkets.
Brooklyn Defender Services · Jul 24, 2026Brooklyn Defender Services is a public defense office providing free, client-centered representation and advocacy in and out of court, protecting people from loss of freedom, family separation, and serious legal harm by unjust, racist systems.
************* · Jun 25, 2026Law firm provide legal services to individuals, businesses, and organizations. Their attorneys handle advice, court representation, contracts, and dispute resolution across areas like corporate, family, real estate, and estate law.
The Vant Group · Jun 12, 2026The Vant Group, founded in 1999, is an M&A advisory firm serving businesses up to $250M in revenue. It provides valuations, sell/buy-side advisory, and employee/partner buyouts, leveraging experienced professionals. Clients are mainly entrepreneurs and owners.
Mid-Cumberland Human Resource Agency · Jun 9, 2026MCHRA is a nonprofit promoting self-sufficiency via Meals-on-Wheels, public transit, in-home services, and community corrections. It serves adults needing care, transit users, and long-term care residents, emphasizing inclusivity and translation services.
Nephrology Associates · Apr 28, 2026Nephrology Associates, PA is a leading central Arkansas nephrology practice with seven highly trained physicians across seven locations. They provide compassionate kidney care, accept all insurances, and aim to create a welcoming environment for patients.
METO Systems · Apr 24, 2026METO Systems designs and manufactures stainless-steel industrial material‑handling equipment for regulated industries. Products include lifts, blenders, transporters, and docking systems, they offer installation, training, customization, and support.
United Medical Doctors · Apr 9, 2026United Medical Doctors (UMD) is an independent multi‑specialty medical‑surgical group with 70+ Southern California locations and 40+ specialties. They focus on high‑quality, compassionate care, patient satisfaction, process improvement, outpatient surgery, clinical research.
Noble Inc. · Apr 8, 2026Noble Casing, Inc., founded in 2009, provides casing running and conductor drilling services in the Rocky Mountain region, emphasizing safety, training and equipment upkeep. Subsidiaries Noble Drilling and Noble Trucking support production and rig moves.
*****d **d**** ****o** · Apr 2, 2026Functions as a comprehensive healthcare ecosystem—combining clinical care, surgical services, research innovation, and workforce development—all under one organization dedicated to improving community health in California
Atlas Ocean Voyages · Mar 23, 2026Atlas Ocean Voyages offers year-round all-inclusive expedition cruises for under 200 guests, led by expert guides and caring crew. Luxurious yachts sail pole‑to‑pole to pristine, hard‑to‑reach destinations for nature, culture, and culinary exploration.
Valley Family Health Care · Mar 18, 2026Valley Family Health Care is a Community Health Center offering medical, dental, behavioral health, and nutrition services. With 12 locations (including a mobile unit), they accept major insurances and provide income-based sliding fees to ensure accessible care.
**l** ****** ****** C*** · Mar 17, 2026A multi-service, accessible community health network designed to provide inclusive, affordable care to all.
Belmont Plastic Surgery · Mar 3, 2026
Ripple Neuro · Feb 26, 2026
Thrash Commercial Contractors · Feb 26, 2026
Zaner Group · Feb 25, 2026
AdMark Asia Group · Feb 18, 2026
Application Solution Providers · Feb 18, 2026
Copier Careers · Feb 13, 2026
The Syverson Group · Feb 13, 2026
Aviam Corporate Housing · Feb 11, 2026
Advanced Healthcare Professionals · Feb 8, 2026
Integrated Fresh Solutions · Feb 8, 2026
Gruel Mills Nims Pylman · Feb 8, 2026
Carlyle Senior Care of Florence · Feb 8, 2026
Internal Medicine of Milford · Feb 8, 2026
Rella Associates · Feb 8, 2026
Flint Hills Dialysis · Feb 8, 2026
Southern Illinois Dermatology · Feb 8, 2026
Parts Life, Inc · Feb 8, 2026
DeVal LCS · Feb 8, 2026
SchureMed · Feb 8, 2026
Optimum Health Institute · Feb 8, 2026
Anatomic Clinical Laboratory Associates · Feb 8, 2026
Dunn and Dunn · Feb 8, 2026
Tri-Cities Gastroenterology · Feb 8, 2026

In the newsAll →

No articles mention this group yet.

Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .