kairos
ransomware group · aka Kairos · unknown · active since unknown (dashboard tracking of its leak site begins 2026-06-14)
Kairos is a ransomware/data-extortion operation that publishes victims on a dedicated leak site; this dashboard has tracked 8 victim posts since monitoring began on 2026-06-14, most recently on 2026-09-02. Posting volume is low and steady (8 in 90 days, 3 in 30 days), consistent with a small operation rather than a high-volume affiliate network. Observed victims are concentrated in local and municipal government, with an education institution and small-to-mid-sized manufacturing and services firms also represented. The group's origin, ransomware lineage, affiliate model, initial-access techniques, and financial activity are not documented in widely available public reporting and are treated as unknown here. Not to be confused with the similarly named 2016 Kairos ransomware family distributed via exploit kits.
- Maintains a public leak site listing victims, consistent with a data-theft extortion model
- Low posting cadence (~8 victims in ~3 months) rather than mass listing
- Targets local/municipal government entities (city, commune, and ayuntamiento administrations)
- Operates against victims in multiple countries (Belgium, France, Spain, Canada, and the US observed on the leak site)
- Initial-access techniques, tooling, and exploited vulnerabilities publicly reported: unknown
Ville de Libercourt, Ayuntamiento de Velilla de San Antonio, Ayuntamiento de Valdemoro, Commune de Camiers, College O'Sullivan de Quebec, Warwick Fabrics, Thermalex Inc, Hightech Signs, LR Reed, McCarthy Inc
No public figure.
Leak-site victims94 posts · newest first
| Victim | Discovered | Details |
|---|---|---|
| Inspired | · Jul 14, 2025 | — |
| oandg.com.au | · Jun 30, 2025 | — |
| cParlane & Associates | · Jun 26, 2025 | — |
| stopzbugs | · Jun 23, 2025 | — |
| taoscounty | · Jun 19, 2025 | — |
| evanspharmacy | · Jun 17, 2025 | — |
| jerichofd | · Jun 3, 2025 | — |
| ndsohio.org | · May 21, 2025 | — |
| durhamarts | · May 20, 2025 | — |
| loopergoodwine.com | · May 12, 2025 | — |
| The Derby High School | · Apr 23, 2025 | — |
| CPI | · Apr 23, 2025 | — |
| d-line | · Apr 16, 2025 | — |
| business.galesburg | · Apr 8, 2025 | — |
| galesburg | · Apr 7, 2025 | — |
| stattorney.org | · Mar 31, 2025 | — |
| fredsalvuccicorp.com | · Mar 10, 2025 | — |
| usarice.com | · Mar 5, 2025 | — |
| drvitenas.com | · Mar 4, 2025 | — |
| thefireplacewarehouse.co | · Feb 24, 2025 | — |
| danecourt.kent.sch.uk | · Feb 17, 2025 | — |
| toitoiusa | · Feb 17, 2025 | — |
| casperstruck | · Feb 4, 2025 | — |
| medicalreportsltd.com | · Feb 4, 2025 | — |
| delpackaging | · Jan 29, 2025 | — |
| theurswickschool.co | · Jan 20, 2025 | — |
| nightingalehammerson | · Jan 17, 2025 | — |
| realtaxcanada | · Jan 16, 2025 | — |
| combinedpoolandspa | · Jan 15, 2025 | — |
| jgele.com | · Jan 15, 2025 | — |
| austinsfs.com | · Dec 19, 2024 | — |
| eisenhowerlaw | · Dec 16, 2024 | — |
| tcpm | · Dec 13, 2024 | — |
| archlou | · Dec 13, 2024 | — |
| aneticaid | · Dec 13, 2024 | — |
| T&M Equipment | · Dec 6, 2024 | — |
| brownpacking | · Nov 29, 2024 | — |
| tacomaengineers | · Nov 26, 2024 | — |
| sunnydayssunshinecenter. | · Nov 13, 2024 | — |
| kansasrmc | · Nov 13, 2024 | — |
| formosacpa | · Nov 13, 2024 | — |
| clayplattefamily | · Nov 13, 2024 | — |
| askyouraccountant | · Nov 13, 2024 | — |
| pmrcenter | · Nov 13, 2024 | — |
In the newsAll →
No articles mention this group yet.