ZeroHour

kryptos

Ransomware / extortion group tracked from leak-site posts

Victims · 7d
0flat
Victims · 30d
0active targets
Victims · 90d
0
All-time (tracked)
8since 2025-10-08
Last post
11-06 19:25UTC
Estimated earnings
public reporting
Profile not written yet: the pipeline profiles the most active groups first, a few per run.

Leak-site victims

VictimDiscoveredDetails
Provincial Department of Health Services Sri Lanka · Nov 6, 2025Health Services – 145 Institutions – 439 Field Clinic Centres – 850 Medical Officer
Adichunchanagiri Institute Of Technology · Oct 24, 2025Educational Institute – 2500 Students – 150 Staff
Mea████████████ · Oct 10, 2025Architecture, Engineering & Design · Wisconsin, United States · 1,200 Employees
Har██████ · Oct 10, 2025Legal Services · Sydney, Australia · 250 Employees
Nor█████████████ · Oct 10, 2025Financial Services · Toronto, Canada · 450 Employees
🔒 Mea████████████ · Oct 8, 2025Architecture, Engineering & Design · Wisconsin, United States · 1,200 Employees https://mea█████.com/
🔒 Nor█████████████ · Oct 8, 2025Financial Services · Toronto, Canada · 450 Employees https://nor███████.ca/
🔒 Har██████ · Oct 8, 2025Legal Services · Sydney, Australia · 250 Employees https://www.har████████.au/

In the newsAll →

No articles mention this group yet.

Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .