ZeroHour

lorenz

Ransomware / extortion group tracked from leak-site posts

Victims · 7d
0flat
Victims · 30d
0active targets
Victims · 90d
0
All-time (tracked)
91since 2020-01-12
Last post
12-11 18:20UTC
Estimated earnings
public reporting
Profile not written yet: the pipeline profiles the most active groups first, a few per run.

Leak-site victims

VictimDiscoveredDetails
Bayer Heritage Federal Credit Union · Dec 11, 2023
EOS · Nov 15, 2023
Koh Brothers · Nov 9, 2023
Cogdell Memorial Hospital · Nov 9, 2023
Truck Bodies & Equipment International · Nov 7, 2023
Broad River Retail/Ashley Store · Oct 25, 2023
AllCare Pharmacy · Oct 2, 2023
BF&S Civil Engineers · Sep 12, 2023
Dee Sign · Sep 12, 2023
Felling Trailers, Inc. · Aug 30, 2023
Tarolli, Sundheim, Covell & Tummino LLP · Apr 5, 2023
Joy Cone Co, Joy Baking group, BoDeans Baking, Altesa · Apr 5, 2023
NGS Super · Apr 5, 2023
Intrasect Technologies · Apr 5, 2023
Moore Engineering · Apr 5, 2023
Manning Building Supplies · Mar 14, 2023
Tarolli · Mar 14, 2023
Hopsteiner · Feb 20, 2023
AmerisourceBergen/Censora - MWI Animal Health · Feb 6, 2023
Chestertons Inc. · Jan 10, 2023
Thor Specialties, Inc. · Jan 10, 2023
Shelco · Jan 10, 2023
Albina Asphalt · Dec 7, 2022
Holler-Classic · Nov 30, 2022
Nissan of Las Cruces · Nov 14, 2022
Salud Family Health · Nov 14, 2022
Main & Main Capital Group · Nov 10, 2022
Miracapo pizza company · Oct 27, 2022
Wes-tec inc. · Oct 18, 2022
Northern Contours Inc. · Sep 17, 2022
Laddawn Inc. · Sep 17, 2022
Engine Power · Aug 23, 2022
Northern Contours · Aug 22, 2022
Airtech · Aug 18, 2022
Tygavac · Aug 18, 2022
Challenge-mfg · Aug 18, 2022
Turner Enterprises · Aug 18, 2022
Wardhadaway · Aug 18, 2022
Musco · Aug 18, 2022
Tosoh · Aug 18, 2022
Brunk · Aug 18, 2022
Fuji · Aug 18, 2022
Bonneville · Aug 18, 2022
Wis-Pak · Aug 18, 2022
Biothane · Aug 18, 2022
Fandeli · Jul 28, 2022
Van Ausdall & Farrar, inc · Jul 13, 2022
Biothane usa · Jul 13, 2022
Gresco · Jul 13, 2022
Uppco · Jul 11, 2022

In the newsAll →

No articles mention this group yet.

Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .