ms13-089
ransomware group · aka MS13 (tracked on this dashboard as ms13-089; no other public aliases identified) · unknown · active since unknown publicly; leak-site activity first tracked by this dashboard on 2026-08-15
MS13 is a data-leak extortion group observed operating a public leak site that lists victimized organizations by domain and geography. Widely reported vendor, law-enforcement, or blockchain-analytics research on the group's operators, origins, and affiliate model is currently unknown. This dashboard began tracking the leak site on 2026-08-15 and has recorded 1 victim post since then, with the most recent post on 2026-08-15 (servmarmg.cl, Chile) and 0 posts in the last 7 days, indicating a low-volume cadence. Recent leak-site listings span Chile, the United States, Luxembourg, and Italy, suggesting geographically dispersed targeting without an obvious regional focus. Initial-access techniques, tooling, and whether the group uses encryption in addition to data extortion are unknown.
- Operates a public leak site listing victims by domain and location (observed via dashboard tracking)
- Low-volume victim posting cadence: 0 listings in the last 7 days, 1 in the last 30 days and last 90 days (dashboard counts since 2026-08-15)
- Victim set spans multiple countries, including Chile, the United States, Luxembourg, and Italy (observed from recent listings)
- Listed victims appear to be small-to-mid-size professional-services organizations (inferred from listed domains)
- Initial access vectors, malware tooling, and extortion mechanics beyond victim publication: unknown (no widely reported vendor research identified)
servmarmg.cl (Chile, Valparaiso) - most recent tracked post, 2026-08-15 (source: dashboard leak-site tracking), brittanyresidential.com (USA, Ohio) - listed prior to dashboard tracking start; post date unknown (source: dashboard leak-site tracking), sjl-legal.com (Luxembourg, Luxembourg) - listed prior to dashboard tracking start; post date unknown (source: dashboard leak-site tracking), dgpcommercialisti.it (Italy, Reggio Emilia) - listed prior to dashboard tracking start; post date unknown (source: dashboard leak-site tracking), uro.com (USA, Virginia) - listed prior to dashboard tracking start; post date unknown (source: dashboard leak-site tracking)
No public figure.
Leak-site victims5 posts · newest first
| Victim | Discovered | Details |
|---|---|---|
| servmarmg.cl (Chile, Valparaíso) | · Aug 15, 2026 | Empresa con más de 25 años de experiencia en el rubro marítimo, orientada a ejecutar operaciones con estándares de calidad, control de riesgo y tiempos de respuesta consistentes... |
| brittanyresidential.com (USA, Ohio) | · May 5, 2026 | At Brittany Residential, Inc., we believe in creating a world where individuals with developmental disabilities are supported, valued, and empowered to live fulfilling lives. Our dedicated team provides compassionate, person-centered care that... |
| sjl-legal.com (Luxembourg, Luxembourg) | · Jan 15, 2026 | SJL is a high-end independent business law firm renowned for its savoir faire and reliability. The firm has been created in 2010 as an independent alternative investment funds, finance, corporate and insolvency & restructuring boutique law firm... |
| dgpcommercialisti.it (Italy, Reggio Emilia) | · Dec 15, 2025 | — |
| uro.com (USA, Virginia) | · Dec 15, 2025 | — |
In the newsAll →
No articles mention this group yet.