ZeroHour

nightspire

ransomware group · aka nightspire (dashboard listing; no widely reported alternate names identified) · unknown · active since 2026-06-14 (earliest leak-site post tracked on this dashboard; earlier activity unknown)

Victims · 7d
4▲4 vs prev. week
Victims · 30d
10active targets
Victims · 90d
33
All-time (tracked)
384since 2025-03-12
Last post
09-12 07:42UTC
Estimated earnings
public reporting
Profile · glm-5.3-flash · updated

NightSpire is a data-extortion group tracked on this dashboard primarily through its leak-site postings. Its leak site shows sustained activity, with 39 victims listed between 2026-06-14 and 2026-09-01 (roughly 3-4 new posts per week), indicating an actively operating group rather than sporadic activity. The victim set spans transportation and logistics, manufacturing, legal services, and consumer-facing businesses, with names suggesting victims across the Americas, Asia-Pacific, and North America. No widely reported public research detailing the group's origins, aliases, tooling, or affiliate relationships was identified at profile time, so many attributes remain unknown. No public earnings estimates or widely attributed CVEs were found.

Tactics & tooling
  • Operates a dedicated leak site listing victim organizations by name (39 listings since 2026-06-14)
  • Leak-site postings imply a data-theft extortion model; whether the group also deploys encrypting ransomware is unknown
  • Consistent posting cadence of ~3-4 new victims per week indicates sustained operational tempo
  • Initial access vectors, malware tooling, and affiliate structure: unknown (no widely reported public technical research identified)
Targeted sectors
Transportation and LogisticsManufacturingLegal / Professional ServicesConsumer Goods and RetailAutomotive Services
Notable public victims

Transportes Montejo S.A.S., Easyoga, Truckworx, Victory Personal Care, Inc, Tianji Auto Care Service Company, The Mountain, Kates Nussman Ellis Earle & Landolfi LLP, Akribis Systems Pte Ltd

Estimated earnings

No public figure.

Leak-site victims

VictimDiscoveredDetails
DiamondLease · 3d ago
Perimetral Oriental de Bogotá S.A.S. · 3d ago
Ozel & Ozel Laws Office · 3d ago
Tuboaços da Amazônia Ltda. · 4d ago
Transportes Montejo S.A.S. · 14d ago
Easyoga · 15d ago
Truckworx · 15d ago
Victory Personal Care, Inc · 24d ago
Vi***** Pe****** C***, Inc · 27d ago
T****w**x · 28d ago
eas**** · Aug 13, 2026
Tianji Auto Care Service Company · Aug 12, 2026
T***w**x · Aug 7, 2026
The Mountain · Jul 27, 2026
Kates Nussman Ellis Earle & Landolfi LLP · Jul 27, 2026
Akribis Systems Pte Ltd · Jul 27, 2026
Thai Seng International Co. Ltd · Jul 27, 2026
MKS Transformator · Jul 27, 2026
OPTIDEA GmbH · Jul 27, 2026
Furama Bukit Bintang · Jul 27, 2026
K. Venkatesh, Co · Jul 27, 2026
Wings Argo Private Limited · Jul 27, 2026
KSL Dirtworks LLC · Jul 27, 2026
Diffusion de Produits Inoxydables · Jul 27, 2026
TFG Benefits, Inc. · Jul 27, 2026
Auto Royal Company · Jul 23, 2026
Cedar Crest College · Jul 14, 2026
Webosphere · Jul 13, 2026
PCCC Realty LLC · Jul 8, 2026
Grupo Riquelme · Jun 25, 2026
Artistic Smiles · Jun 21, 2026
legendsmn(Blue Ox, Paul Bunyan, Lumberjack Electric) · Jun 18, 2026
dean cosmetic dentistry · Jun 18, 2026
Central Texas ***** ***** · Jun 16, 2026
Ri***** Co**** Europe S.r.l. · Jun 16, 2026
Guy E******* & F*******, P.A · Jun 16, 2026
B****S I******t***l · Jun 15, 2026
Sheraton Miramar Resort El Gouna · Jun 15, 2026
G**** R****l*e · Jun 15, 2026
Silsbee Police Department · Jun 14, 2026
K****** County. Mi**e**ta · Jun 14, 2026
WaxWorks Inc · Jun 14, 2026
Blue Nile Medical Center · Jun 14, 2026
Pattono S.r.l · Jun 12, 2026
Sierra West Jewelers · Jun 12, 2026
GRIP Outreach For Youth · Jun 8, 2026
Unique Litho, Inc · Jun 8, 2026
A*** G*** A*S* · Jun 8, 2026
ASIA STRATEGIC · Jun 8, 2026
First Mutual Holdings · Jun 5, 2026

In the newsAll →

No articles mention this group yet.

Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .