- Victims · 7d1+1 vs prior week
- Victims · 30d33
- Victims · 90d50
- All-time (tracked)421since 2025-03-12
- Last post10-31 17:25UTC
- Estimated earnings—public reporting
Profile · grok-4.7 · updated Summaries by Vani AI
Nightspire is a data-extortion group observed through a victim leak site. Leak-site tracking records 55 listed victims since 13 July 2026, including 22 in seven days and 31 in 30 days, with the latest listed post dated 9 October 2026. Recently named organizations include nonprofits, a pharmaceutical firm, manufacturers, professional services, logistics, hospitality, arts, and architecture in multiple countries. Public reporting has not established the group's origin, whether it runs an affiliate program, or which malware and intrusion tools it uses. No public ransom-revenue figure or CVE set has been reliably tied to Nightspire.
Tactics & tooling
- Publishes named victims on a data-leak extortion site
- Initial access method: unknown
- Ransomware or other payload: unknown
- Persistence, lateral movement, and exfiltration tooling: unknown
Targeted sectors
nonprofitpharmaceuticalsmanufacturingprofessional serviceslogisticshospitalityarts and culturearchitecture
Notable public victims
Fondy Food Pantry, The Bernard Osher Foundation, PMG Project Management Group, Mäntelhaus Kaiser GmbH & Co. KG, INAPI, Medcom Tech Information, WAGA Enterprises Architects LLC, Heidi's Events & Catering, Inc., Sangre de Cristo Arts and Conference Center, Vietnam SuperPort
Estimated earnings
No public figure.
Leak-site victims
421 posts · newest first| Victim | Discovered | Details |
|---|---|---|
| **F*A *.A | · 1d ago | — |
| U**IN* Group | · 14d ago | — |
| S*o**n* Public Schools | · 17d ago | — |
| Colorado Texas | · 18d ago | — |
| ***o* **s**e** Solutions | · 18d ago | — |
| Cognosis Limited | · 20d ago | — |
| G** Re******* Ltd | · 20d ago | — |
| Spo****** Public Schools | · 20d ago | — |
| MGT Lojistik AŞ | · 20d ago | — |
| KP Industries | · 20d ago | — |
| Fondy Food Pantry | · 23d ago | — |
| The Bernard Osher Foundation | · 23d ago | — |
| PMG Project Management Group | · 23d ago | — |
| Mäntelhaus Kaiser GmbH & Co. KG | · 23d ago | — |
| INAPI | · 23d ago | — |
| Medcom Tech Information | · 23d ago | — |
| WAGA Enterprises Architects LLC | · 23d ago | — |
| Heidi's Events & Catering, Inc. | · 23d ago | — |
| Sangre de Cristo Arts and Conference Center | · 23d ago | — |
| Vietnam SuperPort | · 23d ago | — |
| Valvorobica Industirale S.p.A | · 23d ago | — |
| KC Pharmaceuticals, Inc | · 23d ago | — |
| Sociedad Portuaria Mardique S.A. | · 24d ago | — |
| Sinae Phuket Luxury Hotel | · 24d ago | — |
| INI Fiocruz | · 24d ago | — |
| Lumabuilt | · 24d ago | — |
| Royal EGT | · 24d ago | — |
| Deese and Locklear Chiropractic Center | · 24d ago | — |
| KSL Dirtworks | · 24d ago | — |
| Nantou Shiuhkuang Senior High School. | · 24d ago | — |
| Asociación de Escribanos del Uruguay | · 24d ago | — |
| R***e Pa****** | · 26d ago | — |
| Forma Therapeutics Holdings, Inc. | · 29d ago | — |
| C*ro *nty *es | · Oct 1, 2026 | — |
| 360 Consulenza S.r.l. | · Sep 21, 2026 | — |
| Spo**** Schools | · Sep 21, 2026 | — |
| Great Bay Bio | · Sep 20, 2026 | — |
| DiamondLease | · Sep 12, 2026 | — |
| Perimetral Oriental de Bogotá S.A.S. | · Sep 12, 2026 | — |
| Ozel & Ozel Laws Office | · Sep 12, 2026 | — |
| Tuboaços da Amazônia Ltda. | · Sep 11, 2026 | — |
| Transportes Montejo S.A.S. | · Sep 1, 2026 | — |
| Easyoga | · Aug 31, 2026 | — |
| Truckworx | · Aug 31, 2026 | — |
| Victory Personal Care, Inc | · Aug 22, 2026 | — |
| Vi***** Pe****** C***, Inc | · Aug 19, 2026 | — |
| T****w**x | · Aug 18, 2026 | — |
| eas**** | · Aug 13, 2026 | — |
| Tianji Auto Care Service Company | · Aug 12, 2026 | — |
| T***w**x | · Aug 7, 2026 | — |
In the news
AllVictim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .