nightspire
ransomware group · aka nightspire (dashboard listing; no widely reported alternate names identified) · unknown · active since 2026-06-14 (earliest leak-site post tracked on this dashboard; earlier activity unknown)
NightSpire is a data-extortion group tracked on this dashboard primarily through its leak-site postings. Its leak site shows sustained activity, with 39 victims listed between 2026-06-14 and 2026-09-01 (roughly 3-4 new posts per week), indicating an actively operating group rather than sporadic activity. The victim set spans transportation and logistics, manufacturing, legal services, and consumer-facing businesses, with names suggesting victims across the Americas, Asia-Pacific, and North America. No widely reported public research detailing the group's origins, aliases, tooling, or affiliate relationships was identified at profile time, so many attributes remain unknown. No public earnings estimates or widely attributed CVEs were found.
- Operates a dedicated leak site listing victim organizations by name (39 listings since 2026-06-14)
- Leak-site postings imply a data-theft extortion model; whether the group also deploys encrypting ransomware is unknown
- Consistent posting cadence of ~3-4 new victims per week indicates sustained operational tempo
- Initial access vectors, malware tooling, and affiliate structure: unknown (no widely reported public technical research identified)
Transportes Montejo S.A.S., Easyoga, Truckworx, Victory Personal Care, Inc, Tianji Auto Care Service Company, The Mountain, Kates Nussman Ellis Earle & Landolfi LLP, Akribis Systems Pte Ltd
No public figure.
Leak-site victims384 posts · newest first
| Victim | Discovered | Details |
|---|---|---|
| T*** Defense | · Apr 1, 2026 | — |
| Beltran & Garcia Financial Investment SLU | · Mar 31, 2026 | — |
| CERUMO Co., Ltd | · Mar 31, 2026 | — |
| JT-ATFP, LLC | · Mar 31, 2026 | — |
| *d**n*** V**i*l* **s**b***s | · Mar 31, 2026 | — |
| D**o*s** Fr**e* *A | · Mar 29, 2026 | — |
| S***h***t*** **n**r***e of **v***h-**y A***n***ts | · Mar 28, 2026 | — |
| OTNet | · Mar 28, 2026 | — |
| Florida Therapy Services | · Mar 28, 2026 | — |
| *h**i **o**e** | · Mar 28, 2026 | — |
| *H* G** **O** | · Mar 28, 2026 | — |
| A*v**c** *e**c** ***em**i** | · Mar 27, 2026 | — |
| HLF Heizung-Sanitär GmbH | · Mar 25, 2026 | — |
| Anbogen Therapeutics Inc. | · Mar 25, 2026 | — |
| Eastex Environmental Laboratory | · Mar 25, 2026 | — |
| J***T*P, **C | · Mar 25, 2026 | — |
| *o**e-*a** du ***n*c**** | · Mar 23, 2026 | — |
| *L* **i**n*-**n**** GmbH | · Mar 23, 2026 | — |
| **l**a* & ***c** **n*n**** I**e*t**** *L* | · Mar 23, 2026 | — |
| Cannavative Group | · Mar 22, 2026 | — |
| SAS CAP ESTEL HOTEL | · Mar 22, 2026 | — |
| Semenya Furumele Consulting Engineers | · Mar 22, 2026 | — |
| **o**d* *h**a*y ***v***s | · Mar 22, 2026 | — |
| O**e* | · Mar 22, 2026 | — |
| LeBlanc, Fantaci, Villio, LLC | · Mar 21, 2026 | — |
| IASMOS | · Mar 21, 2026 | — |
| Accident Justice LLC | · Mar 21, 2026 | — |
| Fidanque Hermanos e Hijos, S.A | · Mar 21, 2026 | — |
| **V**C** *E**C** ***EM**I** | · Mar 21, 2026 | — |
| GD France | · Mar 20, 2026 | — |
| G* *r**c* | · Mar 19, 2026 | — |
| **ste* **vi**n***t** **b**a**** | · Mar 17, 2026 | — |
| G* *r**n*e | · Mar 17, 2026 | — |
| S*m**y* **ru**l* ***s**t**g **gi****r* | · Mar 17, 2026 | — |
| CFTC Metallurgie | · Mar 14, 2026 | — |
| S** *A* ***E* **T*L | · Mar 13, 2026 | — |
| **n*a**t** **o*p | · Mar 13, 2026 | — |
| Giaroli S.A.S | · Mar 12, 2026 | — |
| I**M** | · Mar 12, 2026 | — |
| NIXVAL IT Infrastructure | · Mar 12, 2026 | — |
| Taylor County Property Appraiser Office | · Mar 11, 2026 | — |
| E-Fci | · Mar 11, 2026 | — |
| JJR Engineering & Fabrication | · Mar 11, 2026 | — |
| Big Brothers Big Sisters | · Mar 11, 2026 | — |
| Tecnoedil S.A. Constructora | · Mar 11, 2026 | — |
| CFTC Métallurgie | · Mar 11, 2026 | — |
| Taylor County Property Appraiser's Office | · Mar 10, 2026 | — |
| T****r ****t* P**p***y ***r***e*** **f**e | · Mar 9, 2026 | — |
| C*T* M**al***g*e | · Mar 9, 2026 | — |
| T**n*e**l S.A. C***t**c***a | · Mar 8, 2026 | — |
In the newsAll →
No articles mention this group yet.