orion
ransomware group · aka Orion (name used on leak-site tracking; other aliases unknown) · unknown · active since unknown; earliest leak-site post tracked by this dashboard: 2026-08-05
Orion is a low-volume data-leak extortion operation tracked by this dashboard via its leak site, which posts victim entries naming targeted organizations. Activity is sparse: one victim post recorded since tracking began, with the most recent post dated 2026-08-05 and no posts in the last 30 or 7 days. Entries observed on the group's leak site include Pastas Allegri (pastasallegri.com.ve), a pasta producer, and a listing for Nitrex (nitrex.in); additional names appearing as leak-site 'popular tags' could not be reliably attributed to this group. Public vendor research, threat-actor origin information, published ransom amounts, and government or law-enforcement statements on this group are limited or unknown. Defenders should treat attribution and capability details as low-confidence pending further public reporting.
- Operates a dedicated leak site naming extortion victims with organization names and web domains
- Uses public victim listing as leverage, consistent with a data-leak extortion model
- Publishes victim entries with company logos and tags on the leak site (observed site structure)
- Initial access vector: unknown/not publicly documented
- Encryption and deployment tooling: unknown/not publicly documented
- Affiliation with known ransomware families or RaaS brands: unknown
Pastas Allegri (pastasallegri.com.ve) - pasta producer, listed on leak site, Nitrex (nitrex.in) - listed on leak site
No public figure.
Leak-site victims18 posts · newest first
| Victim | Discovered | Details |
|---|---|---|
| https://www.nitrex.in | · Aug 5, 2026 | — |
| Popular Tags | · Mar 29, 2026 | — |
| Pastas Allegri https://pastasallegri.com.ve | · Mar 29, 2026 | — |
| orion | · Jan 26, 2026 | — |
| Your clicks can earn you a Lamborghini | · Jan 26, 2026 | — |
| pricemodern | · Jan 13, 2026 | — |
| morrisgroupint | · Jan 13, 2026 | — |
| daubertchemical | · Jan 13, 2026 | — |
| emanic | · Jan 13, 2026 | — |
| udhaiyamdhall | · Jan 13, 2026 | — |
| kioti | · Jan 13, 2026 | — |
| sitrack | · Jan 13, 2026 | — |
| hetero | · Jan 13, 2026 | — |
| ipsenlogistics | · Jan 13, 2026 | — |
| albanybank | · Jan 13, 2026 | — |
| bridgestoneamericas | · Jan 13, 2026 | — |
| hphood | · Jan 13, 2026 | — |
| huntongroup | · Jan 13, 2026 | — |
In the newsAll →
No articles mention this group yet.