payload
ransomware group · aka Payload · unknown · active since 2025 per public ransomware tracking; exact month and launch date unknown. This dashboard has tracked the group's leak site since 2026-06-13.
Victims · 7d
0flat
Victims · 30d
1active targets
Victims · 90d
18
All-time (tracked)
74since 2026-02-17
Last post
08-20 19:48UTC
Estimated earnings
—public reporting
Profile · glm-5.3-flash · updated
Payload is a relatively new ransomware and data-extortion operation that publishes victim data on a dedicated leak site when ransom is not paid. Observed activity is low-volume but steady: 20 victims posted in the 90 days ending 2026-08-20, with the most recent post on 2026-08-20. Named targets are largely small and mid-sized organizations, with a visible concentration in Europe alongside some Middle East-linked names, and the group has been cited in regional threat reporting on Qatar's 2025-26 threat data. Public technical detail on Payload's tooling, initial access, affiliate structure, origin, and earnings is scarce, so those attributes remain unknown. Defenders should treat it as an active, small-to-mid-volume extortion actor.
Tactics & tooling
- Double extortion: announces victims on its leak site when ransom is not paid.
- Low posting cadence, roughly 1-2 victim announcements per week over the observed 90-day window.
- Observed victim base skews toward small and mid-sized organizations in Europe (DACH, France, Italy), with occasional public-sector/municipal and Middle East-linked targets.
- Encryption toolkit, malware family, and infrastructure: not documented in widely available public reporting; unknown.
- Initial access vectors: unknown; no widely reported attribution to specific CVEs or access brokers as of this profile.
- Affiliate or ties to other ransomware brands: unconfirmed in public reporting; unknown.
Targeted sectors
ManufacturingProfessional services (engineering, architecture, consulting)Food and beverageMedia and film productionIT services and datacenterLocal government / municipalitiesInvestment / holding
Notable public victims
Qualiflex Datacenter, Zara Investment Holding, B&B Hydraulik, Stücheli Architekten, Baya Technologies, Hans & Jos. Kronenberg GmbH, CKR Consulting Engineers, Roofinox, Commune of Castries, Vela Film S.r.l.
Estimated earnings
No public figure.
Leak-site victims74 posts · newest first
| Victim | Discovered | Details |
|---|---|---|
| NKAR Travels & Tours | · Mar 30, 2026 | NKAR Travel House is a premier travel agency in Sri Lanka, offering a diverse range of carefully curated tours and travel packages tailored to various interests. Their services include classical, cultural, wildlife, wedding, and experiential tours, as well as luxury options and tailor-made experiences. The agency aims to provide guests with unforgettable journeys through Sri Lanka's rich heritage, stunning landscapes, and vibrant culture. |
| Q2 Artificial Lift Services | · Mar 28, 2026 | Q2 Artificial Lift Services is a leading company specializing in the sales, service, engineering, and manufacturing of down hole rod pumps. With a state-of-the-art facility in Red Deer, Alberta, and over 40 service locations across Canada and the USA, they provide innovative solutions and technical support. Their product range includes various types of rod pumps, production tools, and specialty accessories. Q2 aims to maximize productivity and enhance the operational lifespan of their clients' pumping systems. |
| Don-Nan | · Mar 28, 2026 | Q2 Artificial Lift Services specializes in the sales, service, engineering, and manufacturing of down hole rod pumps, positioning itself as a leader in artificial lift technology. The company operates from a state-of-the-art 118,000 sq. ft. facility and boasts over 40 service and repair locations across Canada and the USA. Q2 offers a comprehensive range of products, including API pumps, specialty tubing, and production tools, combined with supportive engineering and technical services. Their commitment to quality and innovation enables them to provide tailored solutions that maximize productivity for their clients in the oilfield sector. |
| A A Al Moosa Enterprises (ARENCO Group) | · Mar 28, 2026 | A.A. Al Moosa Enterprises, also known as ARENCO Group, is a diversified conglomerate based in Dubai, with interests spanning architectural and engineering consulting, real estate, hospitality, car rentals, manufacturing, and interior design. Established in 1971, the group has grown into one of the top family-owned business groups in Dubai, focusing on quality, service, and innovation. |
| carlysle.net | · Mar 27, 2026 | Carlysle.net belongs to Carlysle Engineering, Inc., an engineering firm based in Boston. The company specializes in designing, installing, and maintaining fire protection systems such as sprinklers. They also provide building inspections and consulting services to ensure compliance with safety and insurance requirements. |
| Vancompare Insurance | · Mar 25, 2026 | Vancompare.co.uk is a UK-based online comparison service that helps users find the best insurance deals for cars, homes, businesses, and other types of coverage. The site allows users to quickly compare prices and terms from multiple insurance providers to choose the most suitable and cost-effective policy. |
| iGLS | · Mar 23, 2026 | IGLS Laboratorio specializes in genetic and reproductive immunology, providing advanced diagnostic services tailored for assisted reproduction centers, specialists, hospitals, and healthcare institutions worldwide. The company is committed to innovation, utilizing cutting-edge technology and scientific advancements to deliver precise solutions for fertility issues. Their extensive range of services includes preconception, preimplantation, and prenatal testing, aimed at both medical professionals and patients facing infertility challenges. |
| HOPPECKE Singapore | · Mar 22, 2026 | HOPPECKE Asia Pacific Pte Ltd is the regional headquarters of the HOPPECKE Batteries Group in Singapore. It manages sales, service, and distribution for the Asia-Pacific region, providing industrial energy storage solutions. The company supports sectors including renewable energy, rail, telecommunications, and logistics. |
| TS Lines Philippines | · Mar 20, 2026 | Trusted shipping and logistics partner in the Philippines offering container transport and vessel services. |
| Lucky Innovative Manufacturing Corporation | · Mar 19, 2026 | Lucky Innovative Manufacturing Corporation is a company based in Lipa City, Batangas, Philippines, specializing in the import and export of textiles and apparel products, including fabrics, hats, gloves, and other items from the garment industry. The company is registered as an international trading participant and is listed in global trade databases as a supplier and importer across various countries. Its operations focus on manufacturing and distributing goods to international markets, leveraging its strategic location in the Philippines. |
| Notaría 89 | · Mar 19, 2026 | Notaría 89 – Edomex, located in the State of Mexico, offers specialized legal services for various real estate transactions and contracts. Under the leadership of Licenciado Luis Octavio Hermoso y Colín, the notary public provides services such as the granting of powers, purchase contracts, real estate mortgages, and the constitution of societies. The notary public also handles testaments and other notarial services, ensuring all legal requirements are met for property transfers and other legal matters. |
| Royal Bahrain Hospital | · Mar 15, 2026 | Established in 2011, Royal Bahrain Hospital (RBH) is a leading healthcare facility in Bahrain, offering a wide range of medical specialties and services. The hospital is equipped with 70 beds and provides both inpatient and outpatient care, including operating rooms, maternity services, and various diagnostic facilities. RBH is committed to delivering quality and affordable healthcare to its patients, with a focus on clinical excellence and patient satisfaction. The hospital serves a diverse clientele, including residents of Bahrain and neighboring countries such as Oman, Qatar, Saudi Arabia, and the UAE. |
| Tyler Media | · Mar 13, 2026 | Tyler Media is a comprehensive media company in Oklahoma, offering a variety of services that include radio, television, and outdoor advertising. With several radio stations and partnerships with prominent television networks, they cater to a diverse audience, showcasing both English and Spanish content. Their key clients range from local businesses to larger organizations seeking effective marketing solutions and brand awareness. |
| Río Grande (Puerto Rico) | · Mar 13, 2026 | Río Grande is a municipality located in Puerto Rico, a U.S. territory in the Caribbean. It has its own local government that manages public services, administration, and community programs for residents. |
| Thai Solar Energy Public | · Mar 3, 2026 | Thai Solar Energy Public Company Limited (TSE) was established in 2008 based in Bangkok, Thailand. TSE is the first in Southeast Asia to have effectively applied an advanced technology to utilize the sun's radiation and converting it into green energy. TSE is in collaboration with several World renowned energy institutes and specialized energy companies to continuously evaluate our performance. |
| United Limsun International Trading | · Mar 3, 2026 | United Limsun Corporation is a rapidly growing retail and distribution company that selects multifunctional brands of everyday goods for urban travellers. The company specialises in sourcing, supplying, distributing and marketing high-quality goods. |
| Easy Servizi | · Feb 28, 2026 | Easy Servizi is an Italian company that provides technical and operational services for utility network operators (gas, electricity, and water), including meter installation and replacement, network support, and customer data management. It operates as a contractor for energy and water companies rather than as a direct service provider to consumers. |
| In.Sa.Cor | · Feb 27, 2026 | InSaCor specializes in a wide range of gas-related products and sanitary solutions, including gas regulators, fittings, and various types of plumbing fixtures. Their offerings include high-quality materials for both residential and commercial applications, catering to clients in the construction and maintenance sectors. |
| Prizm Pain | · Feb 27, 2026 | Prizm Pain Specialists is a privately held medical practice based in Canton, Michigan, specializing in comprehensive pain management for both chronic and acute conditions. |
| Alcoholes Finos Dominicanos | · Feb 23, 2026 | Alcoholes Finos Dominicanos, S.A. (AFD) is a Dominican company that produces food-grade alcohol and rum-related spirits using sugarcane juice as its main raw material. The company focuses on alcohol production for human consumption and uses industrial distillation processes with quality and sustainability programs. |
| J.T. Pack of Foods | · Feb 19, 2026 | J.T. Pack of Foods Co., Ltd. is a Thai company that specializes in food packaging solutions for businesses such as restaurants, hotels, and food manufacturers. Founded in 1989, it offers a wide range of packaging products, including plastic, paper, and eco-friendly materials, as well as custom branding services. The company operates as both a manufacturer and distributor, serving thousands of clients across Thailand. |
| Grid Fine Finishes | · Feb 19, 2026 | Grid Fine Finishes (GFF) is an Egyptian company based in Cairo that specializes in interior fit-out and fine finishing services. The company delivers turnkey projects, including interior construction, electro-mechanical works, lighting, and custom furniture solutions. Founded in 2015, GFF focuses on commercial, hospitality, and residential spaces. |
| sodic.com | · Feb 17, 2026 | SODIC is a leading real estate development company in the region, with a distinguished track record of over 28 years of operations in West Cairo, East Cairo, and the North Coast. SODIC brings to the market award-winning developments that cater to the country’s ever-growing need for high-quality residential, commercial, & retail property as well as sustainable, large-scale, mixed-use developments and vibrant communities that are home to over 30,000 people today. SODIC is listed on the Egypt’s Stock Exchange since 1996 under OCDI.CA. |
| Almacenes Distribuidores de la Frontera | · Feb 17, 2026 | Almacenes Distribuidores de la Frontera ha forjado una trayectoria sólida en el Estado de Chihuahua. Desde sus inicios, la empresa ha evolucionado para convertirse en un referente en la industria de tiendas de conveniencia, gasolineras y embotelladoras de agua. Dos nombres que resuenan fuertemente en el mercado son Superette y Del Rio. Estas tiendas de conveniencia se han convertido en destinos confiables para los consumidores que buscan conveniencia, variedad y un servicio excepcional. |
In the newsAll →
Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .