payoutsking
ransomware group · aka PayoutsKing · unknown · active since 2026-06-15 (earliest leak-site post tracked by this dashboard)
PayoutsKing is a data-extortion group tracked on this dashboard since its first leak-site post on 2026-06-15, with 12 victims listed in total and the most recent post on 2026-09-02. It operates a leak site where it threatens to publish stolen data from non-paying victims, consistent with a double-extortion model. Its listed victims are concentrated in U.S. healthcare, engineering, and construction, with at least one European hospitality-sector company also named. Public vendor reporting on the group is limited: its origins, operator affiliations, initial-access methods, and ransom earnings are not widely documented and remain unknown.
- Double extortion: steals data and threatens publication unless a ransom is paid
- Operates a dedicated leak site naming victims, sometimes with partially masked names
- Low-volume, selective victim list (12 named victims in tracked activity)
- Multi-sector targeting, including healthcare, engineering, construction, and hospitality
- Initial access and attack tooling: not publicly documented (unknown)
- Whether the group deploys its own encryptor or operates extortion-only: unknown
Proliance Surgeons, H.W. Lochner, Turner, Casta Diva Group, Welldyne
No public figure.
Leak-site victims117 posts · newest first
| Victim | Discovered | Details |
|---|---|---|
| I****G | · Feb 27, 2026 | — |
| P****s | · Feb 26, 2026 | — |
| Grant Production Testing Services | · Feb 24, 2026 | — |
| K****g | · Feb 24, 2026 | — |
| S****a | · Feb 24, 2026 | — |
| D****s | · Feb 19, 2026 | — |
| T****. | · Feb 19, 2026 | — |
| U****s | · Feb 19, 2026 | — |
| E****s | · Feb 19, 2026 | — |
| L****s | · Feb 19, 2026 | — |
| P****p | · Feb 17, 2026 | — |
| Vortex Companies | · Feb 6, 2026 | — |
| Telia Norge AS | · Feb 6, 2026 | — |
| ESENTIA Energy Systems | · Feb 6, 2026 | — |
| Bay Ship & Yacht | · Feb 6, 2026 | — |
| Prater Engineering Associates | · Feb 6, 2026 | — |
| Sofinter S.p.a | · Feb 6, 2026 | — |
| Lehigh Valley Restaurant Group | · Feb 5, 2026 | — |
| Maderas del Alto Urgel | · Jan 21, 2026 | — |
| Bespoke Home Interior Design Group | · Jan 21, 2026 | — |
| V. FRAAS | · Jan 21, 2026 | — |
| Ash & Lacy Holdings | · Jan 21, 2026 | — |
| Aero-Coating | · Jan 21, 2026 | — |
| Caunton Engineering | · Jan 21, 2026 | — |
| B****p | · Jan 14, 2026 | — |
| C****g | · Jan 14, 2026 | — |
| L****p | · Jan 14, 2026 | — |
| A****g | · Jan 14, 2026 | — |
| M****l | · Jan 14, 2026 | — |
| A****s | · Jan 14, 2026 | — |
| V****S | · Jan 14, 2026 | — |
| Klüber Elektroanlagenbau | · Dec 25, 2025 | — |
| Visionwheel | · Dec 17, 2025 | — |
| Peugeot Motocycles | · Dec 16, 2025 | — |
| JJ White | · Dec 16, 2025 | — |
| Soapeople | · Dec 16, 2025 | — |
| Sanko Gosei Technology | · Dec 16, 2025 | — |
| Chemirol | · Dec 16, 2025 | — |
| Rameder | · Dec 16, 2025 | — |
| Bär Cargolift | · Dec 16, 2025 | — |
| Vereinigte-stadtwerke | · Dec 16, 2025 | — |
| V****l | · Dec 16, 2025 | — |
| K****n | · Dec 16, 2025 | — |
| Accord Carton | · Nov 25, 2025 | accordcarton.com |
| Klüber Elektroanlagenbau GmbH | · Nov 24, 2025 | klueber-elektro.de |
| Lithographix | · Nov 24, 2025 | lithographix.com |
| Irwin Car | · Nov 12, 2025 | irwincar.com |
| Time Equities | · Oct 29, 2025 | timeequities.com |
| Linxx Global Solutions | · Oct 8, 2025 | linxxglobal.com |
| Monterey Mushrooms | · Sep 3, 2025 | montereymushrooms.com |
In the newsAll →
No articles mention this group yet.