payoutsking
ransomware group · aka PayoutsKing · unknown · active since 2026-06-15 (earliest leak-site post tracked by this dashboard)
PayoutsKing is a data-extortion group tracked on this dashboard since its first leak-site post on 2026-06-15, with 12 victims listed in total and the most recent post on 2026-09-02. It operates a leak site where it threatens to publish stolen data from non-paying victims, consistent with a double-extortion model. Its listed victims are concentrated in U.S. healthcare, engineering, and construction, with at least one European hospitality-sector company also named. Public vendor reporting on the group is limited: its origins, operator affiliations, initial-access methods, and ransom earnings are not widely documented and remain unknown.
- Double extortion: steals data and threatens publication unless a ransom is paid
- Operates a dedicated leak site naming victims, sometimes with partially masked names
- Low-volume, selective victim list (12 named victims in tracked activity)
- Multi-sector targeting, including healthcare, engineering, construction, and hospitality
- Initial access and attack tooling: not publicly documented (unknown)
- Whether the group deploys its own encryptor or operates extortion-only: unknown
Proliance Surgeons, H.W. Lochner, Turner, Casta Diva Group, Welldyne
No public figure.
Leak-site victims117 posts · newest first
| Victim | Discovered | Details |
|---|---|---|
| Sofo Foods | · Aug 21, 2025 | sofofoods.com |
| Creditinfo | · Jul 23, 2025 | creditinfo.com |
| Thompson+Hanson | · Jul 21, 2025 | thompsonhanson.com |
| MEDIALAB | · Jul 15, 2025 | medialab3dsolutions.com |
| Schlemmer Holding GmbH | · Jul 14, 2025 | schlemmer.com |
| Gateway Community | · Jul 7, 2025 | — |
| Arch-Con Corporation | · Jul 7, 2025 | — |
| KOLBUS | · Jul 7, 2025 | — |
| CR Architecture + Design | · Jul 7, 2025 | — |
| Institute of Culinary Education | · Jul 7, 2025 | — |
| Belmont Engineered Plastics | · Jul 7, 2025 | — |
| Crenshaw Community Hospital | · Jul 7, 2025 | — |
| BARIATRIX NUTRITION | · Jul 7, 2025 | — |
| EvoluPharm | · Jul 7, 2025 | — |
| Silent Gliss Italia | · Jul 7, 2025 | — |
| Rhea Vendors Group SpA | · Jul 7, 2025 | — |
| LTL | · Jul 7, 2025 | — |
In the newsAll →
No articles mention this group yet.