ransomed
Ransomware / extortion group tracked from leak-site posts
Victims · 7d
0flat
Victims · 30d
0active targets
Victims · 90d
0
All-time (tracked)
75since 2023-08-21
Last post
10-30 10:21UTC
Estimated earnings
—public reporting
Profile not written yet: the pipeline profiles the most active groups first, a few per run.
Leak-site victims75 posts · newest first
| Victim | Discovered | Details |
|---|---|---|
| makflix.eu | · Sep 4, 2023 | we have access everything on their servers, including the Database,Customers Chats, and other non public documents. We require a ransom of $10,000 $9,000 |
| .nucleus.live | · Sep 4, 2023 | we have access everything on their servers, including the Database,Customers Chats, Bank Transfer Documents Archive Snapshot We require a ransom of $10,000 |
| Swipe.bg | · Sep 4, 2023 | We have successfuly obtained all data from Swipe.bg A online marketplace known for its cheap prices. Data we obtained: Userdata,Customer chats,SSNs,Numbers,Addresses and more We require a ransom of $50,000. |
| Balmit Bulgaria | · Sep 4, 2023 | We have successfuly obtained all data from Balmit.bg. We have got all of their data + source + private data from their servers. We require a ransom of $100,000 $80,000 Deal of the day |
| Jhooker | · Sep 3, 2023 | We have acquired all the information that any of their employees have ever downloaded or utilized on their systems. We have successfully accessed their entire cloud infrastructure. |
| I&G Brokers | · Sep 3, 2023 | I&G Brokers holds the distinction of being one of the most favored brokerage firms in Bulgaria. The first payment is now overdue, sample has been made public. Sample: pomf2.lain.la/f/96cf6f.7z |
| Optimity.co.uk | · Sep 3, 2023 | We've successfully obtained control of their entire Azure cloud environment, which now resides under our supervision. Regrettably for them and fortunately for us, we've also secured access to data from over 1000 companies that were utilizing their cloud services. In the event that Optimity does not comply with our demands, we will begin to initiate ransom actions against these companies, one at a time. The data breach encompasses a substantial 5 terabytes of information. |
| StateFarm | · Sep 3, 2023 | We possess a State Farm database that comprises complete customer and insurance details, containing a total of 400 million records. |
| S&P | · Sep 3, 2023 | Approximately 6 terabytes of data have been impacted. Due to the substantial data volume, we kindly request a payment to the following address exclusively: We insist on a payment of 200,000 euros. BTC Payment Address: bc1qqc7nla44te4wxyvf9j7zxtc5q296sxn94k6v00 |
| MetroClub.org | · Sep 3, 2023 | We successfully extracted the entire content of the metroclub.org website, belonging to Metroclub, a private club based in Washington, D.C. The extracted data amounts to 2.1 terabytes. The accompanying screenshot provides a glimpse of critical information, although we are still in the process of collecting additional data. Our haul includes the complete membership list, employee records, as well as source and customer data. |
| Powersports Marketing | · Sep 3, 2023 | We have successfuly obtained 2.2TB of data from powersports marketing. We are in hold of everything you can imagine that was stored on their servers. |
| Hawaii Health System | · Sep 3, 2023 | We were able to dump and deface the official site of the Hawaii health system. Wayback Archive Snapshot |
| phms.com.au | · Sep 3, 2023 | We have hacked and exported the database of phms.com.au. We have gathered root access and access to their mysql We require a ransom of $10,000 |
| paynesvilleareainsurance.com | · Sep 3, 2023 | We have compromissed the servers of paynesvilleareainsurance.com. We decided to make sure they remember us so we have also defaced them. Archive Snapshop We require a ransom of $10,000 |
| SKF.com | · Sep 3, 2023 | SKF�s network was compromised(by collaboration with Everest Ransomware Group) a few days ago. The company continues to be silent about the problem.A representative of the company should contact us immediately, instructions have all been sended in the emails.Otherwise, we will start communicating with your competitors.Data stolen : 2.19 TerabytesData Info : Internal Documents, Data Bases, Customer [�] We require a ransom of $100,000 |
| PSM | · Aug 29, 2023 | — |
| Metropolitan Club DC | · Aug 27, 2023 | — |
| State Farm | · Aug 26, 2023 | — |
| TransUnion | · Aug 25, 2023 | — |
| Jhookers | · Aug 25, 2023 | — |
| InG Brokers | · Aug 25, 2023 | — |
| Optimity | · Aug 25, 2023 | — |
| a1 | · Aug 25, 2023 | — |
| I&G Broker House | · Aug 21, 2023 | — |
| A1 Data Provider | · Aug 21, 2023 | — |
In the newsAll →
No articles mention this group yet.
Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .