ZeroHour

sovcali

ransomware group · aka sovcali · unknown · active since 2026-08-08 (earliest leak-site post tracked by this dashboard; broader first-seen activity unknown)

Victims · 7d
0flat
Victims · 30d
1active targets
Victims · 90d
2
All-time (tracked)
2since 2026-08-08
Last post
08-20 15:44UTC
Estimated earnings
public reporting
Profile · glm-5.3-flash · updated

Sovcali is a ransomware/data-extortion group tracked on this dashboard via its leak site, with the earliest tracked post dated 2026-08-08. Activity is very low volume: two victims posted in total, one in the last 30 days and the most recent on 2026-08-20, with no new posts in the last 7 days. Listed victims include electric-vehicle maker Lucid Motors (listed as 'Lucidmotors'); the other listed victim, 'Alert', has not been clearly identified in public reporting. Beyond leak-site shaming, little is publicly documented: origin, other aliases, operator or affiliate structure, and attack tooling are unknown. No public earnings estimates or CVE associations were available at the time of writing.

Tactics & tooling
  • Operates a dedicated leak site naming victim organizations
  • Data-theft extortion via leak-site shaming
  • Posts victim entries with dates, enabling external activity tracking
  • Initial access, encryption, and negotiation tactics: not publicly documented
Targeted sectors
automotiveunknown (second listed victim 'Alert' not clearly identified)
Notable public victims

Lucid Motors (electric-vehicle manufacturer; listed as 'Lucidmotors' on the group's leak site), Alert (listed on the group's leak site; organization not clearly identified in public reporting)

Estimated earnings

No public figure.

Leak-site victims

VictimDiscoveredDetails
Alert · 26d agoIn accordance with our serious intent and our exclusive interest in negotiating solely with the company itself, we have refrained from initiating any discussions with any other company or competitor. To demonstrate that we are in possession of the data in question, we will release an additional 35 gigabytes of material belonging to this company within the next two days.We trust that the company’s officials will reach a definitive decision at the earliest opportunity
Lucidmotors · Aug 8, 2026The complete engineering archive of Lucid Motors and eShocan is now available: 5.078 terabytes of CATIA and STEP models, FEA and NVH analyses, multi-gigabyte CFD simulations of the LiDAR washing system, topology optimization studies, static and modal results for the Gravity and Midsize enclosures, BOMs, and internal progress reports.

In the newsAll →

No articles mention this group yet.

Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .