Ransomware Activity

Victims as claimed on gang extortion sites, refreshed every two minutes. A claim means data was already stolen. Where shown, a gang's country is an assessed link from public law-enforcement and industry reporting, not telemetry.

Claims in window
100
Active gangs
28
Most active
qilin
Top sector
Manufacturing
  • A-RMS

    17h ago
    emperadorGovernment & Defense

    We encrypted your servers and stole some of your source code, along with some sensitive information. If you do not pay the ransom, we will contact and attack your employees, clients, and partners to destroy your business. [Sector: Technology]

  • AyT COMPUTERS SRL

    22h ago
    emperadorTechnology

    Argentine Company operates in the field of electronic security systems, video surveillance, monitoring and IT infrastructure. There are many customer documents and employee data. Financial documents, customer cards with phone numbers and addresses. [Sector: Finance, Technology]

  • AB InBev

    1d ago
    emperadorBelgiumAgriculture and Food Production

    AB InBev is the world's largest brewer, headquartered in Belgium, known for Budweiser, Corona, and Stella Artois . We hold 329,244 AB InBev social-listening alerts, 2,510 corporate emails across all subsidiaries, 19K access logs, GBS portal records, internal PKI certificates, and 3.2GB of Azure blob assets. Our demand is $1,000,000 in BTC. [Sector: Retail, Manufacturing]

  • Phoenix S&S GmbH

    1d ago
    emperadorGermanyManufacturing

    German company from Frankfurt am Main, which deals with building maintenance, construction services, logistics and security. Archived personal and corporate data of employees and customers. Here are the most important documents. [Sector: Manufacturing, Finance, Transportation]

  • Frommann Energie GmbH

    1d ago
    emperadorGermanyEnergy & Utilities

    German company that sells and delivers fuels, primarily heating oil (Heizöl), but also motor fuels and lubricants. Archived personal and corporate data of employees and customers. Here are the most important documents. [Sector: Manufacturing, Finance, Technology]

  • JS Constructor, INC

    2d ago

    JS Contractor Inc. is a Philippine recruitment and manpower agency that specializes in recruiting, screening, processing, and deploying Filipino workers for overseas employment. Established in 1977, the company connects qualified applicants with international employers across industries such as manufacturing, engineering, technical services, and skilled labor. Through its website, applicants can explore job opportunities, submit applications, and access information about overseas employment. We have all your critical files, encrypted with the strongest encryption, along with over 150,000 resumes and applicants' vaccination records. This includes 3.5 GB of your databases containing sensitive applicant information. PI and SPI data. A total of millions. Contact us, or we will publish your applicants' data and critical files. Other threat actors will use it for identity theft and other crimes. We will ensure your company's reputation will be in hell. Your business integrity will be compromised. Loss of stakeholders will follow. And the company's credibility will be damaged. This will be your downfall. session: 05690c095fbbc61a04e6bdb09d92c535f4866f571db2e2d54e31bbb245ac886d43 Homepage: emprdr4p7iwlhpky33tswt3k2qdeljyjcdpoysabudmmrz4z32laexad.onion Client: emprdrcfhpvym7uwqvxky6ympquibzxfxuor6qeexk7lz3sxz5t2ubqd.onion/client [Sector: Other]

  • B2Chat

    3d ago
    emperadorTechnology

    B2Chat is a multimillion dollar business communication platform based in Spain that provides tools for customer support, sales, and engagement. It allows businesses to interact with customers through various channels, such as live chat, chatbots, and messaging apps (for example, WhatsApp, Facebook Messenger, and Telegram). The platform is designed to help companies streamline communication, improve response times, and enhance customer satisfaction. This leak includes sensitive financial information, employees' names, emails, and phone numbers, as well as clients' and partners' data. If you do not pay the ransom, we will contact and attack your employees, clients, and partners to destroy your business. [Sector: Technology]