Ransomware
leakeddata
0mentions, 7 days
0mentions, 30 days
31victims posted, 30 days
nonelast mentioned
CVEs in recent coverage
No CVEs named alongside this actor in the last 90 days.
Recent victims
- W... R...Nov 5, 2026
- Smith, Gambrell & Russell, LLPNov 5, 2026
- K... R...Nov 4, 2026
- W... G...Nov 4, 2026
- G... R...Nov 3, 2026
- S... G...Nov 2, 2026
- ArentFox SchiffOct 30, 2026
- P...Oct 30, 2026
- M... H...Oct 30, 2026
- A... F...Oct 30, 2026
- Susman Godfrey LLPOct 29, 2026
- Lowenstein Sandler LLPOct 28, 2026
- Morrison FoersterOct 28, 2026
- T... E...Oct 28, 2026
- S... H...Oct 28, 2026
- L...Oct 28, 2026
- Morrison CohenOct 26, 2026
- M... C...Oct 22, 2026
- M...rOct 22, 2026
- Kirkland & Ellis LLPOct 22, 2026
- K.r.a. ...sOct 22, 2026
- K.r.. ...sOct 21, 2026
- K.r.. ...Oct 21, 2026
- Porter Hedges LLPOct 21, 2026
- M... M...Oct 20, 2026
- P... H...Oct 20, 2026
- P...S...R...Oct 20, 2026
- Latham & WatkinsOct 19, 2026
- O'Hagan MeyerOct 9, 2026
- Baker McKenzieOct 8, 2026
A leak-site post is the group's claim, not confirmed by the victim.
Recent activity
No posts or advisories have named this actor recently.
References
From the MISP threat-actor galaxy, MITRE ATT&CK and RansomLook (CC BY 4.0). Activity is any post or advisory Watch Floor collected that names the actor or one of its aliases.
