Watch Floor
Ransomware

leakeddata

0mentions, 7 days
0mentions, 30 days
31victims posted, 30 days
nonelast mentioned

CVEs in recent coverage

No CVEs named alongside this actor in the last 90 days.

Recent victims

  • W... R...
    Nov 5, 2026
  • Smith, Gambrell & Russell, LLP
    Nov 5, 2026
  • K... R...
    Nov 4, 2026
  • W... G...
    Nov 4, 2026
  • G... R...
    Nov 3, 2026
  • S... G...
    Nov 2, 2026
  • ArentFox Schiff
    Oct 30, 2026
  • P...
    Oct 30, 2026
  • M... H...
    Oct 30, 2026
  • A... F...
    Oct 30, 2026
  • Susman Godfrey LLP
    Oct 29, 2026
  • Lowenstein Sandler LLP
    Oct 28, 2026
  • Morrison Foerster
    Oct 28, 2026
  • T... E...
    Oct 28, 2026
  • S... H...
    Oct 28, 2026
  • L...
    Oct 28, 2026
  • Morrison Cohen
    Oct 26, 2026
  • M... C...
    Oct 22, 2026
  • M...r
    Oct 22, 2026
  • Kirkland & Ellis LLP
    Oct 22, 2026
  • K.r.a. ...s
    Oct 22, 2026
  • K.r.. ...s
    Oct 21, 2026
  • K.r.. ...
    Oct 21, 2026
  • Porter Hedges LLP
    Oct 21, 2026
  • M... M...
    Oct 20, 2026
  • P... H...
    Oct 20, 2026
  • P...S...R...
    Oct 20, 2026
  • Latham & Watkins
    Oct 19, 2026
  • O'Hagan Meyer
    Oct 9, 2026
  • Baker McKenzie
    Oct 8, 2026

A leak-site post is the group's claim, not confirmed by the victim.

Recent activity

No posts or advisories have named this actor recently.

References

From the MISP threat-actor galaxy, MITRE ATT&CK and RansomLook (CC BY 4.0). Activity is any post or advisory Watch Floor collected that names the actor or one of its aliases.