alphv
Also known as: blackcatFirst seen September 9, 2021Active731 claimed victims
The claims below are reproduced as posted by alphv on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
The operators of the ALPHV/BlackCat ransomware began their activity in December 2021, making posts on Dark Web forums to promote their affiliate program, offering other actors the opportunity to engage in a 'new type of ransomware family' developed from scratch using the Rust programming language. Some clear evidence indicates that the actors behind this new ransomware are not new to cybercrime, and there were links to other affiliate programs such as DarkSide, BlackMatter, and REvil.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| [DATA] Bakrie Group & Bakrie Sumatera Plantations | November 21, 2023 | ransomware_live | — |
| Hampton Newport News CSB | November 20, 2023 | ransomware_live | — |
| Autonomous Flight - @autonomousfly | November 19, 2023 | ransomware_live | — |
| U.L. COLEMAN COMPANIES | November 19, 2023 | ransomware_live | — |
| Tackle West | November 19, 2023 | ransomware_live | — |
| FEAM Maintenance | November 16, 2023 | ransomware_live | — |
| UPDATE! FEAM Maintenance | November 16, 2023 | ransomware_live | — |
| MeridianLink | November 15, 2023 | ransomware_live | — |
| ADH Health Products Inc | November 15, 2023 | ransomware_live | — |
| Cardinal MetalWorks | November 15, 2023 | ransomware_live | — |
| MeridianLink fails to file with the SEC..so we do it for them + 24 hours to pay | November 15, 2023 | ransomware_live | — |
| Execuzen | November 14, 2023 | ransomware_live | — |
| 4set.es | November 14, 2023 | ransomware_live | — |
| Naftor and Grupa Pern (Naftoport/ SIARKOPOL/ SARMATIA/ NAFTOSERWIS) is the most dangerous | November 14, 2023 | ransomware_live | — |
| SheelaFoam | November 14, 2023 | ransomware_live | — |
| Gnome Landscapes | November 14, 2023 | ransomware_live | — |
| Premise Health | November 14, 2023 | ransomware_live | — |
| St. Lucie County Tax Collector’s | November 13, 2023 | ransomware_live | — |
| ASM GLOBAL | November 13, 2023 | ransomware_live | — |
| Pricesmart | November 12, 2023 | ransomware_live | — |
| Dragos Inc | November 11, 2023 | ransomware_live | — |
| Mariposa Landscapes, Inc | November 10, 2023 | ransomware_live | — |
| Sinotech Group Taiwan | November 9, 2023 | ransomware_live | — |
| sheehyware.com | November 8, 2023 | ransomware_live | — |
| Japan Aviation Electronics Industry, Ltd | November 7, 2023 | ransomware_live | — |
| Certified Mortgage Planners | November 7, 2023 | ransomware_live | — |
| Bakrie Group & Bakrie Sumatera Plantations | November 7, 2023 | ransomware_live | — |
| Comfloresta | November 6, 2023 | ransomware_live | — |
| penanshin | November 5, 2023 | ransomware_live | — |
| Corsica-Ferries | November 5, 2023 | ransomware_live | — |
| Advarra leak | November 5, 2023 | ransomware_live | — |
| Currax Pharmaceuticals | November 5, 2023 | ransomware_live | — |
| HAL Allergy | November 2, 2023 | ransomware_live | — |
| AF Supply | November 2, 2023 | ransomware_live | — |
| Contact Cottrell and McCullough | November 2, 2023 | ransomware_live | — |
| Warning to Advarra & Gadi! | November 2, 2023 | ransomware_live | — |
| Town of Lowa | November 1, 2023 | ransomware_live | — |
| Advarra Inc | November 1, 2023 | ransomware_live | — |
| Advarra Inc.(PFIZER,GILEAD ETC AFFECTED) | October 31, 2023 | ransomware_live | — |
| WACOSA | October 29, 2023 | ransomware_live | — |
| ISRAEL STOP GENOCIDE IN GAZA | October 28, 2023 | ransomware_live | — |
| Morrison Community Hospital FULL HUGE LEAK + BONUS | October 28, 2023 | ransomware_live | — |
| CBS | October 27, 2023 | ransomware_live | — |
| Mutual Underwriters | October 27, 2023 | ransomware_live | — |
| LBA | October 25, 2023 | ransomware_live | — |
| thewalkerschool | October 25, 2023 | ransomware_live | — |
| City of Pittsburg | October 24, 2023 | ransomware_live | — |
| 3-D Engineering | October 23, 2023 | ransomware_live | — |
| www.portage.k12.in.us | October 23, 2023 | ransomware_live | — |
| 3-D Engineering/ 3-D Precision Machine | October 23, 2023 | ransomware_live | — |
| The Law Offices of Julian Lewis Sanders & Associates FULL LEAK! | October 21, 2023 | ransomware_live | — |
| kvc constructors inc | October 20, 2023 | ransomware_live | — |
| CADRE | October 19, 2023 | ransomware_live | — |
| Innovattel LLC | October 19, 2023 | ransomware_live | — |
| SIIX Corporation | October 17, 2023 | ransomware_live | — |
| Catarineau & Givens P.A. FULL LEAK! | October 17, 2023 | ransomware_live | — |
| Boise Rescue Mission Ministries | October 16, 2023 | ransomware_live | — |
| QSI INC - Credit Cards & Transaction Processing | October 15, 2023 | ransomware_live | — |
| The Law Offices of Julian Lewis Sanders & Associates | October 14, 2023 | ransomware_live | — |
| Morrison Community Hospital | October 13, 2023 | ransomware_live | — |
| Catarineau & Givens P.A | October 11, 2023 | ransomware_live | — |
| Mid-America Real Estate Group | October 11, 2023 | ransomware_live | — |
| Institut Technologique FCBA | October 11, 2023 | ransomware_live | — |
| BrData Tecnologia | October 9, 2023 | ransomware_live | — |
| i-Can Advisory Group inc | October 9, 2023 | ransomware_live | — |
| Law Society of South Africa | October 9, 2023 | ransomware_live | — |
| First Judicial Circuit - Florida Court | October 9, 2023 | ransomware_live | — |
| Wyndemere Senior Care, LLC | October 9, 2023 | ransomware_live | — |
| IKM | October 8, 2023 | ransomware_live | — |
| McLaren Health Care Corporation | October 4, 2023 | ransomware_live | — |
| The One Group | October 3, 2023 | ransomware_live | — |
| Pain Care | October 2, 2023 | ransomware_live | — |
| Arga Medicali | October 1, 2023 | ransomware_live | — |
| MNGI Digestive Health (TIME IS UP) | September 30, 2023 | ransomware_live | — |
| Motel One | September 30, 2023 | ransomware_live | — |
| LEAKED! Motel One | September 30, 2023 | ransomware_live | — |
| MNGI Digestive Health | September 29, 2023 | ransomware_live | — |
| Andalusia Group | September 29, 2023 | ransomware_live | — |
| mclaren health care | September 29, 2023 | ransomware_live | — |
| Hochschule Furtwangen University | September 28, 2023 | ransomware_live | — |
| Pond Security | September 26, 2023 | ransomware_live | — |
| BestPack Packaging | September 26, 2023 | ransomware_live | — |
| Prestige Care | September 26, 2023 | ransomware_live | — |
| Nordic Security Services | September 26, 2023 | ransomware_live | — |
| Woody Anderson Ford | September 26, 2023 | ransomware_live | — |
| GCserv.com | September 26, 2023 | ransomware_live | — |
| PRETZEL-STOUFFER | September 25, 2023 | ransomware_live | — |
| ZZColdstores | September 25, 2023 | ransomware_live | — |
| zzcoldstores.com | September 25, 2023 | ransomware_live | — |
| Phil-Data Business Systems was hacked. A lot of critical data was stolen. We've gained acc | September 24, 2023 | ransomware_live | — |
| MNGI Digestive Health2 | September 24, 2023 | ransomware_live | — |
| Clarion is the most dangerous electronics to use that can cause you to be hacked | September 23, 2023 | ransomware_live | — |
| TAOGLAS | September 22, 2023 | ransomware_live | — |
| PainCare | September 22, 2023 | ransomware_live | — |
| Yusen Logistics | September 22, 2023 | ransomware_live | — |
| Carlo Ditta | September 22, 2023 | ransomware_live | — |
| Pik Rite | September 22, 2023 | ransomware_live | — |
| SAGAM Groupe - a company with dozens of vulnerabilities in its network has been hacked and | September 22, 2023 | ransomware_live | — |
| Progressive Leasing ( 40 million Customers PII Data ) | September 22, 2023 | ransomware_live | — |
| NOVEXCO | September 21, 2023 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).