alphv
Also known as: blackcatFirst seen September 9, 2021Active731 claimed victims
The claims below are reproduced as posted by alphv on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
The operators of the ALPHV/BlackCat ransomware began their activity in December 2021, making posts on Dark Web forums to promote their affiliate program, offering other actors the opportunity to engage in a 'new type of ransomware family' developed from scratch using the Rust programming language. Some clear evidence indicates that the actors behind this new ransomware are not new to cybercrime, and there were links to other affiliate programs such as DarkSide, BlackMatter, and REvil.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| barts health nhs trust | June 30, 2023 | ransomware_live | — |
| National Institutional Facilitation Technologies (Pvt) Limited | June 22, 2023 | ransomware_live | — |
| Craig & Associates, LLC | June 21, 2023 | ransomware_live | — |
| COEX | June 20, 2023 | ransomware_live | — |
| Strait & Lamp Group | June 20, 2023 | ransomware_live | — |
| Mammoth Energy (NASDAQ: TUSK) | June 19, 2023 | ransomware_live | — |
| The Dufresne Group - DSG - ASHLEY HOMESTORES | June 18, 2023 | ransomware_live | — |
| The Reddit Files | June 17, 2023 | ransomware_live | — |
| Bauer Built | June 17, 2023 | ransomware_live | — |
| Creative Liquid Coatings | June 16, 2023 | ransomware_live | — |
| Badan Operasi Bersama Pt Bumi Siak Pusako Pertamina Hulu | June 16, 2023 | ransomware_live | — |
| Plott Corporation | June 15, 2023 | ransomware_live | — |
| Sonangol | June 15, 2023 | ransomware_live | — |
| Alpha Data | June 15, 2023 | ransomware_live | — |
| New Horizons Medical | June 14, 2023 | ransomware_live | — |
| Automatic Systems - is a company with extremely low security of its network and products w | June 12, 2023 | ransomware_live | — |
| Krack Zapaterías | June 11, 2023 | ransomware_live | — |
| Coca-Cola FEMSA | June 10, 2023 | ransomware_live | — |
| Silicon Valley Mechanical | June 9, 2023 | ransomware_live | — |
| CASEPOINT pt2 | June 8, 2023 | ransomware_live | — |
| Stylish Fabric (stylishfabriccom) | June 5, 2023 | ransomware_live | — |
| North West Paving Ltd | June 5, 2023 | ransomware_live | — |
| D&K Group, Inc | June 5, 2023 | ransomware_live | — |
| Tension Corporation | June 3, 2023 | ransomware_live | — |
| hwlebsworth | June 2, 2023 | ransomware_live | — |
| JPW Industries (jpwindustriescom) | Baileigh Industrial (baileighcom) | With SpaceX Data [ | June 2, 2023 | ransomware_live | — |
| Brinkmann & Niemeijer Motoren | June 1, 2023 | ransomware_live | — |
| casepointcom (UPDATE) | May 30, 2023 | ransomware_live | — |
| First Community Credit Union | May 26, 2023 | ransomware_live | — |
| Procurri | May 26, 2023 | ransomware_live | — |
| wenntownsend | May 26, 2023 | ransomware_live | — |
| Norton Healthcare | May 25, 2023 | ransomware_live | — |
| The Middleton Group | May 24, 2023 | ransomware_live | — |
| HIGHLANDHOMES | May 24, 2023 | ransomware_live | — |
| valleywomenshealth | May 24, 2023 | ransomware_live | — |
| Voxx Electronics - company, which has a huge number of vulnerabilities was hacked A large | May 24, 2023 | ransomware_live | — |
| FajarPaper was hacked The most dangerous company to cooperate with in Indonesia may pose a | May 21, 2023 | ransomware_live | — |
| Reach Cooling Group was hacked A company whose cooperation is dangerous to your business h | May 21, 2023 | ransomware_live | — |
| It Works Global | May 19, 2023 | ransomware_live | — |
| E4NET | May 18, 2023 | ransomware_live | — |
| TaslyUS | May 18, 2023 | ransomware_live | — |
| Group DIS leak 1/2 | May 17, 2023 | ransomware_live | — |
| PM Medical Billing was hacking A company with multiple vulnerabilities in its network allo | May 17, 2023 | ransomware_live | — |
| Sun Pharmaceutical Industries Ltd | May 16, 2023 | ransomware_live | — |
| ORION | May 16, 2023 | ransomware_live | — |
| PCS Wireless | May 15, 2023 | ransomware_live | — |
| Group DIS (Direct Info Services) | May 15, 2023 | ransomware_live | — |
| QUORUMIS | May 15, 2023 | ransomware_live | — |
| Academy Mortgage Corporation | May 14, 2023 | ransomware_live | — |
| AKRON Mquinas Agrcolas | May 13, 2023 | ransomware_live | — |
| Libyana was hacked A company with an enormous amount of vulnerabilities has allowed its cu | May 12, 2023 | ransomware_live | — |
| ResultsCX | The result of many unknown breaches? | May 11, 2023 | ransomware_live | — |
| Essen Medical Associates | May 10, 2023 | ransomware_live | — |
| Constellation Software Inc 2 | May 10, 2023 | ransomware_live | — |
| Transformative Healthcare | May 8, 2023 | ransomware_live | — |
| Eagle Eye Produce | May 6, 2023 | ransomware_live | — |
| Grupo Cativa was hacked Huge amounts of critical information have been stolen | May 5, 2023 | ransomware_live | — |
| Axure Software Solutions - a company with an extremely low level of protection was hacked | May 5, 2023 | ransomware_live | — |
| KKDICOID including companies AICC, JBI, TJFI (part of the kddicom holding company, whose d | May 5, 2023 | ransomware_live | — |
| Coteccons Group was hacked One of the most insecure construction companies in Asia has lea | May 5, 2023 | ransomware_live | — |
| Constellation Software Inc | May 4, 2023 | ransomware_live | — |
| Willamette Falls | May 4, 2023 | ransomware_live | — |
| Aeco was hacked A lot of confidential customer data was stolen | May 3, 2023 | ransomware_live | — |
| American Foam & Packaging | May 2, 2023 | ransomware_live | — |
| ambitco - finvestambitco Private Banking | May 2, 2023 | ransomware_live | — |
| EirMed Devices, part of TRELLEBORG | May 2, 2023 | ransomware_live | — |
| Tony Clark Consulting | May 1, 2023 | ransomware_live | — |
| Sherman Consulting Services | April 29, 2023 | ransomware_live | — |
| KMC Savills | April 29, 2023 | ransomware_live | — |
| McDermott International, Ltd | April 29, 2023 | ransomware_live | — |
| Western Digital Chronicles II: The Weekly Descent into Oblivion | April 28, 2023 | ransomware_live | — |
| e-Hazardcom and ArcWearcom (with data) | April 27, 2023 | ransomware_live | — |
| accesscontrolsecuritycom | April 26, 2023 | ransomware_live | — |
| Fundação Carlos Chagas | April 26, 2023 | ransomware_live | — |
| BERNINA International AG | April 25, 2023 | ransomware_live | — |
| Agensi Kaunseling dan Pengurusan Kredit (Credit Consulting and Management Agency of Malays | April 25, 2023 | ransomware_live | — |
| NETISGROUP HAS BEEN HACKED !!! | April 23, 2023 | ransomware_live | — |
| ECCI | April 23, 2023 | ransomware_live | — |
| MKU | April 23, 2023 | ransomware_live | — |
| Daregal was hacked The most insecure retail company allowed a huge amount of confidential | April 21, 2023 | ransomware_live | — |
| Saville Row - Grupo GTD was hacked A huge amount of personal information was stolen | April 21, 2023 | ransomware_live | — |
| Slade Shipping - The most insecure shipping company in the US has leaked a huge amount of | April 21, 2023 | ransomware_live | — |
| Groupe ACTIVA was hacked The most unreliable insurance company in the world has once again | April 21, 2023 | ransomware_live | — |
| NAIVAS WAS HACKED A LARGE AMOUNT OF CONFIDENTIAL DATA HAS BEEN STOLEN | April 21, 2023 | ransomware_live | — |
| Global Polymers was haked A massive amount of confidential information was stolen | April 21, 2023 | ransomware_live | — |
| Classic Stripes Pvt and Astarc Group was hacked A huge amount of confidential data has bee | April 21, 2023 | ransomware_live | — |
| VOPAK WAS HACKED A LOT OF CRITICAL CONFIDENTIAL INFORMATION WAS STOLEN | April 21, 2023 | ransomware_live | — |
| Albert Ziegler - one of Germany's most insecure companies has leaked a huge amount of pers | April 21, 2023 | ransomware_live | — |
| Eastern Cape Gambling Board was hacked The most dangerous gambling company for cooperation | April 21, 2023 | ransomware_live | — |
| Banco Comercial do Huambo was hacked Africa's most insecure bank has leaked a huge amount | April 21, 2023 | ransomware_live | — |
| CA de Seguros La Occidental was hacked A huge amount of confidential data was stolen | April 21, 2023 | ransomware_live | — |
| JK Residential Services was hacked A lot of personal data was stolen | April 21, 2023 | ransomware_live | — |
| Lisa Logística was hacked A great amount of critical information has been stolen | April 21, 2023 | ransomware_live | — |
| Sasacom - Malaysian most unsecured retailer was hacked and leaked a huge amount of confide | April 21, 2023 | ransomware_live | — |
| Ruekert & Mielke | April 21, 2023 | ransomware_live | — |
| Insurance Agency Marketing Services | April 19, 2023 | ransomware_live | — |
| 7G Distributing | April 18, 2023 | ransomware_live | — |
| Western Intelligence or Western Digital: The Fine Line Between Selling Drives and Espionag | April 18, 2023 | ransomware_live | — |
| Leadway Assurance Company Limited | April 15, 2023 | ransomware_live | — |
| SAFHOLLAND | April 13, 2023 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).