alphv
Also known as: blackcatFirst seen September 9, 2021Active731 claimed victims
The claims below are reproduced as posted by alphv on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
The operators of the ALPHV/BlackCat ransomware began their activity in December 2021, making posts on Dark Web forums to promote their affiliate program, offering other actors the opportunity to engage in a 'new type of ransomware family' developed from scratch using the Rust programming language. Some clear evidence indicates that the actors behind this new ransomware are not new to cybercrime, and there were links to other affiliate programs such as DarkSide, BlackMatter, and REvil.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| Yucatan | April 13, 2023 | ransomware_live | — |
| The Zalkin Law Firm PC | April 8, 2023 | ransomware_live | — |
| coremain | April 7, 2023 | ransomware_live | — |
| b&h patterninc | April 7, 2023 | ransomware_live | — |
| quilts,inc | April 6, 2023 | ransomware_live | — |
| PALM HILLS DEVELOPMENT | April 5, 2023 | ransomware_live | — |
| Noteboom - The Law Firm | April 5, 2023 | ransomware_live | — |
| UnitedLex | April 5, 2023 | ransomware_live | — |
| Hull Property Group | April 5, 2023 | ransomware_live | — |
| The Sage Next | April 4, 2023 | ransomware_live | — |
| Electronic SYSTEMS SpA | April 4, 2023 | ransomware_live | — |
| Dalumi Group | April 4, 2023 | ransomware_live | — |
| Mutual de Seguros de Chile | April 2, 2023 | ransomware_live | — |
| All4Labels | March 27, 2023 | ransomware_live | — |
| Buffco Production, Inc | March 27, 2023 | ransomware_live | — |
| Rob Levine & Associates Lawyers | March 26, 2023 | ransomware_live | — |
| Sun Global Media Usa Ltd | March 24, 2023 | ransomware_live | — |
| wbactc | March 24, 2023 | ransomware_live | — |
| lclattorneyscom | March 24, 2023 | ransomware_live | — |
| Teklas | March 24, 2023 | ransomware_live | — |
| bluebirdnetwork | March 23, 2023 | ransomware_live | — |
| Kress | March 21, 2023 | ransomware_live | — |
| Coole Bevis Solicitors | March 21, 2023 | ransomware_live | — |
| Sunward Pharmaceutical (Sunward) | March 19, 2023 | ransomware_live | — |
| FABREGA MOLINO (fmmcompa) | March 18, 2023 | ransomware_live | — |
| Kerber, Eck & Braeckel LLP | March 18, 2023 | ransomware_live | — |
| James Group | March 18, 2023 | ransomware_live | — |
| Collins Electrical | March 18, 2023 | ransomware_live | — |
| Los Altos Foods | March 15, 2023 | ransomware_live | — |
| npauctionscom (copartcom) | March 15, 2023 | ransomware_live | — |
| WALSHALBERT | March 14, 2023 | ransomware_live | — |
| Ring: Security Systems | March 13, 2023 | ransomware_live | — |
| Guardian Capital | March 10, 2023 | ransomware_live | — |
| Lehigh Valley Health Network 2 | March 10, 2023 | ransomware_live | — |
| McEwan Fraser Legal | March 9, 2023 | ransomware_live | — |
| Optieng | March 9, 2023 | ransomware_live | — |
| Dancenter | March 9, 2023 | ransomware_live | — |
| Law Foundation of Silicon Valley | March 6, 2023 | ransomware_live | — |
| Lehigh Valley Health Network | March 4, 2023 | ransomware_live | — |
| blackswanhealth | March 2, 2023 | ransomware_live | — |
| Welty Building Company | March 2, 2023 | ransomware_live | — |
| CMMG Inc | March 2, 2023 | ransomware_live | — |
| SkyFiber Networks | March 2, 2023 | ransomware_live | — |
| Ring LLC | March 1, 2023 | ransomware_live | — |
| Traffic Ticket Office | March 1, 2023 | ransomware_live | — |
| Kimko Realty | February 28, 2023 | ransomware_live | — |
| INDIKA ENERGY GLOBAL | February 26, 2023 | ransomware_live | — |
| thinkweltycom | February 26, 2023 | ransomware_live | — |
| Smarter Capital | February 24, 2023 | ransomware_live | — |
| The Keen Group | February 23, 2023 | ransomware_live | — |
| Glovers Solicitors LLP | February 23, 2023 | ransomware_live | — |
| Empresa Distribuidora de Electricidad del Este, Revenue $6336M | February 23, 2023 | ransomware_live | — |
| Kendall Hunt Publishing | February 22, 2023 | ransomware_live | — |
| PRESTIGE MAINTENANCE USA WAS HACKED | February 22, 2023 | ransomware_live | — |
| EncinoEnergy | February 22, 2023 | ransomware_live | — |
| City of Lakewood | February 22, 2023 | ransomware_live | — |
| FUTURE BUILDINGS WAS HACKED MORE THAN 150GB SENSETIVE DATA LEAKED | February 21, 2023 | ransomware_live | — |
| Summit Brands | February 21, 2023 | ransomware_live | — |
| Markas | February 21, 2023 | ransomware_live | — |
| La Filipina | February 21, 2023 | ransomware_live | — |
| SINGLESOURCE | February 17, 2023 | ransomware_live | — |
| Wawasee Community School Corporation | February 16, 2023 | ransomware_live | — |
| Cansew | February 16, 2023 | ransomware_live | — |
| Hengmei Optoelectronics Co,Ltd | February 15, 2023 | ransomware_live | — |
| Leal Group | February 14, 2023 | ransomware_live | — |
| Banco Sol | February 13, 2023 | ransomware_live | — |
| Vitas | February 13, 2023 | ransomware_live | — |
| Cork Institute of Technology & Munster Technological University | February 12, 2023 | ransomware_live | — |
| JReynolds | February 7, 2023 | ransomware_live | — |
| Menken Orlando | February 7, 2023 | ransomware_live | — |
| El-Mohandes | February 5, 2023 | ransomware_live | — |
| Five Guys Enterprises, LLC | February 4, 2023 | ransomware_live | — |
| Portnoff Law Associates | February 4, 2023 | ransomware_live | — |
| SOTO Consulting Engineers | February 1, 2023 | ransomware_live | — |
| Westmont Hospitality Group | January 31, 2023 | ransomware_live | — |
| PARIC CORPORATION | January 31, 2023 | ransomware_live | — |
| Bregman Berbert Schwartz & Gilday | January 31, 2023 | ransomware_live | — |
| Stibbs & Co | January 31, 2023 | ransomware_live | — |
| V3 Companies | January 31, 2023 | ransomware_live | — |
| Vision Technologies | January 31, 2023 | ransomware_live | — |
| Ultrabulk | January 27, 2023 | ransomware_live | — |
| SOLAR INDUSTRIES INDIA WAS HACKED MORE THAN 2TB SECRET MILITARY DATA LEAKED | January 26, 2023 | ransomware_live | — |
| Copper Mountain | January 25, 2023 | ransomware_live | — |
| CHARLES P VONDERHAAR CPA WAS HACKED MORE TNAH 50GB SENSETIVE DATA LEAKEDCHARLES P VONDERHA | January 24, 2023 | ransomware_live | — |
| IFPA | January 21, 2023 | ransomware_live | — |
| Pharmacare | January 18, 2023 | ransomware_live | — |
| Crescent Crown Distributing | January 17, 2023 | ransomware_live | — |
| NextGen | January 17, 2023 | ransomware_live | — |
| Fu Yu Corporation | January 12, 2023 | ransomware_live | — |
| TIME TECHNOPLAST LIMITED | January 11, 2023 | ransomware_live | — |
| Liebra Permana | January 11, 2023 | ransomware_live | — |
| Koo Wee Rup Secondary College | January 8, 2023 | ransomware_live | — |
| Fruttagel | January 7, 2023 | ransomware_live | — |
| Pendulum Associates public website of data leak | January 6, 2023 | ransomware_live | — |
| Grupo Estrategas EMM | January 4, 2023 | ransomware_live | — |
| Dental One | January 2, 2023 | ransomware_live | — |
| SUMITOMO BAKELITE USA | December 28, 2022 | ransomware_live | — |
| JAKKS Pacific, Inc | December 28, 2022 | ransomware_live | — |
| SSI Schäfer Shop | December 26, 2022 | ransomware_live | — |
| Meyer & Meyer Holding SE & Co KG | December 26, 2022 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).