alphv
Also known as: blackcatFirst seen September 9, 2021Active731 claimed victims
The claims below are reproduced as posted by alphv on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
The operators of the ALPHV/BlackCat ransomware began their activity in December 2021, making posts on Dark Web forums to promote their affiliate program, offering other actors the opportunity to engage in a 'new type of ransomware family' developed from scratch using the Rust programming language. Some clear evidence indicates that the actors behind this new ransomware are not new to cybercrime, and there were links to other affiliate programs such as DarkSide, BlackMatter, and REvil.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| CR&R | December 26, 2022 | ransomware_live | — |
| FARMSCOM | December 26, 2022 | ransomware_live | — |
| Empresas Públicas de Medellín | December 26, 2022 | ransomware_live | — |
| STRESSER ASSOCIATES CPA | December 26, 2022 | ransomware_live | — |
| ELOTECH - HACKED AND MORE THEN 100 GB DATA LEAKED! | December 24, 2022 | ransomware_live | — |
| Protecmedia | December 20, 2022 | ransomware_live | — |
| Events DC | December 15, 2022 | ransomware_live | — |
| Schnee Berger | December 12, 2022 | ransomware_live | — |
| dothousehealthorg | December 10, 2022 | ransomware_live | — |
| Aeroproductsco | December 10, 2022 | ransomware_live | — |
| TEIJIN AUTOMOTIVE TECHNOLOGIES | December 9, 2022 | ransomware_live | — |
| Warren County Community College | December 8, 2022 | ransomware_live | — |
| Requena | December 6, 2022 | ransomware_live | — |
| NCI CABLING INC | December 5, 2022 | ransomware_live | — |
| Novak Law Offices | December 5, 2022 | ransomware_live | — |
| Elias Motsoaledi Local Municiapality | December 5, 2022 | ransomware_live | — |
| moruga it | December 4, 2022 | ransomware_live | — |
| Cappagh Contractors Construction (London) Ltd | December 3, 2022 | ransomware_live | — |
| Philippine Economic Zone Authority (PEZA) pezagovph | December 3, 2022 | ransomware_live | — |
| Grupo NGN | December 1, 2022 | ransomware_live | — |
| pro office Büro + Wohnkultur GmbH | December 1, 2022 | ransomware_live | — |
| LJ Hooker Palm Beach | November 30, 2022 | ransomware_live | — |
| Shenzhen INVT Electric Co,Ltd | November 30, 2022 | ransomware_live | — |
| Jubilant | November 30, 2022 | ransomware_live | — |
| SEED CO LTD | November 27, 2022 | ransomware_live | — |
| ENPPI - HACKED AND MORE THEN 1100 GB DATA LEAKED! | November 27, 2022 | ransomware_live | — |
| Nok Air | November 20, 2022 | ransomware_live | — |
| Ta Chen Stainless Pipe Co, Ltd | November 20, 2022 | ransomware_live | — |
| KlamoyaCasino | November 17, 2022 | ransomware_live | — |
| Comresearch | November 16, 2022 | ransomware_live | — |
| Motionalcom | November 11, 2022 | ransomware_live | — |
| rjyoungcom | November 9, 2022 | ransomware_live | — |
| CENTRAL BANK OF GAMBIA HACKED 2 TB OF CRITICAL DATA WAS STOLEN | November 8, 2022 | ransomware_live | — |
| nobilityrcmcom / altapartnersllccom / MFASTcom / MSBSbiz sym / elitemedicalbillcom | November 7, 2022 | ransomware_live | — |
| CONFORAMA - HACKED AND MORE THEN 1TB DATA LEAKED! | November 6, 2022 | ransomware_live | — |
| HUSSEY GAY BELL | November 6, 2022 | ransomware_live | — |
| Network Communications Inc | November 5, 2022 | ransomware_live | — |
| Bosselman Energy Inc | October 31, 2022 | ransomware_live | — |
| Kolas Law Firm | October 28, 2022 | ransomware_live | — |
| Rankam China Manufacturing | October 28, 2022 | ransomware_live | — |
| SUMITOMO BAKELITE | sbna-inccom | October 27, 2022 | ransomware_live | — |
| Comando Conjunto de las Fuerzas Armadas Del Ecuador | October 26, 2022 | ransomware_live | — |
| GMM Grammy Public Company Limited | October 26, 2022 | ransomware_live | — |
| unipilotoeduco | October 24, 2022 | ransomware_live | — |
| Mdaemon Technologies | October 23, 2022 | ransomware_live | — |
| Egyptian Electric Cooperative Association | October 20, 2022 | ransomware_live | — |
| Longhorn Investments | October 17, 2022 | ransomware_live | — |
| Events DC | eventsdccom | October 14, 2022 | ransomware_live | — |
| RecordTV | October 13, 2022 | ransomware_live | — |
| Jam Filled Entertainment | October 13, 2022 | ransomware_live | — |
| Triten | October 12, 2022 | ransomware_live | — |
| Döhler HACKED! More then 800 GB sensitive data LEAKED! | October 11, 2022 | ransomware_live | — |
| The Hibbert Group | October 10, 2022 | ransomware_live | — |
| Notos Com | October 7, 2022 | ransomware_live | — |
| Deutsche Saatveredelung AG | October 7, 2022 | ransomware_live | — |
| Home Dynamix | October 7, 2022 | ransomware_live | — |
| Pinnacle Incorporated | October 6, 2022 | ransomware_live | — |
| Knoll | October 6, 2022 | ransomware_live | — |
| Clarion Communication Management Ltd | October 3, 2022 | ransomware_live | — |
| Simex Defence Inc | October 1, 2022 | ransomware_live | — |
| Bilthoven Biologicals | September 30, 2022 | ransomware_live | — |
| Midwest Petroleum | September 29, 2022 | ransomware_live | — |
| NJVC [ post has been updated ] | September 28, 2022 | ransomware_live | — |
| ID-ware | September 27, 2022 | ransomware_live | — |
| ASSOCIATED RETAILERS LIMITED HACKED MORE THEN 500G SENSITIVE DATA LEAKED | September 24, 2022 | ransomware_live | — |
| SolarCraft | September 22, 2022 | ransomware_live | — |
| Circles of Care | September 20, 2022 | ransomware_live | — |
| CARITAS | September 19, 2022 | ransomware_live | — |
| trisupplyhomecom | September 17, 2022 | ransomware_live | — |
| Boyes Turner LLP | September 16, 2022 | ransomware_live | — |
| ( POST HAS BEEN UPDATED 1400GB LEAK AVAILABLE ) County Suffolk and contractors | September 15, 2022 | ransomware_live | — |
| HAYAT GROUP | September 14, 2022 | ransomware_live | — |
| Artic Building Services | September 14, 2022 | ransomware_live | — |
| The Checker Transportation Group | September 8, 2022 | ransomware_live | — |
| Tri-Supply | September 8, 2022 | ransomware_live | — |
| PCSupport | September 6, 2022 | ransomware_live | — |
| Fiveninefive | September 6, 2022 | ransomware_live | — |
| GHT CORP | August 30, 2022 | ransomware_live | — |
| Wheat Ridge County | August 29, 2022 | ransomware_live | — |
| Josef Saller Services eK - Saller Bau | August 29, 2022 | ransomware_live | — |
| Laferté | August 29, 2022 | ransomware_live | — |
| Justman Packaging & Display Information | August 29, 2022 | ransomware_live | — |
| GSE - Gestore Servizi Energetici | August 27, 2022 | ransomware_live | — |
| Fremont County | August 17, 2022 | ransomware_live | — |
| Accelya | August 15, 2022 | ransomware_live | — |
| Hometrust Mortgage Company | August 15, 2022 | ransomware_live | — |
| AD Consulting Group | August 4, 2022 | ransomware_live | — |
| MarioSinacola | August 2, 2022 | ransomware_live | — |
| Creos Luxembourg | July 29, 2022 | ransomware_live | — |
| Nelsonslaw LLP | July 29, 2022 | ransomware_live | — |
| tnqcoin | July 28, 2022 | ransomware_live | — |
| herccombr | July 28, 2022 | ransomware_live | — |
| JOHN A BODZIAK ARCHITECT AIA | July 26, 2022 | ransomware_live | — |
| Holland CPA | July 24, 2022 | ransomware_live | — |
| HANDLER Bau GmbH | July 20, 2022 | ransomware_live | — |
| OGLETREE | July 20, 2022 | ransomware_live | — |
| Continental Management | July 19, 2022 | ransomware_live | — |
| Reed Pope Law | July 19, 2022 | ransomware_live | — |
| KKJM Lawfirm | July 18, 2022 | ransomware_live | — |
| Unisuper SA | July 14, 2022 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).