arcusmedia
First seen May 15, 2024Active118 claimed victims
The claims below are reproduced as posted by arcusmedia on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
Arcus Media is a ransomware-as-a-service group that emerged in May 2024, employing double extortion with ChaCha20 + RSA-2048 encryption and recruiting affiliates via a referral-based vetting process, claiming 50+ victims across manufacturing, healthcare, retail, and business services globally.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| Ladrillera Mecanizada | October 9, 2026 | ransomware_live | — |
| mblllp | October 9, 2026 | ransomware_live | — |
| AETHOS | October 9, 2026 | ransomware_live | — |
| Pantaneiro Capas | September 27, 2026 | ransomware_live | — |
| AGROFRUTO SAC | September 23, 2026 | ransomware_live | — |
| AKAZZO | September 19, 2026 | ransomware_live | — |
| Schneider’s Computing | September 19, 2026 | ransomware_live | — |
| ARDA | September 16, 2026 | ransomware_live | — |
| Asada Sarapiqu | September 15, 2026 | ransomware_live | — |
| Mark’Techno | August 24, 2026 | ransomware_live | — |
| ManagementPro | August 24, 2026 | ransomware_live | — |
| Power Moendas | July 25, 2026 | ransomware_live | — |
| Brazer Ingenierie | July 25, 2026 | ransomware_live | — |
| I-FITNESS | July 13, 2026 | ransomware_live | — |
| COREBI(NowVertical) | July 13, 2026 | ransomware_live | — |
| Be Travel | July 13, 2026 | ransomware_live | — |
| Distribox | July 13, 2026 | ransomware_live | — |
| gemese.pt | July 13, 2026 | ransomware_live | — |
| Perpustam | July 13, 2026 | ransomware_live | — |
| East African Gasoil | November 8, 2025 | ransomware_live | — |
| Announcement 16-09-2025 | September 16, 2025 | ransomware_live | — |
| Accflex ERP | September 16, 2025 | ransomware_live | — |
| Tunad | September 16, 2025 | ransomware_live | — |
| Grup Gestio | September 16, 2025 | ransomware_live | — |
| EB Farmacutica | August 12, 2025 | ransomware_live | — |
| College stjb | July 27, 2025 | ransomware_live | — |
| CCI Torrevieja | July 27, 2025 | ransomware_live | — |
| I.P. One LTD | July 25, 2025 | ransomware_live | — |
| SubsCorp | July 22, 2025 | ransomware_live | — |
| Protech Medical | July 22, 2025 | ransomware_live | — |
| RG Mexico | July 5, 2025 | ransomware_live | — |
| BD Group | July 5, 2025 | ransomware_live | — |
| Assetlabs | July 5, 2025 | ransomware_live | — |
| Acorn Sales | May 30, 2025 | ransomware_live | — |
| STANDBYTE | May 30, 2025 | ransomware_live | — |
| Antea Luce | May 26, 2025 | ransomware_live | — |
| Grupo Boulevard | May 17, 2025 | ransomware_live | — |
| RECI SYSTEMS | May 17, 2025 | ransomware_live | — |
| Road Development Corporation | May 17, 2025 | ransomware_live | — |
| Fong Shann Printing Philippines | May 17, 2025 | ransomware_live | — |
| Colegio de la Compania de Maria Vigo | May 17, 2025 | ransomware_live | — |
| Kiribati Government | March 18, 2025 | ransomware_live | — |
| THX Transport | March 18, 2025 | ransomware_live | — |
| Coopertruni | March 18, 2025 | ransomware_live | — |
| HYPERNOVA TELECOM | March 12, 2025 | ransomware_live | — |
| HYPONAMIRU | March 12, 2025 | ransomware_live | — |
| REYCOTEL | March 7, 2025 | ransomware_live | — |
| synaptic.co.tz | March 3, 2025 | ransomware_live | — |
| Grafitec | March 3, 2025 | ransomware_live | — |
| RJ IT Solutions | March 3, 2025 | ransomware_live | — |
| logic insectes | March 3, 2025 | ransomware_live | — |
| Itapeseg | March 3, 2025 | ransomware_live | — |
| Openreso | March 3, 2025 | ransomware_live | — |
| LINKGROUP | March 3, 2025 | ransomware_live | — |
| Technico | February 1, 2025 | ransomware_live | — |
| GATTELLI SpA | February 1, 2025 | ransomware_live | — |
| Utilissimo Transportes | February 1, 2025 | ransomware_live | — |
| Eascon | February 1, 2025 | ransomware_live | — |
| Falcon Gaming | February 1, 2025 | ransomware_live | — |
| Engenet Informatica | December 29, 2024 | ransomware_live | — |
| IEC + EMCO | December 29, 2024 | ransomware_live | — |
| Meerapfel Family | December 29, 2024 | ransomware_live | — |
| Innois | December 29, 2024 | ransomware_live | — |
| Wosac | December 29, 2024 | ransomware_live | — |
| Megaexit | December 29, 2024 | ransomware_live | — |
| Hi-Raise Constructions Holding | December 29, 2024 | ransomware_live | — |
| Enge Ilha Construção | December 29, 2024 | ransomware_live | — |
| ICO | December 2, 2024 | ransomware_live | — |
| Symantric IT | November 21, 2024 | ransomware_live | — |
| MGEMAL | November 21, 2024 | ransomware_live | — |
| IT Networks | November 20, 2024 | ransomware_live | — |
| HM Environmental Services | November 20, 2024 | ransomware_live | — |
| Trust Seeds | November 20, 2024 | ransomware_live | — |
| Barneek Safety Consultancies | November 20, 2024 | ransomware_live | — |
| PK Mulyo | November 20, 2024 | ransomware_live | — |
| Surfnet Communications | October 29, 2024 | ransomware_live | — |
| Country Club El Bosque | October 20, 2024 | ransomware_live | — |
| Vasesa | October 20, 2024 | ransomware_live | — |
| Superior Quality Insurance Agency | October 20, 2024 | ransomware_live | — |
| Petropolis Pet Resort | October 20, 2024 | ransomware_live | — |
| Interbel | October 20, 2024 | ransomware_live | — |
| Nova Sinseg | September 24, 2024 | ransomware_live | — |
| Solutii Sistemas | September 24, 2024 | ransomware_live | — |
| Partners Air | September 24, 2024 | ransomware_live | — |
| Frigocenter | September 24, 2024 | ransomware_live | — |
| Emtel | September 15, 2024 | ransomware_live | — |
| UNI-PA A.Ş | September 14, 2024 | ransomware_live | — |
| Like Family’s | September 14, 2024 | ransomware_live | — |
| Rextech | September 14, 2024 | ransomware_live | — |
| Gino Giglio Generation Spa | September 14, 2024 | ransomware_live | — |
| Doodle Tech | July 20, 2024 | ransomware_live | — |
| Freightliner of Grand Rapids & Kalamazoo | June 29, 2024 | ransomware_live | — |
| DatAnalítica | June 29, 2024 | ransomware_live | — |
| Clima Lodi | June 29, 2024 | ransomware_live | — |
| Total Revisjon DA | June 26, 2024 | ransomware_live | — |
| GED Lawyers – Sells Open | June 26, 2024 | ransomware_live | — |
| GED Lawyers | June 26, 2024 | ransomware_live | — |
| GED Lawyers & .. | June 20, 2024 | ransomware_live | — |
| BankSelfStorage | June 20, 2024 | ransomware_live | — |
| Exhaustpro shops | June 20, 2024 | ransomware_live | — |
Page 1 of 2Older →
Claim data from ransomware.live and RansomLook (CC BY 4.0).