BreachCensus

AuditTeam

First seen April 8, 2026Active21 claimed victims

The claims below are reproduced as posted by AuditTeam on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.

Listed organisation? Contact [email protected].

Profile

AuditTeam is a small ransomware group with approximately 5 known victims, primarily targeting organizations in East and Southeast Asia across technology and manufacturing sectors, operating a data leak site consistent with double-extortion methodology.

Description from ransomware.live.

Claimed victims (as posted by the group — unverified)

Victim (as posted)Claimed onSourcePress coverage
PIT.localAugust 27, 2026ransomware_live—
PI***alAugust 27, 2026ransomware_live—
mansurovogroupAugust 26, 2026ransomware_live—
ma***upAugust 25, 2026ransomware_live—
De***upAugust 18, 2026ransomware_live—
Demidov Steel GroupAugust 18, 2026ransomware_live—
I-SYSJune 15, 2026ransomware_live—
I-***YSJune 14, 2026ransomware_live—
Paid Victim 111CEAA5AD9DA2F1June 4, 2026ransomware_live—
ca***lmJune 2, 2026ransomware_live—
On***deMay 28, 2026ransomware_live—
Paid Victim B35411691DDC2265May 28, 2026ransomware_live—
Mo***etMay 15, 2026ransomware_live—
Mopas Online SupermarketMay 15, 2026ransomware_live—
Tr***icMay 10, 2026ransomware_live—
Trésor PublicMay 10, 2026ransomware_live—
Paid Victim D3C1388C1B73BCA2April 8, 2026ransomware_live—
Paid Victim A98A624456DA525FApril 8, 2026ransomware_live—
Paid Victim CCD233FEE92FFA2DApril 8, 2026ransomware_live—
joycityMarch 5, 2026ransomware_live—
Kawasaki Motors Philippines CorporationFebruary 21, 2026ransomware_live—

Claim data from ransomware.live and RansomLook (CC BY 4.0).