bianlian
First seen July 14, 2022Active552 claimed victims
The claims below are reproduced as posted by bianlian on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
BianLian ransomware operations began in late 2021. The group practices multi-pronged extortion, demanding payment for a decryptor, as well as the non-release of stolen data. The ransomware group hosts a public, TOR-based, blog to post victim identities and stolen data. Somewhat unique to BianLian at the time of their launch was their inclusion of an I2P mirror for their blog.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| Sonrisas Dental Health | March 31, 2025 | ransomware_live | — |
| Saunders and Saunders | March 31, 2025 | ransomware_live | — |
| Meridian Senior | March 31, 2025 | ransomware_live | — |
| CMC Technology Group | March 31, 2025 | ransomware_live | — |
| Goshen Medical Center | March 22, 2025 | ransomware_live | — |
| Minnesota Orthodontics | March 7, 2025 | ransomware_live | — |
| Allworx | March 7, 2025 | ransomware_live | — |
| Ewald Consulting | March 4, 2025 | ransomware_live | — |
| Legal Aid Society of Salt Lake | March 4, 2025 | ransomware_live | — |
| Mosley Glick O’Brien, Inc. | March 4, 2025 | ransomware_live | — |
| Keystone Pacific Property Management LLC | March 4, 2025 | ransomware_live | — |
| Island Realty | February 25, 2025 | ransomware_live | — |
| Alabama Ophthalmology Associates | February 19, 2025 | ransomware_live | — |
| Dain, Torpy, Le Ray, Wiest & Garner, P.C. | February 13, 2025 | ransomware_live | — |
| Layfield & Borel CPA's L.L.C | February 13, 2025 | ransomware_live | — |
| Financial Services of America, Inc. | February 13, 2025 | ransomware_live | — |
| Nippon Steel USA | February 13, 2025 | ransomware_live | — |
| Aspire Rural Health System | February 13, 2025 | ransomware_live | — |
| Recievership Specialists | February 10, 2025 | ransomware_live | — |
| NESCTC Security Services | February 5, 2025 | ransomware_live | — |
| Hall Chadwick | February 5, 2025 | ransomware_live | — |
| Dash Business | February 5, 2025 | ransomware_live | — |
| Commercial Solutions | February 4, 2025 | ransomware_live | — |
| C & R Molds Inc | February 4, 2025 | ransomware_live | — |
| Growth Acceleration Partners | February 2, 2025 | ransomware_live | — |
| Ayres Law Firm | February 2, 2025 | ransomware_live | — |
| Civic Committee | February 2, 2025 | ransomware_live | — |
| Medical Associates of Brevard | February 2, 2025 | ransomware_live | — |
| Cyrious Software | February 2, 2025 | ransomware_live | — |
| MassDevelopment | January 18, 2025 | ransomware_live | — |
| Nash Brothers Construction | January 13, 2025 | ransomware_live | — |
| D-7 Roofing | January 7, 2025 | ransomware_live | — |
| Caframo Limited. | December 26, 2024 | ransomware_live | — |
| Giordano, DelCollo, Werb & Gagne, LLC. | December 18, 2024 | ransomware_live | — |
| Cottrell Fletcher & Cottrell P.C. | December 18, 2024 | ransomware_live | — |
| Mid Florida Primary Care | December 14, 2024 | ransomware_live | — |
| MedRevenu Inc | December 14, 2024 | ransomware_live | — |
| American Computer Estimating Inc | December 14, 2024 | ransomware_live | — |
| Physicians' Primary Care of Southwest Florida | December 10, 2024 | ransomware_live | — |
| Global Insurance Agency LLC | December 10, 2024 | ransomware_live | — |
| LTI Trucking Services | December 6, 2024 | ransomware_live | — |
| Star Shuttle Inc. | December 5, 2024 | ransomware_live | — |
| Alpine Ear Nose & Throat | December 1, 2024 | ransomware_live | — |
| TWRU CPAs & Financial Advisors | November 26, 2024 | ransomware_live | — |
| Trinity Petroleum Management, LLC | November 22, 2024 | ransomware_live | — |
| Silverback Exploration | November 21, 2024 | ransomware_live | — |
| Kellerhals Ferguson Kroblin PLLC | November 21, 2024 | ransomware_live | — |
| Amherstburg Family Health | November 20, 2024 | ransomware_live | — |
| Immuno Laboratories, Inc | November 10, 2024 | ransomware_live | — |
| Palmisano & Goodman, P.A. | November 9, 2024 | ransomware_live | — |
| Mizuno (USA) | November 9, 2024 | ransomware_live | — |
| ATSG, Inc | November 9, 2024 | ransomware_live | — |
| Healthcare Management Systems | November 8, 2024 | ransomware_live | — |
| Falco Sult | November 5, 2024 | ransomware_live | — |
| L & B Transport, L.L.C. | November 3, 2024 | ransomware_live | — |
| Russell Law Firm, LLC | November 3, 2024 | ransomware_live | — |
| CLAS Information Services | October 29, 2024 | ransomware_live | — |
| Premier Work Support | October 26, 2024 | ransomware_live | — |
| McElroy, Quirk & Burch, APC | October 24, 2024 | ransomware_live | — |
| The Povman Law Firm | October 23, 2024 | ransomware_live | — |
| Gluckstein Personal Injury Lawyers | October 23, 2024 | ransomware_live | — |
| Lein Law Offices | October 16, 2024 | ransomware_live | — |
| Corporate Job Bank | October 16, 2024 | ransomware_live | — |
| Boston Children's Health Physicians | October 15, 2024 | ransomware_live | — |
| Pearl Cohen | October 8, 2024 | ransomware_live | — |
| First Choice Sales & Marketing Group (First Choice) | September 24, 2024 | ransomware_live | — |
| River Region Cardiology Associates | September 20, 2024 | ransomware_live | — |
| Hunter Dickinson Inc. | September 19, 2024 | ransomware_live | — |
| Sherr Puttmann Akins Lamb PC | September 17, 2024 | ransomware_live | — |
| Law Offices of Michael J Gurfinkel, Inc | September 13, 2024 | ransomware_live | — |
| Ladov Law Firm | September 11, 2024 | ransomware_live | — |
| HDI | September 10, 2024 | ransomware_live | — |
| Smart Source, Inc. | September 9, 2024 | ransomware_live | — |
| Battle Lumber Co. | September 9, 2024 | ransomware_live | — |
| Anniversary Holding | September 9, 2024 | ransomware_live | — |
| Keya Accounting and Tax Services LLC | September 6, 2024 | ransomware_live | — |
| CK Associates | September 6, 2024 | ransomware_live | — |
| Western Supplies, Inc | September 5, 2024 | ransomware_live | — |
| Stein Fibers | August 30, 2024 | ransomware_live | — |
| Lane Supply Inc. | August 30, 2024 | ransomware_live | — |
| Eric Rossi CPA LLC | August 30, 2024 | ransomware_live | — |
| ICWI | August 30, 2024 | ransomware_live | — |
| Wayne Wright, LLP. | August 30, 2024 | ransomware_live | — |
| Scott Pharma Solutions | August 28, 2024 | ransomware_live | — |
| M.Royo & KlockMetal | August 28, 2024 | ransomware_live | — |
| Fish Nelson & Holden | August 28, 2024 | ransomware_live | — |
| Atwood & Cherny, P.C. | August 28, 2024 | ransomware_live | — |
| Sable International | August 25, 2024 | ransomware_live | — |
| Studio Legale Associato Isolabella | August 24, 2024 | ransomware_live | — |
| PBC Companies | August 18, 2024 | ransomware_live | — |
| Mohawk Valley Cardiology PC | August 18, 2024 | ransomware_live | — |
| Thompson Davis & Co | August 14, 2024 | ransomware_live | — |
| Texas Centers for Infectious Disease Associates | August 14, 2024 | ransomware_live | — |
| Southwest Family Medicine Associates | August 13, 2024 | ransomware_live | — |
| Benson Kearley IFG - Insurance Brokers & Financial Advisors | August 12, 2024 | ransomware_live | — |
| Majestic Metals | August 9, 2024 | ransomware_live | — |
| GCA Global Cargo Alliance | August 9, 2024 | ransomware_live | — |
| Anniversary Holding Company | August 9, 2024 | ransomware_live | — |
| Sable International. | July 31, 2024 | ransomware_live | — |
| Florence Cement Company, Inc. | July 31, 2024 | ransomware_live | — |
Page 1 of 6Older →
Claim data from ransomware.live and RansomLook (CC BY 4.0).