bianlian
First seen July 14, 2022Active552 claimed victims
The claims below are reproduced as posted by bianlian on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
BianLian ransomware operations began in late 2021. The group practices multi-pronged extortion, demanding payment for a decryptor, as well as the non-release of stolen data. The ransomware group hosts a public, TOR-based, blog to post victim identities and stolen data. Somewhat unique to BianLian at the time of their launch was their inclusion of an I2P mirror for their blog.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| Karvo Companies, Inc. | July 26, 2024 | ransomware_live | — |
| Augusta Orthopedic | July 26, 2024 | ransomware_live | — |
| Insula Group | July 25, 2024 | ransomware_live | — |
| Accelon Technologies Private | July 24, 2024 | ransomware_live | — |
| Playa Vista Job Opportunities and Business Services | July 24, 2024 | ransomware_live | — |
| Bunkhouse Group | July 24, 2024 | ransomware_live | — |
| Texas Alcohol & Drug Testing Service | July 14, 2024 | ransomware_live | — |
| Preferred IT Group | July 12, 2024 | ransomware_live | — |
| Transit Mutual Insurance Corporation | July 4, 2024 | ransomware_live | — |
| Legend Properties, Inc. | July 4, 2024 | ransomware_live | — |
| Island Transportation Corp. | July 4, 2024 | ransomware_live | — |
| ASI | June 28, 2024 | ransomware_live | — |
| Better Business Bureau | June 25, 2024 | ransomware_live | — |
| US Dermatology Partners | June 25, 2024 | ransomware_live | — |
| MEL aviation Ltd | June 21, 2024 | ransomware_live | — |
| Longview Oral & Maxillofacial Surgery | June 21, 2024 | ransomware_live | — |
| Mountjoy | June 15, 2024 | ransomware_live | — |
| Dordt University | June 13, 2024 | ransomware_live | — |
| Elite Limousine Plus Inc | June 7, 2024 | ransomware_live | — |
| Northern Minerals Limited | June 3, 2024 | ransomware_live | — |
| Wind Composite Services Group, LLC | May 26, 2024 | ransomware_live | — |
| Payne & Jones | May 26, 2024 | ransomware_live | — |
| National Publisher Services LLC | May 26, 2024 | ransomware_live | — |
| Nutec Group | May 23, 2024 | ransomware_live | — |
| Critchfield & Johnston | May 22, 2024 | ransomware_live | — |
| MAH Machine | May 20, 2024 | ransomware_live | — |
| Center for Digestive Health | May 18, 2024 | ransomware_live | — |
| Bluebonnet Nutrition | May 18, 2024 | ransomware_live | — |
| GMJ & Co, Chartered Accountants | May 14, 2024 | ransomware_live | — |
| Romeo Pitaro Injury & Litigation Lawyers | May 12, 2024 | ransomware_live | — |
| Dragon Tax and Management INC | May 8, 2024 | ransomware_live | — |
| Nikolaus & Hohenadel | May 6, 2024 | ransomware_live | — |
| Clinica de Salud del Valle de Salinas | May 1, 2024 | ransomware_live | — |
| Azteca Tax Systems | May 1, 2024 | ransomware_live | — |
| defi SOLUTIONS. | April 23, 2024 | ransomware_live | — |
| Optometric Physicians of Middle Tennessee | April 22, 2024 | ransomware_live | — |
| D'amico & Pettinicchi, LLC | April 22, 2024 | ransomware_live | — |
| Texas Retina Associates | April 22, 2024 | ransomware_live | — |
| Western Saw Inc. | April 18, 2024 | ransomware_live | — |
| JE Owens & Company PA. | April 18, 2024 | ransomware_live | — |
| Pioneer Oil Company, Inc. | April 17, 2024 | ransomware_live | — |
| Len Dubois Trucking | April 17, 2024 | ransomware_live | — |
| Panacea Healthcare Services | April 9, 2024 | ransomware_live | — |
| Central Carolina Insurance Agency Inc. | April 9, 2024 | ransomware_live | — |
| On Q Financial, LLC | April 6, 2024 | ransomware_live | — |
| Chambers Construction | April 6, 2024 | ransomware_live | — |
| Pavilion Construction LLC | March 30, 2024 | ransomware_live | — |
| Reeves-Wiedeman | March 28, 2024 | ransomware_live | — |
| Neurobehavioral Medicine Consultants | March 28, 2024 | ransomware_live | — |
| Affiliated Dermatologists and Dermatologic Surgeons | March 26, 2024 | ransomware_live | — |
| Lieberman LLP | March 26, 2024 | ransomware_live | — |
| Chambers Construction Co. | March 22, 2024 | ransomware_live | — |
| Bira 91 | March 22, 2024 | ransomware_live | — |
| P&B Capital Group | March 19, 2024 | ransomware_live | — |
| Mayer Antonellis Jachowicz & Haranas, LLP | March 19, 2024 | ransomware_live | — |
| Delta Pipeline | March 19, 2024 | ransomware_live | — |
| Dr. Leeman ENT | March 18, 2024 | ransomware_live | — |
| Consolidated Benefits Resources | March 16, 2024 | ransomware_live | — |
| Keboda Technology Co., Ltd. | March 14, 2024 | ransomware_live | — |
| Lindsay Municipal Hospital | March 9, 2024 | ransomware_live | — |
| Palmer Construction Co., Inc | March 7, 2024 | ransomware_live | — |
| New York Home Healthcare | March 7, 2024 | ransomware_live | — |
| Martin's, Inc. | March 4, 2024 | ransomware_live | — |
| Medall Healthcare Pvt Ltd. | February 28, 2024 | ransomware_live | — |
| Hypertension Nephrology Associates, P.C. | February 28, 2024 | ransomware_live | — |
| Roncelli Plastics | February 24, 2024 | ransomware_live | — |
| H*********** *********y ********** | February 23, 2024 | ransomware_live | — |
| Marchassociates | February 21, 2024 | ransomware_live | — |
| HRTec Inc | February 21, 2024 | ransomware_live | — |
| First Professional Services | February 19, 2024 | ransomware_live | — |
| Advantage Orthopedic & Sports Medicine Clinic | February 15, 2024 | ransomware_live | — |
| Dobrowski Stafford & Pierce | February 15, 2024 | ransomware_live | — |
| Drost Kivlahan McMahon & O'Connor LLC | February 9, 2024 | ransomware_live | — |
| Capozzi Adler, P.C. | February 9, 2024 | ransomware_live | — |
| TechNet Kronoberg AB | February 9, 2024 | ransomware_live | — |
| J.P. Original | February 9, 2024 | ransomware_live | — |
| CTSI | February 9, 2024 | ransomware_live | — |
| B&B Electric Inc | February 6, 2024 | ransomware_live | — |
| GRTC Transit System | February 5, 2024 | ransomware_live | — |
| Cole, Cole, Easley & Sciba | February 4, 2024 | ransomware_live | — |
| Tandem | February 2, 2024 | ransomware_live | — |
| Law Office of Michael H Joseph | February 2, 2024 | ransomware_live | — |
| Chaney, Couch, Callaway, Carter & Associates Family Dentistry. | February 2, 2024 | ransomware_live | — |
| Robert D. Clements Jr Law Group, LLLP | February 1, 2024 | ransomware_live | — |
| MA Engineering | January 30, 2024 | ransomware_live | — |
| Shoma group | January 26, 2024 | ransomware_live | — |
| Image Craft | January 26, 2024 | ransomware_live | — |
| Cislo & Thomas LLP | January 26, 2024 | ransomware_live | — |
| The Wiser Financial Group | January 25, 2024 | ransomware_live | — |
| NOVA Business Law Group | January 25, 2024 | ransomware_live | — |
| Martinaire Aviation | January 21, 2024 | ransomware_live | — |
| KC Pharmaceuticals | January 21, 2024 | ransomware_live | — |
| North Star Tax And Accounting | January 21, 2024 | ransomware_live | — |
| LT Business Dynamics | January 18, 2024 | ransomware_live | — |
| GROWTH by NCRC | January 18, 2024 | ransomware_live | — |
| Donear Industries | January 16, 2024 | ransomware_live | — |
| Northeast Spine and Sports Medicine's | January 15, 2024 | ransomware_live | — |
| Republic Shipping Consolidators, Inc | January 15, 2024 | ransomware_live | — |
| Somerset Logistics | January 5, 2024 | ransomware_live | — |
| Proax Technologies LTD | January 5, 2024 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).