bianlian
First seen July 14, 2022Active552 claimed victims
The claims below are reproduced as posted by bianlian on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
BianLian ransomware operations began in late 2021. The group practices multi-pronged extortion, demanding payment for a decryptor, as well as the non-release of stolen data. The ransomware group hosts a public, TOR-based, blog to post victim identities and stolen data. Somewhat unique to BianLian at the time of their launch was their inclusion of an I2P mirror for their blog.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| Southeast Vermont Transit (MOOver) | January 1, 2024 | ransomware_live | — |
| Northland Mechanical Contractors | December 28, 2023 | ransomware_live | — |
| Bay Orthopedic & Rehabilitation Supply | December 23, 2023 | ransomware_live | — |
| Air Sino-Euro Associates Travel Pte. Ltd | December 20, 2023 | ransomware_live | — |
| Electrical Connections | December 18, 2023 | ransomware_live | — |
| Greenbox Loans Inc. | December 14, 2023 | ransomware_live | — |
| Commonwealth Capital | December 14, 2023 | ransomware_live | — |
| Chaney, Couch, Callaway, Carter & Associates Family Dentistry | December 14, 2023 | ransomware_live | — |
| Independent Recovery Resources, Inc. | December 11, 2023 | ransomware_live | — |
| SML Group | December 7, 2023 | ransomware_live | — |
| AMCO Proteins | December 7, 2023 | ransomware_live | — |
| Acero Engineering | December 6, 2023 | ransomware_live | — |
| Akumin | December 5, 2023 | ransomware_live | — |
| A**** *********** Inc | November 30, 2023 | ransomware_live | — |
| **o** ******l***** | November 29, 2023 | ransomware_live | — |
| ***s****** ***t*** *e****** *** | November 29, 2023 | ransomware_live | — |
| Plastic Molding Technology Inc. | November 27, 2023 | ransomware_live | — |
| P******** T****** | November 21, 2023 | ransomware_live | — |
| P******* | November 21, 2023 | ransomware_live | — |
| NSEIT Limited (a subsidiary of the National Stock Exchange of India) | November 21, 2023 | ransomware_live | — |
| Growers Express | November 21, 2023 | ransomware_live | — |
| C* ** ******s ** ****de++++ | November 21, 2023 | ransomware_live | — |
| Bolidt | November 21, 2023 | ransomware_live | — |
| *** ****e** | November 21, 2023 | ransomware_live | — |
| NSEIT LIMITED | November 13, 2023 | ransomware_live | — |
| United Site Services | November 13, 2023 | ransomware_live | — |
| Prasan Enterprises | October 31, 2023 | ransomware_live | — |
| B***** | October 31, 2023 | ransomware_live | — |
| Auswide Services | October 31, 2023 | ransomware_live | — |
| TNT Plastic Molding | October 28, 2023 | ransomware_live | — |
| Jebsen & Co. Ltd. | October 18, 2023 | ransomware_live | — |
| International Biomedical Ltd | October 18, 2023 | ransomware_live | — |
| Griffing & Company, P.C | October 18, 2023 | ransomware_live | — |
| Dow Golub Remels & Gilbreath | October 18, 2023 | ransomware_live | — |
| ** P*************s, Inc | October 18, 2023 | ransomware_live | — |
| U***** S*** S******* Inc | October 18, 2023 | ransomware_live | — |
| Instron & ITW Inc | October 11, 2023 | ransomware_live | — |
| Pelindo | October 11, 2023 | ransomware_live | — |
| Air Canada | October 11, 2023 | ransomware_live | — |
| G****** ******s | October 5, 2023 | ransomware_live | — |
| W******** ***d*** & ******g | October 5, 2023 | ransomware_live | — |
| Low Keng Huat (Singapore) Limited | October 5, 2023 | ransomware_live | — |
| Saint Mark Catholic Church | September 26, 2023 | ransomware_live | — |
| Lutheran Church and Preschool | September 26, 2023 | ransomware_live | — |
| W***** C***** A******** D******* D***** | September 26, 2023 | ransomware_live | — |
| T****** H********** G**** | September 26, 2023 | ransomware_live | — |
| P******* U********** | September 26, 2023 | ransomware_live | — |
| N****** O*********** | September 26, 2023 | ransomware_live | — |
| Kramer Tree Specialists, Inc | September 26, 2023 | ransomware_live | — |
| C***** - * | September 26, 2023 | ransomware_live | — |
| F Hinds | September 23, 2023 | ransomware_live | — |
| A** ****** | September 21, 2023 | ransomware_live | — |
| Smartfren Telecom | September 21, 2023 | ransomware_live | — |
| Road Safety | September 21, 2023 | ransomware_live | — |
| C****** ***** ***m********** | September 21, 2023 | ransomware_live | — |
| I************ *********l Ltd. | September 11, 2023 | ransomware_live | — |
| *e**** & Co. Ltd. | September 11, 2023 | ransomware_live | — |
| **** **e ******e* ***e********* | September 11, 2023 | ransomware_live | — |
| I****** **** | September 11, 2023 | ransomware_live | — |
| New Venture Escrow | September 10, 2023 | ransomware_live | — |
| Sebata Holdings (MICROmega Holdings) | September 7, 2023 | ransomware_live | — |
| K***** **** *********** | September 7, 2023 | ransomware_live | — |
| Templeman Consulting Group Inc | September 1, 2023 | ransomware_live | — |
| N**** **** *** and *c******** | September 1, 2023 | ransomware_live | — |
| L******* C***** and P******** | September 1, 2023 | ransomware_live | — |
| *** ****** | September 1, 2023 | ransomware_live | — |
| HealthIndia TPA Services Pvt Ltd | August 28, 2023 | ransomware_live | — |
| Asian Network Pacific Home Care & Hospice | August 28, 2023 | ransomware_live | — |
| Constellation Kidney Group | August 24, 2023 | ransomware_live | — |
| C****** ******* | August 24, 2023 | ransomware_live | — |
| A**** ***** *** | August 24, 2023 | ransomware_live | — |
| * *i*** | August 16, 2023 | ransomware_live | — |
| **a****** | August 12, 2023 | ransomware_live | — |
| Armortex | August 12, 2023 | ransomware_live | — |
| T******** | August 7, 2023 | ransomware_live | — |
| G***** ******* | August 7, 2023 | ransomware_live | — |
| Spokane Spinal Sports Care Clinic | August 3, 2023 | ransomware_live | — |
| H********** ********* *** | August 3, 2023 | ransomware_live | — |
| Retail Information Systems | July 31, 2023 | ransomware_live | — |
| TELNET Redes Inteligentes S.A. | July 31, 2023 | ransomware_live | — |
| N** ******* ****** | July 29, 2023 | ransomware_live | — |
| Dekko Window Systems | July 28, 2023 | ransomware_live | — |
| CMC Marine | July 28, 2023 | ransomware_live | — |
| Chu De Rennes | July 28, 2023 | ransomware_live | — |
| Collins Aerospace (An RTX Business) | July 24, 2023 | ransomware_live | — |
| New Braunfels Cardiology | July 20, 2023 | ransomware_live | — |
| Magnolia Steel | July 20, 2023 | ransomware_live | — |
| Hightway Care | July 20, 2023 | ransomware_live | — |
| Cumberland Pharmaceuticals Inc. | July 19, 2023 | ransomware_live | — |
| Undisclosed Aerospace Company | July 19, 2023 | ransomware_live | — |
| R***** ********** ******* | July 19, 2023 | ransomware_live | — |
| Mission Parks | July 12, 2023 | ransomware_live | — |
| Lyon & Healy | July 12, 2023 | ransomware_live | — |
| Henock Construction | July 12, 2023 | ransomware_live | — |
| ATS Infrastructure | July 12, 2023 | ransomware_live | — |
| Murfreesboro Medical Clinic | July 11, 2023 | ransomware_live | — |
| M****** ***** | July 9, 2023 | ransomware_live | — |
| Evergreen Seamless Pipes & Tubes | July 9, 2023 | ransomware_live | — |
| A** ************** | July 6, 2023 | ransomware_live | — |
| Ella Insurance Brokerage | July 6, 2023 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).