bianlian
First seen July 14, 2022Active552 claimed victims
The claims below are reproduced as posted by bianlian on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
BianLian ransomware operations began in late 2021. The group practices multi-pronged extortion, demanding payment for a decryptor, as well as the non-release of stolen data. The ransomware group hosts a public, TOR-based, blog to post victim identities and stolen data. Somewhat unique to BianLian at the time of their launch was their inclusion of an I2P mirror for their blog.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| Carvin Software | July 6, 2023 | ransomware_live | — |
| **** I******** ********* | July 3, 2023 | ransomware_live | — |
| Undisclosed Staffing Company | July 1, 2023 | ransomware_live | — |
| Kondratoff Persick LLP | July 1, 2023 | ransomware_live | — |
| **l***** C*********** | July 1, 2023 | ransomware_live | — |
| Piramal Group | June 28, 2023 | ransomware_live | — |
| N** ********* ********** | June 28, 2023 | ransomware_live | — |
| Misr Life Insurance | June 28, 2023 | ransomware_live | — |
| Arab Shipbuilding and Repair Yard | June 28, 2023 | ransomware_live | — |
| Hiberus Tecnología | June 26, 2023 | ransomware_live | — |
| American Crane Rental | June 23, 2023 | ransomware_live | — |
| *i***** ***** | June 23, 2023 | ransomware_live | — |
| **** H**** | June 23, 2023 | ransomware_live | — |
| The Sullivan Group of Court Reporters | June 21, 2023 | ransomware_live | — |
| T***** ***** *********t** *.*. | June 21, 2023 | ransomware_live | — |
| BGFIBank Group | June 21, 2023 | ransomware_live | — |
| *i**r** *e***l**** | June 13, 2023 | ransomware_live | — |
| K********* ******* *** | June 13, 2023 | ransomware_live | — |
| A******* ***** ****** | June 9, 2023 | ransomware_live | — |
| M*** **** | June 8, 2023 | ransomware_live | — |
| Aeliusmd Medical Systems | June 8, 2023 | ransomware_live | — |
| *** ******** ***** ** **u** *e******** | June 8, 2023 | ransomware_live | — |
| TY Inc | June 1, 2023 | ransomware_live | — |
| Laebon Homes | June 1, 2023 | ransomware_live | — |
| Handok Inc. | June 1, 2023 | ransomware_live | — |
| Chadwick, Washington, Moriarty, Elmore & Bunn | June 1, 2023 | ransomware_live | — |
| EDG, Inc | June 1, 2023 | ransomware_live | — |
| Aarti Industries Ltd. | June 1, 2023 | ransomware_live | — |
| Neutronic Stamping | May 29, 2023 | ransomware_live | — |
| Earlens Corporation | May 29, 2023 | ransomware_live | — |
| C********* *************** | May 29, 2023 | ransomware_live | — |
| H****** **e*** V******* **i** Project | May 27, 2023 | ransomware_live | — |
| *a*** I********* | May 27, 2023 | ransomware_live | — |
| **G Inc. | May 27, 2023 | ransomware_live | — |
| ******MD | May 27, 2023 | ransomware_live | — |
| M******* ***** | May 24, 2023 | ransomware_live | — |
| Rusan Pharma | May 23, 2023 | ransomware_live | — |
| H***** | May 23, 2023 | ransomware_live | — |
| Zoni Language Centers | May 22, 2023 | ransomware_live | — |
| H****** **** | May 22, 2023 | ransomware_live | — |
| Alconex Specialty Products | May 22, 2023 | ransomware_live | — |
| ** T**** *** | May 22, 2023 | ransomware_live | — |
| Z*** ******** ******s | May 18, 2023 | ransomware_live | — |
| ENSA - Seguros de Angola | May 18, 2023 | ransomware_live | — |
| *a***** ***** | May 18, 2023 | ransomware_live | — |
| North Shore Medical Labs | May 11, 2023 | ransomware_live | — |
| Hermes Medical Solutions | May 11, 2023 | ransomware_live | — |
| DA Alexander Company INC | May 11, 2023 | ransomware_live | — |
| B&R Eckel's Transport | May 11, 2023 | ransomware_live | — |
| Albany ENT & Allergy Services | May 11, 2023 | ransomware_live | — |
| A****** ********* **o***** | May 11, 2023 | ransomware_live | — |
| Vascular Center of Intervention | May 11, 2023 | ransomware_live | — |
| IDEM Safety Switches | May 9, 2023 | ransomware_live | — |
| Humana | May 9, 2023 | ransomware_live | — |
| Greenslade Taylor Hunt | May 9, 2023 | ransomware_live | — |
| Entelect | May 9, 2023 | ransomware_live | — |
| Department of Education of the Canton of Basel-Stadt | May 9, 2023 | ransomware_live | — |
| Deer Lakes School District | May 9, 2023 | ransomware_live | — |
| Commerce Pundit | May 9, 2023 | ransomware_live | — |
| CADOpt Technologies | May 9, 2023 | ransomware_live | — |
| Bedford Lodge Hotel | May 9, 2023 | ransomware_live | — |
| Altstadt Hoffman Plumbing | May 9, 2023 | ransomware_live | — |
| R**** ****** | May 5, 2023 | ransomware_live | — |
| N******** ******** | May 5, 2023 | ransomware_live | — |
| M*********** ******* ****** | May 5, 2023 | ransomware_live | — |
| C******* ********** | May 5, 2023 | ransomware_live | — |
| B** ******* ********* | May 5, 2023 | ransomware_live | — |
| *.A. ********* & *******, ***. | May 1, 2023 | ransomware_live | — |
| P********* ******* *e**** | April 28, 2023 | ransomware_live | — |
| H***** ******* S******* | April 28, 2023 | ransomware_live | — |
| E*** - ******* ** ****** | April 28, 2023 | ransomware_live | — |
| A**** ************* | April 28, 2023 | ransomware_live | — |
| A***** *** * ******* S******* | April 25, 2023 | ransomware_live | — |
| XPress Cargo | April 25, 2023 | ransomware_live | — |
| GROUPE ETIC | April 25, 2023 | ransomware_live | — |
| General Plug & Manufacturing | April 25, 2023 | ransomware_live | — |
| Falcon Express Transportation, Inc. | April 25, 2023 | ransomware_live | — |
| Bilstein GmbH | April 25, 2023 | ransomware_live | — |
| Manufacturing | April 25, 2023 | ransomware_live | — |
| H***** ***** | April 19, 2023 | ransomware_live | — |
| G********* ****** **** | April 19, 2023 | ransomware_live | — |
| E******* | April 19, 2023 | ransomware_live | — |
| E****** *********** | April 19, 2023 | ransomware_live | — |
| D*** ***** S***** ******** | April 19, 2023 | ransomware_live | — |
| C******* **N*** | April 19, 2023 | ransomware_live | — |
| C***** ************ ******* | April 19, 2023 | ransomware_live | — |
| B****** ***** ***** | April 19, 2023 | ransomware_live | — |
| A******* ******* ******** | April 19, 2023 | ransomware_live | — |
| ***** ***** M****** **** | April 19, 2023 | ransomware_live | — |
| Retina and Vitreous of Texas | April 13, 2023 | ransomware_live | — |
| IDEXX | April 13, 2023 | ransomware_live | — |
| Encompass Technologies | April 13, 2023 | ransomware_live | — |
| Tennessee State University | April 13, 2023 | ransomware_live | — |
| Southeastern University | April 13, 2023 | ransomware_live | — |
| Faps | April 13, 2023 | ransomware_live | — |
| Capstan Atlantic | April 13, 2023 | ransomware_live | — |
| Aerowind | April 13, 2023 | ransomware_live | — |
| Co. and Nobiskrug Yachts GmbH | April 13, 2023 | ransomware_live | — |
| Flensburger Schiffbau Gesellschaft mbH and Co. and Nobiskrug Yachts GmbH | April 11, 2023 | ransomware_live | — |
| Harvard Energy | April 10, 2023 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).