bianlian
First seen July 14, 2022Active552 claimed victims
The claims below are reproduced as posted by bianlian on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
BianLian ransomware operations began in late 2021. The group practices multi-pronged extortion, demanding payment for a decryptor, as well as the non-release of stolen data. The ransomware group hosts a public, TOR-based, blog to post victim identities and stolen data. Somewhat unique to BianLian at the time of their launch was their inclusion of an I2P mirror for their blog.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| E*** ****** | April 6, 2023 | ransomware_live | — |
| *i****** ***** | April 6, 2023 | ransomware_live | — |
| Quad-County Ready Mix | April 6, 2023 | ransomware_live | — |
| Meriton | April 6, 2023 | ransomware_live | — |
| T***** ******** ********** | March 29, 2023 | ransomware_live | — |
| F***** ******* ************** | March 29, 2023 | ransomware_live | — |
| A******* | March 29, 2023 | ransomware_live | — |
| X***** ***** | March 29, 2023 | ransomware_live | — |
| G****** **** & ************* | March 29, 2023 | ransomware_live | — |
| F********** *********-************ | March 29, 2023 | ransomware_live | — |
| C****** ******** | March 28, 2023 | ransomware_live | — |
| Victoria Park | March 28, 2023 | ransomware_live | — |
| Rimex | March 28, 2023 | ransomware_live | — |
| ******* A********* *********** ******* | March 16, 2023 | ransomware_live | — |
| G****** **** and ************* | March 14, 2023 | ransomware_live | — |
| S********* ***** | March 13, 2023 | ransomware_live | — |
| Flensburger Schiffbau Gesellschaft mbH & Co. and Nobiskrug Yachts GmbH | March 13, 2023 | ransomware_live | — |
| Data Pro Accounting Software, Inc | March 11, 2023 | ransomware_live | — |
| Mason Manufacturing | March 11, 2023 | ransomware_live | — |
| T******** ***** ********** | March 5, 2023 | ransomware_live | — |
| S*********** ********** | March 5, 2023 | ransomware_live | — |
| S***** *********** | March 5, 2023 | ransomware_live | — |
| A***** ********* ********** | March 5, 2023 | ransomware_live | — |
| V******* **** | March 5, 2023 | ransomware_live | — |
| R**** | March 5, 2023 | ransomware_live | — |
| P* ***** **** L****** *** | March 5, 2023 | ransomware_live | — |
| Parques Reunidos | March 3, 2023 | ransomware_live | — |
| M**** M************ | March 3, 2023 | ransomware_live | — |
| PLP Architecture | March 3, 2023 | ransomware_live | — |
| Zerbe Retirement Community | March 3, 2023 | ransomware_live | — |
| ACCSC | March 3, 2023 | ransomware_live | — |
| D*** | February 26, 2023 | ransomware_live | — |
| A**** ********* ********* & ***** | February 26, 2023 | ransomware_live | — |
| G&G Electronics | February 26, 2023 | ransomware_live | — |
| Suburban Laboratories | February 17, 2023 | ransomware_live | — |
| Fibertec | February 17, 2023 | ransomware_live | — |
| NESG | February 17, 2023 | ransomware_live | — |
| Skyway Endodontics | February 17, 2023 | ransomware_live | — |
| Smith Industries | February 17, 2023 | ransomware_live | — |
| Danielski Farms Inc. | February 12, 2023 | ransomware_live | — |
| The Gucciardo Law Firm | February 12, 2023 | ransomware_live | — |
| I***** | February 12, 2023 | ransomware_live | — |
| HAK Grazbachgasse | February 11, 2023 | ransomware_live | — |
| Thompson Safety | February 11, 2023 | ransomware_live | — |
| ANXA | February 11, 2023 | ransomware_live | — |
| Advance2000 | February 11, 2023 | ransomware_live | — |
| A********* | February 6, 2023 | ransomware_live | — |
| A*** | February 6, 2023 | ransomware_live | — |
| *r***** ********** ******** *********** | February 6, 2023 | ransomware_live | — |
| Woodmeister Master Builders, Inc. | February 6, 2023 | ransomware_live | — |
| Surtronics | February 4, 2023 | ransomware_live | — |
| G&G ectronics | February 4, 2023 | ransomware_live | — |
| N** ****** | February 1, 2023 | ransomware_live | — |
| Arizona Reproductive Medicine Specialists | January 28, 2023 | ransomware_live | — |
| ******* | January 26, 2023 | ransomware_live | — |
| ********* ******** ***** *** | January 26, 2023 | ransomware_live | — |
| A | January 21, 2023 | ransomware_live | — |
| N**** | January 21, 2023 | ransomware_live | — |
| HRL Technology Group | January 21, 2023 | ransomware_live | — |
| Waynesboro | January 20, 2023 | ransomware_live | — |
| *********** E***** | December 29, 2022 | ransomware_live | — |
| MITCON Consultancy & Engineering Services | December 29, 2022 | ransomware_live | — |
| St. Rose Hospital | December 29, 2022 | ransomware_live | — |
| NewYorker | December 28, 2022 | ransomware_live | — |
| Realstar Holdings Partnership | December 23, 2022 | ransomware_live | — |
| ***** | December 23, 2022 | ransomware_live | — |
| SEMITEC Corporation | December 23, 2022 | ransomware_live | — |
| Myofficeplace Inc. | December 23, 2022 | ransomware_live | — |
| Berlina Tbk | December 22, 2022 | ransomware_live | — |
| S****** Electronics" | December 21, 2022 | ransomware_live | — |
| M*******l*** | December 21, 2022 | ransomware_live | — |
| M***** | December 21, 2022 | ransomware_live | — |
| Lawadami | December 20, 2022 | ransomware_live | — |
| Australian Real Estate Group Pty Ltd | December 17, 2022 | ransomware_live | — |
| Company, LLC | December 16, 2022 | ransomware_live | — |
| Spa | December 16, 2022 | ransomware_live | — |
| ZXP Technologies | December 15, 2022 | ransomware_live | — |
| CIMT College | December 15, 2022 | ransomware_live | — |
| Aria systems | December 15, 2022 | ransomware_live | — |
| Emilio Sanchez American School | December 15, 2022 | ransomware_live | — |
| Eureka Casino Resort | December 15, 2022 | ransomware_live | — |
| Hci Systems Inc | December 15, 2022 | ransomware_live | — |
| Meisenkothen | December 15, 2022 | ransomware_live | — |
| Rudman | December 15, 2022 | ransomware_live | — |
| *****a*** law | December 12, 2022 | ransomware_live | — |
| BRYCON Construction | December 12, 2022 | ransomware_live | — |
| Modular Mining Systems | December 12, 2022 | ransomware_live | — |
| B****** *b* | December 5, 2022 | ransomware_live | — |
| **a***** H****** ******r**** | December 5, 2022 | ransomware_live | — |
| **i* **s**** | December 5, 2022 | ransomware_live | — |
| *** Technologies | December 5, 2022 | ransomware_live | — |
| AV Solutions | December 5, 2022 | ransomware_live | — |
| ****** ******* School | December 5, 2022 | ransomware_live | — |
| *u**** | December 5, 2022 | ransomware_live | — |
| IM Group | December 5, 2022 | ransomware_live | — |
| CROWN TECHNOLOGY Ltd | December 5, 2022 | ransomware_live | — |
| Ability Commerce | December 5, 2022 | ransomware_live | — |
| Golden Coin Bake Shop and Restaurant | December 5, 2022 | ransomware_live | — |
| Bonn Nutrients Pvt | December 5, 2022 | ransomware_live | — |
| Badger Truck Refrigeration, Inc | November 27, 2022 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).