bianlian
First seen July 14, 2022Active552 claimed victims
The claims below are reproduced as posted by bianlian on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
BianLian ransomware operations began in late 2021. The group practices multi-pronged extortion, demanding payment for a decryptor, as well as the non-release of stolen data. The ransomware group hosts a public, TOR-based, blog to post victim identities and stolen data. Somewhat unique to BianLian at the time of their launch was their inclusion of an I2P mirror for their blog.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| Block Buildings LLC | November 27, 2022 | ransomware_live | — |
| Altec Engineering LLC | November 27, 2022 | ransomware_live | — |
| Samrin Services Pvt Ltd | November 27, 2022 | ransomware_live | — |
| Power Plant Services LLC | November 27, 2022 | ransomware_live | — |
| VANOSS Public School | November 27, 2022 | ransomware_live | — |
| Harry Rosen | November 24, 2022 | ransomware_live | — |
| Rentz Management | November 24, 2022 | ransomware_live | — |
| Boon Tool Co | November 24, 2022 | ransomware_live | — |
| Gazelle International Ltd | November 24, 2022 | ransomware_live | — |
| Versah | November 24, 2022 | ransomware_live | — |
| Centura College | November 24, 2022 | ransomware_live | — |
| Modular Mining | November 24, 2022 | ransomware_live | — |
| Myton School | November 24, 2022 | ransomware_live | — |
| Läderach | November 1, 2022 | ransomware_live | — |
| Mayfield School | October 6, 2022 | ransomware_live | — |
| McGann Facial Design | October 6, 2022 | ransomware_live | — |
| BMW of Sherman Oaks | October 6, 2022 | ransomware_live | — |
| Dorsey metrology | October 6, 2022 | ransomware_live | — |
| Meisenkothen | October 6, 2022 | ransomware_live | — |
| derach | October 5, 2022 | ransomware_live | — |
| Company, LLC | October 5, 2022 | ransomware_live | — |
| Berg Kaprow Lewis | October 5, 2022 | ransomware_live | — |
| Aarti Drugs Ltd | October 5, 2022 | ransomware_live | — |
| Sunflower Farms Distributors, Inc | October 5, 2022 | ransomware_live | — |
| Peter Duffy Ltd | October 5, 2022 | ransomware_live | — |
| Bartelt | October 4, 2022 | ransomware_live | — |
| Seanic Ocean Systems | October 4, 2022 | ransomware_live | — |
| Aesthetic Dermatology Associates | October 2, 2022 | ransomware_live | — |
| Spa | September 13, 2022 | ransomware_live | — |
| Infinitely Virtual | September 3, 2022 | ransomware_live | — |
| Baer's | September 3, 2022 | ransomware_live | — |
| Captec-group | August 30, 2022 | ransomware_live | — |
| 4cRisk | August 30, 2022 | ransomware_live | — |
| Community Dental Partners | August 30, 2022 | ransomware_live | — |
| Ramada Hervey Bay Hotel Resort | August 30, 2022 | ransomware_live | — |
| WWAY-TV, LLC | August 30, 2022 | ransomware_live | — |
| Alegria Family Services | August 30, 2022 | ransomware_live | — |
| Magnachem | August 30, 2022 | ransomware_live | — |
| International Custom Controls | August 29, 2022 | ransomware_live | — |
| Advance Corporation | August 29, 2022 | ransomware_live | — |
| The Preston Partnership | August 29, 2022 | ransomware_live | — |
| Rudman | August 29, 2022 | ransomware_live | — |
| Spalding Grammar School | August 29, 2022 | ransomware_live | — |
| .com | July 19, 2022 | ransomware_live | — |
| Conway Electrics | July 16, 2022 | ransomware_live | — |
| VERITAS Solicitors | July 16, 2022 | ransomware_live | — |
| ISGEC Heavy Engineering | July 16, 2022 | ransomware_live | — |
| Mooresville Schools | July 14, 2022 | ransomware_live | — |
| High Power Technical Services | July 14, 2022 | ransomware_live | — |
| Anderson Insurance Associates | July 14, 2022 | ransomware_live | — |
| Mackenzie Medical | July 14, 2022 | ransomware_live | — |
| Rain the Growth Agency | July 14, 2022 | ransomware_live | — |
← NewerPage 6 of 6
Claim data from ransomware.live and RansomLook (CC BY 4.0).