blackbyte
First seen October 4, 2021Active147 claimed victims
The claims below are reproduced as posted by blackbyte on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
Ransomware. Uses dropper written in JavaScript to deploy a .NET payload.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| Towne Mortgage | July 30, 2025 | ransomware_live | — |
| Cpat Flex | July 30, 2025 | ransomware_live | — |
| Lee & Associates | July 30, 2025 | ransomware_live | — |
| DARA Pharma | July 20, 2025 | ransomware_live | — |
| Helpsonv | July 16, 2025 | ransomware_live | — |
| Allstarmg | July 16, 2025 | ransomware_live | — |
| Ark Consultancy | July 16, 2025 | ransomware_live | — |
| T2 Group | July 16, 2025 | ransomware_live | — |
| GreenLight Biosciences | July 16, 2025 | ransomware_live | — |
| TOTVS | September 30, 2024 | ransomware_live | — |
| Modern Automotive Group | July 17, 2024 | ransomware_live | — |
| Modernauto | July 17, 2024 | ransomware_live | — |
| Cityofnewburgh-ny.gov | June 22, 2024 | ransomware_live | — |
| City of Newburgh | June 22, 2024 | ransomware_live | — |
| Encina Wastewater Authority | March 13, 2024 | ransomware_live | — |
| Encinajpa | March 6, 2024 | ransomware_live | — |
| Meridian Cooperative | October 4, 2023 | ransomware_live | — |
| Hoteles Xcaret | September 18, 2023 | ransomware_live | — |
| Alps Alpine | September 11, 2023 | ransomware_live | — |
| Kirby Risk | September 9, 2023 | ransomware_live | — |
| Chambersburg Area School District | September 7, 2023 | ransomware_live | — |
| FOCUS Business Solutions | September 7, 2023 | ransomware_live | — |
| Smead | September 6, 2023 | ransomware_live | — |
| Ontellus | August 24, 2023 | ransomware_live | — |
| Avalign Technologies | July 5, 2023 | ransomware_live | — |
| Brett Martin | July 3, 2023 | ransomware_live | — |
| Multistack | June 16, 2023 | ransomware_live | — |
| Kisco Senior Living | June 16, 2023 | ransomware_live | — |
| Fiege Sp. z o.o. | June 14, 2023 | ransomware_live | — |
| YAMAHA CORPORATION OF AMERICA | June 14, 2023 | ransomware_live | — |
| The Texwipe | June 14, 2023 | ransomware_live | — |
| NEBRASKALAND | June 14, 2023 | ransomware_live | — |
| City of Augusta | May 25, 2023 | ransomware_live | — |
| Magic-Aire | May 17, 2023 | ransomware_live | — |
| Sterling Solutions | May 12, 2023 | ransomware_live | — |
| PRESS-SERVICE Monitoring Mediów | May 4, 2023 | ransomware_live | — |
| Dacotah Paper | April 25, 2023 | ransomware_live | — |
| Easy Automation | April 22, 2023 | ransomware_live | — |
| Saobacdau Technologies Group | April 15, 2023 | ransomware_live | — |
| Gulliver International | April 15, 2023 | ransomware_live | — |
| Esperanza Viva Jóvenes de México | April 15, 2023 | ransomware_live | — |
| City of Collegedale | April 9, 2023 | ransomware_live | — |
| Cementos Bio-Bio | April 9, 2023 | ransomware_live | — |
| Crown Grinding & Machining | April 9, 2023 | ransomware_live | — |
| Creation Baumann | April 9, 2023 | ransomware_live | — |
| Kelly Group | March 20, 2023 | ransomware_live | — |
| Etex Communications | March 16, 2023 | ransomware_live | — |
| Falcon Holdings | March 9, 2023 | ransomware_live | — |
| Wagner CAT | March 8, 2023 | ransomware_live | — |
| Inland Group | February 12, 2023 | ransomware_live | — |
| Penn Power Group | February 7, 2023 | ransomware_live | — |
| ARC | January 16, 2023 | ransomware_live | — |
| K2 Sports | January 14, 2023 | ransomware_live | — |
| Kansas City Homes | January 5, 2023 | ransomware_live | — |
| Hayward | January 5, 2023 | ransomware_live | — |
| Ellison Technologies | January 5, 2023 | ransomware_live | — |
| CAPMC | January 4, 2023 | ransomware_live | — |
| CPTM | December 29, 2022 | ransomware_live | — |
| lapiamontesa | November 22, 2022 | ransomware_live | — |
| ALTEK | November 7, 2022 | ransomware_live | — |
| Broto Legal | November 5, 2022 | ransomware_live | — |
| PETERSON & HANSON | November 5, 2022 | ransomware_live | — |
| Asahi Group | October 29, 2022 | ransomware_live | — |
| Municipio de Chihuahua | October 26, 2022 | ransomware_live | — |
| CCLint | October 26, 2022 | ransomware_live | — |
| UNE | October 21, 2022 | ransomware_live | — |
| Pitman Family Farms | October 20, 2022 | ransomware_live | — |
| Almoayed ICT | October 1, 2022 | ransomware_live | — |
| Swiss American | October 1, 2022 | ransomware_live | — |
| South Pacific Inc | September 19, 2022 | ransomware_live | — |
| Biggest News | September 19, 2022 | ransomware_live | — |
| TIB Development Bank | September 11, 2022 | ransomware_live | — |
| Davin Industries Ltd | September 11, 2022 | ransomware_live | — |
| Speed-Buster | September 5, 2022 | ransomware_live | — |
| Alan Smith | September 1, 2022 | ransomware_live | — |
| Grande Stevens | August 28, 2022 | ransomware_live | — |
| Torin Drive | August 28, 2022 | ransomware_live | — |
| GMX | August 24, 2022 | ransomware_live | — |
| Apex | August 23, 2022 | ransomware_live | — |
| Apex Capital Corp | August 17, 2022 | ransomware_live | — |
| PSA | July 11, 2022 | ransomware_live | — |
| Lamoille Health | July 6, 2022 | ransomware_live | — |
| Gatewayrehab | July 6, 2022 | ransomware_live | — |
| Napa Valley College | June 26, 2022 | ransomware_live | — |
| Opal | June 12, 2022 | ransomware_live | — |
| Contraloría General de la República | May 21, 2022 | ransomware_live | — |
| Grupo Pavisa | May 21, 2022 | ransomware_live | — |
| ats-insubria.it | May 12, 2022 | ransomware_live | — |
| usu.org.au | May 12, 2022 | ransomware_live | — |
| xydias.gr | May 12, 2022 | ransomware_live | — |
| SOGEGROSS SPA | May 2, 2022 | ransomware_live | — |
| M+R SPEDAG GROUP | May 2, 2022 | ransomware_live | — |
| FRANSABANK | May 2, 2022 | ransomware_live | — |
| GEBE | March 30, 2022 | ransomware_live | — |
| Credit Risk Management Canada | March 30, 2022 | ransomware_live | — |
| MZ Architects | March 30, 2022 | ransomware_live | — |
| Autumn Transport | March 30, 2022 | ransomware_live | — |
| London College of Beauty Therapy | March 30, 2022 | ransomware_live | — |
| h1{ | March 27, 2022 | ransomware_live | — |
| Diamond Pet Foods | March 27, 2022 | ransomware_live | — |
Page 1 of 2Older →
Claim data from ransomware.live and RansomLook (CC BY 4.0).