blackshrantac
First seen September 17, 2025Active43 claimed victims
The claims below are reproduced as posted by blackshrantac on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
BlackShrantac is a ransomware group that emerged in late 2025, targeting organizations in manufacturing, financial services, technology, and the public sector globally, employing double-extortion combined with living-off-the-land techniques to weaponize legitimate tools and disable defenses before encrypting files.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| PKT QS | January 16, 2026 | ransomware_live | — |
| SCHNEIDER PROTOTYPING INDIA PVT. LTD | January 8, 2026 | ransomware_live | — |
| National Water Authority | January 8, 2026 | ransomware_live | — |
| Agrícola Cerro Prieto | December 23, 2025 | ransomware_live | — |
| SCHNEIDER PROTOTYPING INDIA PVT LTD | December 20, 2025 | ransomware_live | — |
| Netstar Australia PTY Ltd | December 17, 2025 | ransomware_live | — |
| demilac, Inc | December 15, 2025 | ransomware_live | — |
| VFM Systems & Services (P) Ltd | December 14, 2025 | ransomware_live | — |
| Badan Pengelola Keuangan Haji | November 29, 2025 | ransomware_live | — |
| Rasen Insaat Ve Yatirim Ticaret A.S. | November 29, 2025 | ransomware_live | — |
| HexaCream Dental Laboratory | November 28, 2025 | ransomware_live | — |
| Superintendencia Nacional de Fiscalización Laboral | November 21, 2025 | ransomware_live | — |
| M&BM, Inc | November 13, 2025 | ransomware_live | — |
| simsekas, Inc | November 13, 2025 | ransomware_live | — |
| Carvimsa | November 13, 2025 | ransomware_live | — |
| MultistateTax Inc | November 13, 2025 | ransomware_live | — |
| Newgen Digitalwork | November 13, 2025 | ransomware_live | — |
| libertyshoes, Inc | November 13, 2025 | ransomware_live | — |
| TENAX Law Group PC | October 31, 2025 | ransomware_live | — |
| CyPark Resources Berhad | October 31, 2025 | ransomware_live | — |
| The Matlusky Firm LLC | October 31, 2025 | ransomware_live | — |
| CCI Tax Pros, Inc | October 31, 2025 | ransomware_live | — |
| ApleNet Co., Ltd | October 30, 2025 | ransomware_live | — |
| Eligibility Tracking Calculators | October 28, 2025 | ransomware_live | — |
| Al Ahly Leasing & Factoring Company | October 20, 2025 | ransomware_live | — |
| Cabinets 2000, LLC | October 20, 2025 | ransomware_live | — |
| Computer World W.L.L | October 20, 2025 | ransomware_live | — |
| ETC Companies | October 19, 2025 | ransomware_live | — |
| SK shieldus | October 17, 2025 | ransomware_live | — |
| Gulf Warranties LLC | October 16, 2025 | ransomware_live | — |
| Cabinets 2000 Inc | October 15, 2025 | ransomware_live | — |
| Altas Temizlik | October 13, 2025 | ransomware_live | — |
| Falco Electronics | October 10, 2025 | ransomware_live | — |
| Standard Fiber | October 4, 2025 | ransomware_live | — |
| S*** F***.com | October 2, 2025 | ransomware_live | — |
| General Directorate of Taxes and Estates | September 29, 2025 | ransomware_live | — |
| Ak** Me*** | September 26, 2025 | ransomware_live | — |
| Sta***** Fib**.com | September 26, 2025 | ransomware_live | — |
| Klinglnberg india pvt ltd | September 20, 2025 | ransomware_live | — |
| Altaş | September 20, 2025 | ransomware_live | — |
| klingLnberg.in | September 18, 2025 | ransomware_live | — |
| alt******.tr | September 17, 2025 | ransomware_live | — |
| kli******erg.in | September 17, 2025 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).