cipherforce
First seen February 23, 2026Active6 claimed victims
The claims below are reproduced as posted by cipherforce on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
CipherForce is a newly emerged ransomware group first detected in early 2026, operating a dark web leak site and targeting technology, business services, and logistics companies across the US, China, Vietnam, India, and UAE, with at least 6 claimed victims.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| Biaodianyun Group Ltd | February 23, 2026 | ransomware_live | — |
| hiringsteps.com | February 23, 2026 | ransomware_live | — |
| tektreeinc.com | February 23, 2026 | ransomware_live | — |
| FindNear | February 23, 2026 | ransomware_live | — |
| Zip24 - ShipOx | February 23, 2026 | ransomware_live | — |
| Accuick | February 23, 2026 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).