coinbasecartel
First seen September 15, 2025Active206 claimed victims
The claims below are reproduced as posted by coinbasecartel on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
CoinbaseCartel specializes in data acquisition through system access and strategic partnerships. It focus exclusively on data exfiltration—our operations never involve system encryption or operational disruption.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| Westwing Group SE | August 23, 2026 | ransomware_live | — |
| PT. Bank Perekonomian Rakyat Bintan | August 22, 2026 | ransomware_live | — |
| PT Perusahaan Jamu Air Mancur | August 22, 2026 | ransomware_live | — |
| LifeBank Microfinance Foundation | August 22, 2026 | ransomware_live | — |
| Abacus Advisors | August 22, 2026 | ransomware_live | — |
| Patel | August 22, 2026 | ransomware_live | — |
| Klasko Immigration Law Partners | August 22, 2026 | ransomware_live | — |
| Kessler Creative | August 22, 2026 | ransomware_live | — |
| Longhorn Investments | August 22, 2026 | ransomware_live | — |
| OTEIS Conseil & Ingénierie | August 22, 2026 | ransomware_live | — |
| Flecha Bus | August 22, 2026 | ransomware_live | — |
| Tower Insurance | August 22, 2026 | ransomware_live | — |
| RXPE Group | August 22, 2026 | ransomware_live | — |
| Integrated Health Systems | August 22, 2026 | ransomware_live | — |
| Advanced Engineering Consultants | August 19, 2026 | ransomware_live | — |
| Crowe | August 19, 2026 | ransomware_live | — |
| Sweet Water Holdings | August 14, 2026 | ransomware_live | — |
| Serruya private equity | August 14, 2026 | ransomware_live | — |
| Turner and Townsend | August 14, 2026 | ransomware_live | — |
| Hitachi High-Tech | August 13, 2026 | ransomware_live | — |
| Xs Cad | August 1, 2026 | ransomware_live | — |
| M. B. Kahn Construction Co. | August 1, 2026 | ransomware_live | — |
| MIM Fertility | August 1, 2026 | ransomware_live | — |
| CEN and Cenelec | August 1, 2026 | ransomware_live | — |
| Accesso | July 28, 2026 | ransomware_live | — |
| Colliers Real Estate | July 20, 2026 | ransomware_live | — |
| Caterpillar | July 20, 2026 | ransomware_live | — |
| PanasonicAero | July 15, 2026 | ransomware_live | — |
| Axiom GlobalNEW | July 14, 2026 | ransomware_live | — |
| Cambridge Mobile Telematics | June 12, 2026 | ransomware_live | — |
| Demand.io | June 12, 2026 | ransomware_live | — |
| Cambridge Mobile TelematicNEW | June 5, 2026 | ransomware_live | — |
| Demand.ioNEW | June 5, 2026 | ransomware_live | — |
| Cambridge Mobile TelematicsNEW | June 2, 2026 | ransomware_live | — |
| Pragmatic Solutions | May 30, 2026 | ransomware_live | — |
| Openmind networks | May 30, 2026 | ransomware_live | — |
| Siveco - | May 30, 2026 | ransomware_live | — |
| Grafana | May 15, 2026 | ransomware_live | — |
| Zywave | May 15, 2026 | ransomware_live | — |
| Buenos Aires Software | May 13, 2026 | ransomware_live | — |
| Cass information Systems | May 11, 2026 | ransomware_live | — |
| Tab Service | May 11, 2026 | ransomware_live | — |
| Alpinion | May 11, 2026 | ransomware_live | — |
| Jozef Stefan Institute (IJS) | May 11, 2026 | ransomware_live | — |
| Aptim | April 23, 2026 | ransomware_live | — |
| Peru LNG (Hunt LNG Operating Company) | April 23, 2026 | ransomware_live | — |
| Precision Coating | April 23, 2026 | ransomware_live | — |
| Sea Telecom Br | April 23, 2026 | ransomware_live | — |
| Kementerian Pertanian | April 23, 2026 | ransomware_live | — |
| Engie | April 20, 2026 | ransomware_live | — |
| Playmates Toys | April 20, 2026 | ransomware_live | — |
| Commscope | April 20, 2026 | ransomware_live | — |
| SIG.biz | April 20, 2026 | ransomware_live | — |
| Evict them for me | April 18, 2026 | ransomware_live | — |
| McCuaig and associates Engineering | April 18, 2026 | ransomware_live | — |
| Altpro | April 18, 2026 | ransomware_live | — |
| Securitevolfeu | April 18, 2026 | ransomware_live | — |
| ASTM Group | April 18, 2026 | ransomware_live | — |
| Cognizant | April 15, 2026 | ransomware_live | — |
| Astreya | April 15, 2026 | ransomware_live | — |
| Sampol | April 15, 2026 | ransomware_live | — |
| La Maison Bleue France | April 15, 2026 | ransomware_live | — |
| Rogiken / institute of Science Tokyo | April 15, 2026 | ransomware_live | — |
| Kemenpppa | April 15, 2026 | ransomware_live | — |
| Millenium Packaging | April 15, 2026 | ransomware_live | — |
| Questivity | April 15, 2026 | ransomware_live | — |
| Wayne Brothers Construction | April 15, 2026 | ransomware_live | — |
| GL Steel | April 15, 2026 | ransomware_live | — |
| Superintendency of territorial planning | April 15, 2026 | ransomware_live | — |
| Epoch Times | April 15, 2026 | ransomware_live | — |
| Vluznet | April 15, 2026 | ransomware_live | — |
| UOM University | April 15, 2026 | ransomware_live | — |
| The Epoch Times | April 15, 2026 | ransomware_live | — |
| Flash Charm INC - (IDERA) | April 14, 2026 | ransomware_live | — |
| Carters | April 12, 2026 | ransomware_live | — |
| Ralph Lauren | April 12, 2026 | ransomware_live | — |
| Helzberg | April 12, 2026 | ransomware_live | — |
| Idera - 1.5 TB data | April 8, 2026 | ransomware_live | — |
| Scholle IPN - 1.7 TB Data | April 8, 2026 | ransomware_live | — |
| JBS Brazil - Sample uploaded | April 8, 2026 | ransomware_live | — |
| Idera - | April 8, 2026 | ransomware_live | — |
| EasTech | April 8, 2026 | ransomware_live | — |
| Correios | April 8, 2026 | ransomware_live | — |
| KEB | April 8, 2026 | ransomware_live | — |
| Balfour Beatty | April 8, 2026 | ransomware_live | — |
| Scholle IPN | April 8, 2026 | ransomware_live | — |
| PC SOFT FRANCE - Leaked | April 2, 2026 | ransomware_live | — |
| RAKS Sp. z o.o. b Leaked | April 2, 2026 | ransomware_live | — |
| Verimatrix - 43gb Leaked | March 30, 2026 | ransomware_live | — |
| Efficy - 43gb leaked | March 30, 2026 | ransomware_live | — |
| Propertyfinder / PropSpace CRM - In aucitioin place your bids now !!! | March 30, 2026 | ransomware_live | — |
| Studiosus Reisen Munchen | March 30, 2026 | ransomware_live | — |
| Nashua | March 30, 2026 | ransomware_live | — |
| Buffalo Neuroimaging Analysis Center | March 30, 2026 | ransomware_live | — |
| Silver Peak | March 30, 2026 | ransomware_live | — |
| Northcroft | March 30, 2026 | ransomware_live | — |
| Siveco | March 30, 2026 | ransomware_live | — |
| Dronena | March 30, 2026 | ransomware_live | — |
| Posiflex | March 30, 2026 | ransomware_live | — |
| Net Solace | March 30, 2026 | ransomware_live | — |
Page 1 of 3Older →
Claim data from ransomware.live and RansomLook (CC BY 4.0).