coinbasecartel
First seen September 15, 2025Active206 claimed victims
The claims below are reproduced as posted by coinbasecartel on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
CoinbaseCartel specializes in data acquisition through system access and strategic partnerships. It focus exclusively on data exfiltration—our operations never involve system encryption or operational disruption.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| PC SOFT FRANCE - Leaked data | March 30, 2026 | ransomware_live | — |
| Genobank | March 28, 2026 | ransomware_live | — |
| Petra Industries | March 19, 2026 | ransomware_live | — |
| Ariston | March 19, 2026 | ransomware_live | — |
| Verimatrix | March 19, 2026 | ransomware_live | — |
| Tecnocap Group | March 19, 2026 | ransomware_live | — |
| Onyx Graphics | March 19, 2026 | ransomware_live | — |
| PC SOFT FRANCE | March 19, 2026 | ransomware_live | — |
| Tecnocad Group | March 19, 2026 | ransomware_live | — |
| Novogene | March 15, 2026 | ransomware_live | — |
| Neochromosome | March 15, 2026 | ransomware_live | — |
| Geno Bank | March 15, 2026 | ransomware_live | — |
| nChroma Bio | March 15, 2026 | ransomware_live | — |
| Augenomics | March 15, 2026 | ransomware_live | — |
| Dolby Laboratories - Sample | March 15, 2026 | ransomware_live | — |
| ILLUMINA - Data uploaded | March 15, 2026 | ransomware_live | — |
| ATG - New samples added | March 15, 2026 | ransomware_live | — |
| JBS Brazil - We have 3TB of your data - Pics added | March 11, 2026 | ransomware_live | — |
| Lacoste | March 11, 2026 | ransomware_live | — |
| Canada Goose | March 11, 2026 | ransomware_live | — |
| JBS Brazil - We have 3TB of your data | March 5, 2026 | ransomware_live | — |
| SK-Telecom - Data reuploaded | February 28, 2026 | ransomware_live | — |
| Triumph International | February 27, 2026 | ransomware_live | — |
| Aptean | February 24, 2026 | ransomware_live | — |
| Dalet | February 24, 2026 | ransomware_live | — |
| Westwing Home & Living | February 24, 2026 | ransomware_live | — |
| Triumph Group | February 24, 2026 | ransomware_live | — |
| Symeta | February 24, 2026 | ransomware_live | — |
| Efficy | February 16, 2026 | ransomware_live | — |
| Mold Tech | February 16, 2026 | ransomware_live | — |
| PT Ikapharmindo Putramas | February 16, 2026 | ransomware_live | — |
| Logility | February 6, 2026 | ransomware_live | — |
| Dolby Laboratories | January 31, 2026 | ransomware_live | — |
| Pellenc | January 31, 2026 | ransomware_live | — |
| CigamSoftware | January 31, 2026 | ransomware_live | — |
| Neuviz | January 31, 2026 | ransomware_live | — |
| Pacific Airlines | January 29, 2026 | ransomware_live | — |
| RAKS Sp. z o.o. | January 29, 2026 | ransomware_live | — |
| NGC Software | January 29, 2026 | ransomware_live | — |
| Insight | December 20, 2025 | ransomware_live | — |
| ILLUMINA | December 16, 2025 | ransomware_live | — |
| C*** | A******** - Contact us by monday | December 12, 2025 | ransomware_live | — |
| GDEV | December 12, 2025 | ransomware_live | — |
| ATG | December 12, 2025 | ransomware_live | — |
| Arcom Digital | December 12, 2025 | ransomware_live | — |
| Maven Solutions | December 12, 2025 | ransomware_live | — |
| Solarpro Holding | December 12, 2025 | ransomware_live | — |
| Twinsoft | December 12, 2025 | ransomware_live | — |
| Sotheby’s International Realty | December 9, 2025 | ransomware_live | — |
| One Broker Group | December 9, 2025 | ransomware_live | — |
| Coldwell Banker UAE | December 9, 2025 | ransomware_live | — |
| Hunt & Harris Real Estate | December 9, 2025 | ransomware_live | — |
| Betterhomes | December 9, 2025 | ransomware_live | — |
| Savills Middle East/Cluttons | December 9, 2025 | ransomware_live | — |
| Harbor Real Estate | December 9, 2025 | ransomware_live | — |
| Elysian Real Estate | December 9, 2025 | ransomware_live | — |
| Homes 4 Life | December 9, 2025 | ransomware_live | — |
| Arabian Escapes | December 9, 2025 | ransomware_live | — |
| Acu Trans Solutions | December 9, 2025 | ransomware_live | — |
| Renesas Electronics | December 6, 2025 | ransomware_live | — |
| R* E* | December 2, 2025 | ransomware_live | — |
| amcor | November 25, 2025 | ransomware_live | — |
| Kewaunee Scientific | November 20, 2025 | ransomware_live | — |
| SAExploration | November 20, 2025 | ransomware_live | — |
| CIGAM Software Corporativo Ltda | November 20, 2025 | ransomware_live | — |
| SGK INC | November 13, 2025 | ransomware_live | — |
| Cinvestav | November 13, 2025 | ransomware_live | — |
| Avery Dennison | November 13, 2025 | ransomware_live | — |
| Takedown #1799 | November 13, 2025 | ransomware_live | — |
| Propertyfinder / PropSpace CRM | November 10, 2025 | ransomware_live | — |
| Integer Holdings | November 10, 2025 | ransomware_live | — |
| Property Finder / PropSpace | November 4, 2025 | ransomware_live | — |
| CEVA LOGISTICS - THIS DATABASE IS FOR SALE | November 2, 2025 | ransomware_live | — |
| SK-Telecom | October 29, 2025 | ransomware_live | — |
| PF / PS | October 29, 2025 | ransomware_live | — |
| TBM Service Group | October 29, 2025 | ransomware_live | — |
| Limocar by Transdev.ca | October 26, 2025 | ransomware_live | — |
| [#1648] Redacted | October 17, 2025 | ransomware_live | — |
| ChampionX | October 15, 2025 | ransomware_live | — |
| Schedler-translog | October 14, 2025 | ransomware_live | — |
| Carewell | October 13, 2025 | ransomware_live | — |
| Canias ERP | October 13, 2025 | ransomware_live | — |
| Legal Boutique | October 13, 2025 | ransomware_live | — |
| Borrowell.com | October 13, 2025 | ransomware_live | — |
| Kuehne + Nagel | October 13, 2025 | ransomware_live | — |
| dsv.com | October 13, 2025 | ransomware_live | — |
| PLC-Transportation | October 13, 2025 | ransomware_live | — |
| The L B | September 30, 2025 | ransomware_live | — |
| C Well | September 30, 2025 | ransomware_live | — |
| BW-RF | September 28, 2025 | ransomware_live | — |
| BAM | September 28, 2025 | ransomware_live | — |
| Ceva Logistics | September 15, 2025 | ransomware_live | — |
| Plug Power | September 15, 2025 | ransomware_live | — |
| NTT Data/Vectorform | September 15, 2025 | ransomware_live | — |
| Focus R Technologies Pvt | September 15, 2025 | ransomware_live | — |
| AdScale | September 15, 2025 | ransomware_live | — |
| [Removed] #1534 | September 15, 2025 | ransomware_live | — |
| SK Telecom | September 15, 2025 | ransomware_live | — |
| Marlborough Partners - 1 TB data | August 25, 2025 | ransomware_live | — |
| Marlborough Partners | August 25, 2025 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).