conti
First seen July 31, 2020Active351 claimed victims
The claims below are reproduced as posted by conti on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
Conti is an extremely damaging ransomware due to the speed with which it encrypts data and spreads to other systems. It was first observed in 2020 and it is thought to be led by a Russia-based cybercrime group that goes under the Wizard Spider pseudonym. In early May 2022, the US government announced a reward of up to $10 million for information on the Conti ransomware gang.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| Alliance Steel | June 7, 2022 | ransomware_live | — |
| The Contact Company | May 25, 2022 | ransomware_live | — |
| LCRD | May 25, 2022 | ransomware_live | — |
| RateGain | May 24, 2022 | ransomware_live | — |
| Schaumburg Park District | May 24, 2022 | ransomware_live | — |
| Central Restaurant Products | May 24, 2022 | ransomware_live | — |
| Allcat Claims Service | May 23, 2022 | ransomware_live | — |
| Pianca | May 23, 2022 | ransomware_live | — |
| Omicron Consulting S.r.L | May 23, 2022 | ransomware_live | — |
| Worksoft | May 23, 2022 | ransomware_live | — |
| Alimentos y Frutos S.A. | May 23, 2022 | ransomware_live | — |
| Agile Sourcing Partners | May 23, 2022 | ransomware_live | — |
| Eurofred | May 23, 2022 | ransomware_live | — |
| Concepts in Millwork | May 23, 2022 | ransomware_live | — |
| Imenco AS | May 23, 2022 | ransomware_live | — |
| FOR BlackCat and LockBit advert | May 17, 2022 | ransomware_live | — |
| For Costa Rica and US terrorists (Biden and his administration) | May 14, 2022 | ransomware_live | — |
| Cjk Group, Inc. | May 12, 2022 | ransomware_live | — |
| EYP | May 4, 2022 | ransomware_live | — |
| LARON an otp industrial solutions company | April 28, 2022 | ransomware_live | — |
| For Peru | April 27, 2022 | ransomware_live | — |
| Attica Holdings S.A. | April 27, 2022 | ransomware_live | — |
| Elgin_Ca | April 25, 2022 | ransomware_live | — |
| Jasec | April 23, 2022 | ransomware_live | — |
| Attica Group | April 20, 2022 | ransomware_live | — |
| For Costa Rica | April 19, 2022 | ransomware_live | — |
| Del Sol | April 19, 2022 | ransomware_live | — |
| Instituto Meteorológico Nacional | April 19, 2022 | ransomware_live | — |
| Instituto Meteorológico Nacional and racsa.go.cr | April 19, 2022 | ransomware_live | — |
| Nordex SE | April 18, 2022 | ransomware_live | — |
| Centris | April 18, 2022 | ransomware_live | — |
| Tucker Door & Trim | April 17, 2022 | ransomware_live | — |
| Ministerio de Hacienda - República de Costa Rica | April 17, 2022 | ransomware_live | — |
| CJ Pony Parts | April 15, 2022 | ransomware_live | — |
| [IMPORTANT ANNOUNCEMENT!] | April 15, 2022 | ransomware_live | — |
| Elevate Services | April 14, 2022 | ransomware_live | — |
| Big Horn Plastering of Colorado, Inc. | April 14, 2022 | ransomware_live | — |
| TIC International Corporation | April 12, 2022 | ransomware_live | — |
| Eminox | April 11, 2022 | ransomware_live | — |
| MARTINELLI GINETTO | April 11, 2022 | ransomware_live | — |
| CAE Services | April 11, 2022 | ransomware_live | — |
| Newlat Food SPA | April 11, 2022 | ransomware_live | — |
| Snap-on Incorporated | April 10, 2022 | ransomware_live | — |
| Wocklum Group | April 8, 2022 | ransomware_live | — |
| Barwick Bathroom Distribution LLP | April 6, 2022 | ransomware_live | — |
| panasonic | April 5, 2022 | ransomware_live | — |
| TRUSTFORD | April 4, 2022 | ransomware_live | — |
| Woningcorporatie ZAYAZ | April 4, 2022 | ransomware_live | — |
| Frey and Winkler GmbH | April 3, 2022 | ransomware_live | — |
| SLH | April 3, 2022 | ransomware_live | — |
| MANUFAST | April 2, 2022 | ransomware_live | — |
| FlipChip | April 2, 2022 | ransomware_live | — |
| Ackerman Plumbing | April 2, 2022 | ransomware_live | — |
| Lowell | April 1, 2022 | ransomware_live | — |
| I-SEC International Security | April 1, 2022 | ransomware_live | — |
| Midea Carrier | April 1, 2022 | ransomware_live | — |
| GIBSON HomeWares | April 1, 2022 | ransomware_live | — |
| Zeeland Farm Services, Inc. | March 31, 2022 | ransomware_live | — |
| Parker Appliance Company | March 31, 2022 | ransomware_live | — |
| Rettenmeier Holding AG | March 31, 2022 | ransomware_live | — |
| Prima Sole Components Spa | March 31, 2022 | ransomware_live | — |
| BANQUE CENTRALE DE TUNISIE | March 30, 2022 | ransomware_live | — |
| Scott Manufacturing, LLC | March 30, 2022 | ransomware_live | — |
| GRS Group | March 29, 2022 | ransomware_live | — |
| Azimut Benetti Group | March 29, 2022 | ransomware_live | — |
| Royal Brunei Airlines Sdn Bhd | March 29, 2022 | ransomware_live | — |
| Automobil Holding AS | March 29, 2022 | ransomware_live | — |
| Critical Content | March 29, 2022 | ransomware_live | — |
| ITECOR International SA | March 29, 2022 | ransomware_live | — |
| UNITEK Contracting Group | March 28, 2022 | ransomware_live | — |
| Allied Eagle Supply | March 28, 2022 | ransomware_live | — |
| Neschen Coating GmbH | March 28, 2022 | ransomware_live | — |
| ONCALL Language Services | March 28, 2022 | ransomware_live | — |
| AB Karl Hedin | March 28, 2022 | ransomware_live | — |
| Hochschild Mining | March 27, 2022 | ransomware_live | — |
| Shapiro and Duncan | March 24, 2022 | ransomware_live | — |
| WELCOME HOTELS | March 23, 2022 | ransomware_live | — |
| Sav-Rx Prescription Services | March 23, 2022 | ransomware_live | — |
| Anac | March 22, 2022 | ransomware_live | — |
| Sanoh America Inc. | March 22, 2022 | ransomware_live | — |
| OCA Global | March 21, 2022 | ransomware_live | — |
| PFC USA | March 20, 2022 | ransomware_live | — |
| MJH Life Sciences | March 20, 2022 | ransomware_live | — |
| BDX | March 19, 2022 | ransomware_live | — |
| bChannels Ltd. | March 19, 2022 | ransomware_live | — |
| Normandeau Associates, Inc. | March 19, 2022 | ransomware_live | — |
| BAUKING | March 19, 2022 | ransomware_live | — |
| TIG | March 18, 2022 | ransomware_live | — |
| NORDEX FOOD | March 18, 2022 | ransomware_live | — |
| Talent Logic Inc. | March 18, 2022 | ransomware_live | — |
| Milan Institute | March 17, 2022 | ransomware_live | — |
| Empire Electronics Inc. | March 17, 2022 | ransomware_live | — |
| IMT GROUP | March 17, 2022 | ransomware_live | — |
| Managed Business Solutions | March 17, 2022 | ransomware_live | — |
| AllOffice | March 17, 2022 | ransomware_live | — |
| TST Logistics | March 9, 2022 | ransomware_live | — |
| Great HealthWorks | March 9, 2022 | ransomware_live | — |
| Aluminerie Alouette | March 9, 2022 | ransomware_live | — |
| Myron Corp. | March 8, 2022 | ransomware_live | — |
| Loepthien Maeder Treuhand AG | March 7, 2022 | ransomware_live | — |
Page 1 of 4Older →
Claim data from ransomware.live and RansomLook (CC BY 4.0).