BreachCensus

conti

First seen July 31, 2020Active351 claimed victims

The claims below are reproduced as posted by conti on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.

Listed organisation? Contact [email protected].

Profile

Conti is an extremely damaging ransomware due to the speed with which it encrypts data and spreads to other systems. It was first observed in 2020 and it is thought to be led by a Russia-based cybercrime group that goes under the Wizard Spider pseudonym. In early May 2022, the US government announced a reward of up to $10 million for information on the Conti ransomware gang.

Description from ransomware.live.

Claimed victims (as posted by the group — unverified)

Victim (as posted)Claimed onSourcePress coverage
IJmond WerktSeptember 24, 2021ransomware_live—
Jakes Finer FoodsSeptember 24, 2021ransomware_live—
Vera Wang GroupSeptember 24, 2021ransomware_live—
Cedar Grove CompostingSeptember 24, 2021ransomware_live—
Real TimeSeptember 23, 2021ransomware_live—
Office Star ProductsSeptember 23, 2021ransomware_live—
PeakLogixSeptember 23, 2021ransomware_live—
NASCO IndustriesSeptember 22, 2021ransomware_live—
PowerGrid ServicesSeptember 22, 2021ransomware_live—
Marans Weisz & Newman, LLCSeptember 22, 2021ransomware_live—
BÖWE SYSTECSeptember 22, 2021ransomware_live—
Pines Ford LincolnSeptember 20, 2021ransomware_live—
aathonrtonSeptember 20, 2021ransomware_live—
AMAXSeptember 16, 2021ransomware_live—
ASSU 2000September 11, 2021ransomware_live—
SOLWARESeptember 9, 2021ransomware_live—
Hanwha Life VietnamSeptember 9, 2021ransomware_live—
Duke Manufacturing Co.September 9, 2021ransomware_live—
VIVEASeptember 9, 2021ransomware_live—
Bob PoynterSeptember 9, 2021ransomware_live—
DEBTIN CONSULTANTS (PTY) LTDSeptember 9, 2021ransomware_live—
completeportablesSeptember 9, 2021ransomware_live—
Milwaukee World Festival, IncSeptember 9, 2021ransomware_live—
world-electronicsSeptember 9, 2021ransomware_live—
Vendrig Holding B.V.September 9, 2021ransomware_live—
TURLA SRLSeptember 9, 2021ransomware_live—
Sanger & Altgelt Insurance AgentsSeptember 9, 2021ransomware_live—
RPE CONTRACTINGSeptember 9, 2021ransomware_live—
Riwega S.R.L.September 9, 2021ransomware_live—
MOSS BROS GROUPSeptember 9, 2021ransomware_live—
JAMAC FROZEN FOODSSeptember 9, 2021ransomware_live—
Frank G. Love Envelopes, Inc.September 9, 2021ransomware_live—
Grupo Herdez, S.A.B. de C.V. Holding CompaniesSeptember 9, 2021ransomware_live—
SAC WirelessJune 16, 2021ransomware_live—
Ireland's Health Service Executive (HSE)May 14, 2021ransomware_live—
City of TulsaApril 30, 2021ransomware_live—
Broward County Public SchoolsMarch 1, 2021ransomware_live—
Nocona General HospitalFebruary 3, 2021ransomware_live—
Rehoboth McKinley Christian Health Care ServicesFebruary 1, 2021ransomware_live—
FatFaceJanuary 17, 2021ransomware_live—
Scottish Environment Protection AgencyDecember 25, 2020ransomware_live—
Sangoma Technologies CorporationDecember 23, 2020ransomware_live—
Leon Medical CentersDecember 21, 2020ransomware_live—
Total System Services Inc. (TSYS)December 8, 2020ransomware_live—
AdvantechNovember 21, 2020ransomware_live—
Riverside Community CareOctober 21, 2020ransomware_live—
West End Medical CenterOctober 19, 2020ransomware_live—
Daniel B. Hastings (Customs broker and freight forwarder) (Part of CPH Group)October 1, 2020ransomware_live—
E.W Wylie of Daseke Inc. (Trucking company)October 1, 2020ransomware_live—
Fourth Judicial District Court of LouisianaSeptember 1, 2020ransomware_live—
Manitoulin Transport (Trucking/supply chain company)July 31, 2020ransomware_live—
← NewerPage 4 of 4

Claim data from ransomware.live and RansomLook (CC BY 4.0).