daixin
First seen August 3, 2022Active21 claimed victims
The claims below are reproduced as posted by daixin on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
Daixin Team is a ransomware and data extortion group active since at least June 2022, exclusively targeting the US Healthcare and Public Health sector by encrypting EHR and diagnostic systems and exfiltrating patient data to pressure victims into paying ransoms.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| Gagosian | September 11, 2025 | ransomware_live | — |
| Insurance Office of America | September 11, 2025 | ransomware_live | — |
| Communicare Inc. | September 11, 2025 | ransomware_live | — |
| SGS Co | September 11, 2025 | ransomware_live | — |
| Acadian Ambulance | July 22, 2024 | ransomware_live | — |
| Dubai Municipality | June 5, 2024 | ransomware_live | — |
| Omni Hotels & Resorts | April 14, 2024 | ransomware_live | — |
| Graphic Solutions Group Inc | December 9, 2023 | ransomware_live | — |
| North Texas Municipal Water District | November 28, 2023 | ransomware_live | — |
| Bluewater Health (CA) and others | November 2, 2023 | ransomware_live | — |
| Columbus Regional Healthcare System | June 9, 2023 | ransomware_live | — |
| Hit Promotional Products | March 29, 2023 | ransomware_live | — |
| B&G Foods | February 11, 2023 | ransomware_live | — |
| Guardian Analytics | January 20, 2023 | ransomware_live | — |
| Astra Daihatsu Motor | November 24, 2022 | ransomware_live | — |
| AirAsia Group | November 19, 2022 | ransomware_live | — |
| OakBend Medical | September 13, 2022 | ransomware_live | — |
| OakBend Medical Center | September 1, 2022 | ransomware_live | — |
| ISTA International GmbH | August 9, 2022 | ransomware_live | — |
| Trib Total Media | August 3, 2022 | ransomware_live | — |
| Fitzgibbon Hospital | August 3, 2022 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).