dAn0n
Also known as: dan0nFirst seen April 25, 2024Active33 claimed victims
The claims below are reproduced as posted by dAn0n on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
dAn0n emerged in early 2024 operating a RaaS model, rapidly claiming 13 victims in May 2024 alone, predominantly targeting US-based organizations in business services and filling the vacuum left by disruptions to LockBit and BlackCat/ALPHV.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| www.seaeng.com | August 23, 2024 | ransomware_live | — |
| mmtransport.com | August 14, 2024 | ransomware_live | — |
| www.dunnsolutions.com | August 9, 2024 | ransomware_live | — |
| thesourcinggroup.com | July 23, 2024 | ransomware_live | — |
| promarkbrands.com | June 27, 2024 | ransomware_live | — |
| fifcousa.com | June 17, 2024 | ransomware_live | — |
| S&F Concrete Contractors | May 23, 2024 | ransomware_live | — |
| s-f-concrete.com | May 23, 2024 | ransomware_live | — |
| College Park Industries | May 8, 2024 | ransomware_live | — |
| Glenwood Management | May 8, 2024 | ransomware_live | — |
| Northeast Orthopedics and Sports Medicine | May 8, 2024 | ransomware_live | — |
| college-park.com | May 8, 2024 | ransomware_live | — |
| glenwoodnyc.com | May 8, 2024 | ransomware_live | — |
| neosmteam.com | May 8, 2024 | ransomware_live | — |
| Information Integration Experts | May 7, 2024 | ransomware_live | — |
| iiexperts.com | May 7, 2024 | ransomware_live | — |
| Erler & Kalinowski | April 26, 2024 | ransomware_live | — |
| ekiconsult.com | April 26, 2024 | ransomware_live | — |
| O'Connell Mahon Architects | April 15, 2024 | ransomware_live | — |
| oconnellmahon.ie | April 15, 2024 | ransomware_live | — |
| Semilab | April 11, 2024 | ransomware_live | — |
| semilab.com | April 11, 2024 | ransomware_live | — |
| Allen Blasting and Coating | April 10, 2024 | ransomware_live | — |
| allenblastingandcoating.com | April 10, 2024 | ransomware_live | — |
| United Equitable Group | April 2, 2024 | ransomware_live | — |
| ueg1.com | April 2, 2024 | ransomware_live | — |
| RSH legal | March 30, 2024 | ransomware_live | — |
| The Blake Law Firm | March 30, 2024 | ransomware_live | — |
| fightingforfairness.com | March 30, 2024 | ransomware_live | — |
| theblakefirm.com | March 30, 2024 | ransomware_live | — |
| Pedsurology | March 26, 2024 | ransomware_live | — |
| Pediatric Urology Associates | March 26, 2024 | ransomware_live | — |
| pedsurology.com | March 26, 2024 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).