Dark Project
Also known as: dark projectFirst seen August 5, 2026Active38 claimed victims
The claims below are reproduced as posted by Dark Project on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
Dark Project is a newly emerged ransomware leak operation active as of August 2026. The group utilizes a double extortion model (stealing sensitive data before encrypting local systems and threatening to leak it on their dark web portal).
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| The Excalibur Group | October 20, 2026 | ransomlook | — |
| Beach Eye Medical Group | October 20, 2026 | ransomlook | — |
| Asensus Surgical | October 20, 2026 | ransomlook | — |
| Beach Eye Medical Group | October 15, 2026 | ransomware_live | — |
| PennEastern Architects LCC | October 12, 2026 | ransomlook | — |
| Claire's Inc. | October 12, 2026 | ransomlook | — |
| Franklin Miller Inc. | October 12, 2026 | ransomlook | — |
| Cumar Marble & Granite | September 15, 2026 | ransomlook | — |
| Cumar Marble & Granite | September 11, 2026 | ransomware_live | — |
| Specchem LLC | September 9, 2026 | ransomlook | — |
| MEI Architects | September 8, 2026 | ransomlook | — |
| Master Manufacturing Co., Inc. | September 7, 2026 | ransomlook | — |
| Alurwalls | September 7, 2026 | ransomlook | — |
| Dentist in New Britain, CT | August 25, 2026 | ransomware_live | — |
| Pump Engineering Company | August 25, 2026 | ransomware_live | — |
| Furnished Quarters | August 24, 2026 | ransomware_live | — |
| Design-Aire Engineering, INC | August 24, 2026 | ransomware_live | — |
| Jones, Little & Co., CPAs, LLP | August 24, 2026 | ransomware_live | — |
| The Liberty Group | August 24, 2026 | ransomware_live | — |
| Reid Electric Service, Inc | August 4, 2026 | ransomware_live | — |
| TSC Logistics | August 4, 2026 | ransomware_live | — |
| The Miller Group | August 4, 2026 | ransomware_live | — |
| Long-Lewis Automotive Group | August 4, 2026 | ransomware_live | — |
| Brainhunter Companies LLC. and Brainhunter Systems Ltd. | August 3, 2026 | ransomware_live | — |
| Leviton | July 31, 2026 | ransomware_live | — |
| Mayco International | July 31, 2026 | ransomware_live | — |
| The Family Medicine Clinic | July 24, 2026 | ransomware_live | — |
| Sutherland Packaging | July 24, 2026 | ransomware_live | — |
| Rocky Mount Recyclers | July 20, 2026 | ransomware_live | — |
| Storer Transportation and Storer Coachways | July 14, 2026 | ransomware_live | — |
| The Metropolitan Entertainment & Convention Authority | July 7, 2026 | ransomware_live | — |
| Genesis Engineering Group | July 6, 2026 | ransomware_live | — |
| Ruhrpumpen | July 6, 2026 | ransomware_live | — |
| Labpharma | June 25, 2026 | ransomware_live | — |
| Mile Bluff Medical Center | June 8, 2026 | ransomware_live | — |
| Thermo King | June 8, 2026 | ransomware_live | — |
| Ohio Living Home Health & Hospice | June 8, 2026 | ransomware_live | — |
| Laurel Institutes | June 8, 2026 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).