BreachCensus

devman

Also known as: Devman 2.0First seen April 6, 2025Active184 claimed victims

The claims below are reproduced as posted by devman on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.

Listed organisation? Contact [email protected].

Profile

Former RansomHub and INC Ransom affiliate.

Description from ransomware.live.

Claimed victims (as posted by the group — unverified)

Victim (as posted)Claimed onSourcePress coverage
Crystal Coast Pain ManagementFebruary 3, 2026ransomware_live—
ENCOMPASS-INCFebruary 2, 2026ransomware_live—
wjnklaw.comJanuary 30, 2026ransomware_live—
woodwardoralsurgery.comJanuary 30, 2026ransomware_live—
z*l*c.o*gJanuary 28, 2026ransomware_live—
tiw-group.comJanuary 28, 2026ransomware_live—
**ps.netJanuary 28, 2026ransomware_live—
zallc.orgJanuary 28, 2026ransomware_live—
twi-group.comJanuary 27, 2026ransomware_live—
c*n**lta**i*.comJanuary 26, 2026ransomware_live—
***vandenberg.comJanuary 26, 2026ransomware_live—
consultaegis.comJanuary 26, 2026ransomware_live—
**.atJanuary 25, 2026ransomware_live—
cs.atJanuary 25, 2026ransomware_live—
***-gr*up.comJanuary 24, 2026ransomware_live—
****cr*nem*ds.c*mJanuary 24, 2026ransomware_live—
www.saundersandsaunders.comJanuary 21, 2026ransomware_live—
www.mims.comJanuary 21, 2026ransomware_live—
***om****s-***.comJanuary 21, 2026ransomware_live—
TvgoianiaJanuary 20, 2026ransomware_live—
www.****law.comJanuary 20, 2026ransomware_live—
***m*sic.fiJanuary 20, 2026ransomware_live—
SyrmasgsJanuary 20, 2026ransomware_live—
automax.comJanuary 20, 2026ransomware_live—
s***p.comJanuary 12, 2026ransomware_live—
****t*lc*a*tpm.comJanuary 12, 2026ransomware_live—
pronaca.comJanuary 12, 2026ransomware_live—
klhindustries.comJanuary 12, 2026ransomware_live—
******m*di*al.comJanuary 11, 2026ransomware_live—
sealbeachpd.comJanuary 11, 2026ransomware_live—
sealbeachca.govJanuary 11, 2026ransomware_live—
consigaz.com.brJanuary 11, 2026ransomware_live—
sharinc.orgDecember 28, 2025ransomware_live—
Jennings SDDecember 27, 2025ransomware_live—
oppor**nity*****.orgDecember 27, 2025ransomware_live—
***ind***es.comDecember 25, 2025ransomware_live—
i**o**.usDecember 25, 2025ransomware_live—
kavi.fiDecember 25, 2025ransomware_live—
Intonu.comDecember 25, 2025ransomware_live—
British Holiday & Home Parks Association LtdDecember 22, 2025ransomware_live—
k*v*.fiDecember 22, 2025ransomware_live—
****s*oc****.comDecember 19, 2025ransomware_live—
*n**e-aiDecember 19, 2025ransomware_live—
consult*****.c**December 19, 2025ransomware_live—
transrocamar.comDecember 19, 2025ransomware_live—
d*v***.clDecember 18, 2025ransomware_live—
Clínica DávilaDecember 18, 2025ransomware_live—
Jet ********December 17, 2025ransomware_live—
Culinary Jet ConciergeDecember 17, 2025ransomware_live—
b**u**jou***-**.crsDecember 16, 2025ransomware_live—
a**o*50*****.orgDecember 16, 2025ransomware_live—
Axion50plusDecember 16, 2025ransomware_live—
beausejourco-op.crsDecember 16, 2025ransomware_live—
***-***tems.***December 14, 2025ransomware_live—
DXS SYSTEMSDecember 14, 2025ransomware_live—
www.digital****.comDecember 11, 2025ransomware_live—
C*NC*RDecember 11, 2025ransomware_live—
Hopital ** *****December 11, 2025ransomware_live—
Hopital La RabtaDecember 11, 2025ransomware_live—
CANCERDecember 11, 2025ransomware_live—
Quezon PowerDecember 10, 2025ransomware_live—
Productos Lácteos Flor de Aragua CADecember 10, 2025ransomware_live—
Inter careDecember 8, 2025ransomware_live—
S**** Saint ******December 6, 2025ransomware_live—
arko.noDecember 6, 2025ransomware_live—
f***i*.o*gDecember 6, 2025ransomware_live—
hopital-*********.comDecember 6, 2025ransomware_live—
solidereDecember 6, 2025ransomware_live—
fassic.orgDecember 6, 2025ransomware_live—
Village Santé Saint Joseph HospitalDecember 6, 2025ransomware_live—
cpasch.comDecember 3, 2025ransomware_live—
ravand.comDecember 2, 2025ransomware_live—
n*w*****.comDecember 2, 2025ransomware_live—
a*f*o.usDecember 1, 2025ransomware_live—
c*a*c*.c*mDecember 1, 2025ransomware_live—
m*tt**ca**r**.**.itDecember 1, 2025ransomware_live—
www.eastersealsnei.orgDecember 1, 2025ransomware_live—
Abdulhadi HospitalDecember 1, 2025ransomware_live—
procure.comNovember 21, 2025ransomware_live—
gsccca.orgNovember 21, 2025ransomware_live—
MCCNovember 19, 2025ransomware_live—
future.com.boNovember 19, 2025ransomware_live—
****clinic.com.**November 17, 2025ransomware_live—
f*t*r*.com.**November 17, 2025ransomware_live—
ctfc.catNovember 12, 2025ransomware_live—
omniumintNovember 11, 2025ransomware_live—
www.oucru.orgNovember 5, 2025ransomware_live—
www.heitech.com.myNovember 4, 2025ransomware_live—
juntalocal.cdmx.gob.mxNovember 1, 2025ransomware_live—
o*c*u.o**November 1, 2025ransomware_live—
m*c*e*ic*l.comNovember 1, 2025ransomware_live—
g*e*g*o**l.comOctober 28, 2025ransomware_live—
r*p**fl*wa*ps.comOctober 28, 2025ransomware_live—
h*i**c*.c*m.myOctober 28, 2025ransomware_live—
fhw.orgOctober 28, 2025ransomware_live—
h*tel*ys*e*s.plOctober 28, 2025ransomware_live—
pharmaciedesalize.com.frOctober 17, 2025ransomware_live—
www.o****m*nt.comOctober 16, 2025ransomware_live—
regionalurology.comOctober 15, 2025ransomware_live—
EMBASY OF BOLIVIA DCOctober 15, 2025ransomware_live—
Page 1 of 2Older →

Claim data from ransomware.live and RansomLook (CC BY 4.0).