devman
Also known as: Devman 2.0First seen April 6, 2025Active184 claimed victims
The claims below are reproduced as posted by devman on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
Former RansomHub and INC Ransom affiliate.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| ****** embassy D.C | October 14, 2025 | ransomware_live | — |
| forestry.gov.jm | October 10, 2025 | ransomware_live | — |
| r******urology.com | October 10, 2025 | ransomware_live | — |
| naturmaelk | October 6, 2025 | ransomware_live | — |
| www.hameshakem.co.il | October 3, 2025 | ransomware_live | — |
| teeuwissen.com | October 3, 2025 | ransomware_live | — |
| a**h*y*in*er**t**nal.c*m | October 1, 2025 | ransomware_live | — |
| t*t*a**o**.com | October 1, 2025 | ransomware_live | — |
| e***.o*g | October 1, 2025 | ransomware_live | — |
| www.profimetrics.com | October 1, 2025 | ransomware_live | — |
| wrapex | September 30, 2025 | ransomware_live | — |
| sacada.org | September 29, 2025 | ransomware_live | — |
| n**u***e**.dk | September 29, 2025 | ransomware_live | — |
| ncgllc.com | September 29, 2025 | ransomware_live | — |
| r3consulting | September 29, 2025 | ransomware_live | — |
| chicagobotanic | September 29, 2025 | ransomware_live | — |
| busaba | September 29, 2025 | ransomware_live | — |
| braswellsvc | September 29, 2025 | ransomware_live | — |
| www.p***e*u**h***.us | September 15, 2025 | ransomware_live | — |
| www.shimaogroup.com | September 15, 2025 | ransomware_live | — |
| promisedland.com.tw/h21 million USD...Time Remaining:---BUY Files | September 15, 2025 | ransomware_live | — |
| www.s*i***gr*u*.com | September 6, 2025 | ransomware_live | — |
| www.pure-chemical.com | September 3, 2025 | ransomware_live | — |
| promisedland.com.tw | September 3, 2025 | ransomware_live | — |
| diethelmtravel | August 4, 2025 | ransomware_live | — |
| ruff.com.br | August 4, 2025 | ransomware_live | — |
| ***.c*m.tw | August 1, 2025 | ransomware_live | — |
| b*u*l*****.tw | August 1, 2025 | ransomware_live | — |
| pr*****.tw | August 1, 2025 | ransomware_live | — |
| kw****.tw | August 1, 2025 | ransomware_live | — |
| pt.elis.com | July 20, 2025 | ransomware_live | — |
| pt.e*i*.com | July 18, 2025 | ransomware_live | — |
| mol.go.th | July 17, 2025 | ransomware_live | — |
| eehc.gov.eg | July 15, 2025 | ransomware_live | — |
| www.e***.gov.eg | July 13, 2025 | ransomware_live | — |
| sol*d*r*.com | July 12, 2025 | ransomware_live | — |
| gotec | July 5, 2025 | ransomware_live | — |
| elematec | July 5, 2025 | ransomware_live | — |
| takachiho.co.jp | July 5, 2025 | ransomware_live | — |
| c****gl*b*.com | July 5, 2025 | ransomware_live | — |
| TBD HONG KONG | July 5, 2025 | ransomware_live | — |
| China Harbour Engineering Company | July 5, 2025 | ransomware_live | — |
| Hong Kong Victim | July 5, 2025 | ransomware_live | — |
| DHL THAILAND | June 2, 2025 | ransomware_live | — |
| lantro.com | May 31, 2025 | ransomware_live | — |
| Gobierno del Estado de Colima | May 26, 2025 | ransomware_live | — |
| dmbarone.com | May 26, 2025 | ransomware_live | — |
| www.nijar.es | May 25, 2025 | ransomware_live | — |
| netstar | May 23, 2025 | ransomware_live | — |
| www.paragonradiology.com | May 23, 2025 | ransomware_live | — |
| piriou | May 19, 2025 | ransomware_live | — |
| TBD KENYA | May 19, 2025 | ransomware_live | — |
| TOHO-CO | May 19, 2025 | ransomware_live | — |
| TBD GREECE | May 19, 2025 | ransomware_live | — |
| TBD HONK KONG | May 19, 2025 | ransomware_live | — |
| TBD KOREA | May 19, 2025 | ransomware_live | — |
| NSSF KENYA | May 19, 2025 | ransomware_live | — |
| tvgoiania.com.br | May 11, 2025 | ransomware_live | — |
| Victim from Japan | May 10, 2025 | ransomware_live | — |
| Pienaar Brothers | May 10, 2025 | ransomware_live | — |
| DAILY NEWS THAILAND | May 9, 2025 | ransomware_live | — |
| GMA NETWORK | May 7, 2025 | ransomware_live | — |
| pestbusters | May 5, 2025 | ransomware_live | — |
| smvthailand.com | May 2, 2025 | ransomware_live | — |
| dovesit.co.za | May 1, 2025 | ransomware_live | — |
| South African Hr company | May 1, 2025 | ransomware_live | — |
| South African IT firm | May 1, 2025 | ransomware_live | — |
| Singapour Factory | May 1, 2025 | ransomware_live | — |
| Chinese Healthcare Organisation | May 1, 2025 | ransomware_live | — |
| EU victim | April 25, 2025 | ransomware_live | — |
| China Harbour Engeneiring Company | April 20, 2025 | ransomware_live | — |
| Honk Kong Victim | April 20, 2025 | ransomware_live | — |
| Singapour Victim | April 20, 2025 | ransomware_live | — |
| Feel Four | April 20, 2025 | ransomware_live | — |
| Premier Meats South Africa | April 20, 2025 | ransomware_live | — |
| Tawasol | April 13, 2025 | ransomware_live | — |
| Bangkok Electronics Co., Ltd | April 13, 2025 | ransomware_live | — |
| Med institute | April 13, 2025 | ransomware_live | — |
| FEELFOUR | April 13, 2025 | ransomware_live | — |
| Optimax Technology | April 6, 2025 | ransomware_live | — |
| Texas Construction Firm | April 6, 2025 | ransomware_live | — |
| Dubai Company | April 6, 2025 | ransomware_live | — |
| doumen.fr | March 22, 2025 | ransomware_live | — |
| newhorizonsmedical.org | June 7, 2023 | ransomware_live | — |
← NewerPage 2 of 2
Claim data from ransomware.live and RansomLook (CC BY 4.0).