donutleaks
First seen August 24, 2022Active42 claimed victims
The claims below are reproduced as posted by donutleaks on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
Donut Leaks (D0nut) is a data-extortion group active since August 2022 that developed its own ransomware encryptor, linked to attacks on Greece's DESFA gas company and Continental, believed to be an affiliate of multiple RaaS operations who pivoted to running an independent extortion platform.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| Industrial Bolsera | July 24, 2024 | ransomware_live | — |
| Jack "Designer" Sparrow. | July 24, 2024 | ransomware_live | — |
| KickDown ESET company. No overpayments at 0% (renamed and update) | July 21, 2024 | ransomware_live | — |
| ESET. PREMIUM. | July 20, 2024 | ransomware_live | — |
| all-mode.com | July 18, 2024 | ransomware_live | — |
| labline.it | July 17, 2024 | ransomware_live | — |
| valleylandtitleco.com - UPD | July 15, 2024 | ransomware_live | — |
| valleylandtitleco.com | July 3, 2024 | ransomware_live | — |
| Patriot Machine | May 16, 2024 | ransomware_live | — |
| Pittsburgh’s Trusted Orthopaedic Surgeons | May 14, 2024 | ransomware_live | — |
| Good Morning | April 4, 2024 | ransomware_live | — |
| voidinteractive.net you are welcome in our chat | March 14, 2024 | ransomware_live | — |
| Watsonclinic.com | March 9, 2024 | ransomware_live | — |
| DOD contractors you are welcome in our chat. | February 4, 2024 | ransomware_live | — |
| Albert, Righter & Tittmann architechts, inc. | November 24, 2023 | ransomware_live | — |
| carriereindustrial.com | November 24, 2023 | ransomware_live | — |
| Sidockgroup. | October 21, 2023 | ransomware_live | — |
| Sidockgroup. Published | October 21, 2023 | ransomware_live | — |
| RAT. | October 2, 2023 | ransomware_live | — |
| INC RANSOMWARE... | September 30, 2023 | ransomware_live | — |
| UPDATED: INC RANSOMWARE... | September 30, 2023 | ransomware_live | — |
| Agilitas IT Solutions Limited | September 19, 2023 | ransomware_live | — |
| Gossler, Gobert & Wolters Group. | September 19, 2023 | ransomware_live | — |
| Who Is MONTY? ;) | September 1, 2023 | ransomware_live | — |
| Jackson Township Police Department and Administration. | July 23, 2023 | ransomware_live | — |
| Peroni Pompe | July 3, 2023 | ransomware_live | — |
| Jacklyn Dawson Solicitors | May 23, 2023 | ransomware_live | — |
| The Travel Network Group | May 23, 2023 | ransomware_live | — |
| UnitedLex.com | April 4, 2023 | ransomware_live | — |
| Nabtesco Motion Control | March 31, 2023 | ransomware_live | — |
| Montgomery General Hospital | March 31, 2023 | ransomware_live | — |
| Garden Hotel NARITA | March 31, 2023 | ransomware_live | — |
| JANUS Research Group | November 24, 2022 | ransomware_live | — |
| Southwest Healthcare Services | October 22, 2022 | ransomware_live | — |
| Health Care Solutions Group | October 1, 2022 | ransomware_live | — |
| Evo exhibits | September 28, 2022 | ransomware_live | — |
| Monarchnc | September 1, 2022 | ransomware_live | — |
| Sheppard Robson | August 24, 2022 | ransomware_live | — |
| PlanET Biogas Solutions | August 24, 2022 | ransomware_live | — |
| CMZ UK | August 24, 2022 | ransomware_live | — |
| Sando | August 24, 2022 | ransomware_live | — |
| Enso Detego | August 24, 2022 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).