everest
First seen September 9, 2021Active423 claimed victims
The claims below are reproduced as posted by everest on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
Everest ransom group collects and analyzes information about their victims. They specialize in customer privacy data, financial information, databases, credit card information, and more. The Everest ransom group leaks the victim's data to the darknet and they announced that any victim that will not contact them will suffer from a data leak and they will not delete hist files for future usage.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| Acu Trans Solutions LLC | February 1, 2026 | ransomware_live | — |
| Stellium | February 1, 2026 | ransomware_live | — |
| Hosowaka Micron Group | February 1, 2026 | ransomware_live | — |
| Shinwa Co Ltd | February 1, 2026 | ransomware_live | — |
| Bolttech | January 21, 2026 | ransomware_live | — |
| Warning about the negotiator: All4you | January 20, 2026 | ransomware_live | — |
| McDonalds India | January 20, 2026 | ransomware_live | — |
| Virginia Records - Database leaked | January 20, 2026 | ransomware_live | — |
| Ciena | January 20, 2026 | ransomware_live | — |
| GIBSIN Engineers | January 19, 2026 | ransomware_live | — |
| ASRock Rack | January 19, 2026 | ransomware_live | — |
| Reeves Information Technology | January 19, 2026 | ransomware_live | — |
| WANCHI STEEL INDUSTRIAL | January 19, 2026 | ransomware_live | — |
| GC Accounting | January 19, 2026 | ransomware_live | — |
| National Money Mart Company - Database leaked | January 14, 2026 | ransomware_live | — |
| Notin - Database leaked | January 14, 2026 | ransomware_live | — |
| Morgan Records Management - Database leaked | January 13, 2026 | ransomware_live | — |
| IDeaS.com - Database leaked | January 13, 2026 | ransomware_live | — |
| Nissan Motor Corporation | January 10, 2026 | ransomware_live | — |
| Virginia Records | January 10, 2026 | ransomware_live | — |
| Morgan Records Management | January 6, 2026 | ransomware_live | — |
| IDeaS.com | January 5, 2026 | ransomware_live | — |
| Bolttech.io | January 5, 2026 | ransomware_live | — |
| DESY | January 5, 2026 | ransomware_live | — |
| Chrysler - Database leaked | January 4, 2026 | ransomware_live | — |
| Chrysler | December 25, 2025 | ransomware_live | — |
| Accela | December 23, 2025 | ransomware_live | — |
| Notin | December 23, 2025 | ransomware_live | — |
| ELC Electroconsult SpA | December 16, 2025 | ransomware_live | — |
| Sarmap - Database leaked | December 8, 2025 | ransomware_live | — |
| Benchmark Electronics Inc | December 6, 2025 | ransomware_live | — |
| Exegy | December 2, 2025 | ransomware_live | — |
| ASUS | December 2, 2025 | ransomware_live | — |
| Petra | December 2, 2025 | ransomware_live | — |
| Sarmap | December 2, 2025 | ransomware_live | — |
| Iberia | November 25, 2025 | ransomware_live | — |
| Iberia Airlines | November 25, 2025 | ransomware_live | — |
| National Money Mart Company | November 25, 2025 | ransomware_live | — |
| Air Miles España, S.A | November 24, 2025 | ransomware_live | — |
| UNDER ARMOUR | November 17, 2025 | ransomware_live | — |
| Petrobras / SAExploration | November 17, 2025 | ransomware_live | — |
| Petrobras Campos Basin 3D & 4D Seismic Survey Data | November 17, 2025 | ransomware_live | — |
| FullBeauty Brands | November 13, 2025 | ransomware_live | — |
| KorPath | November 12, 2025 | ransomware_live | — |
| Vikor Scientific, LLC / Korgene | November 12, 2025 | ransomware_live | — |
| AGFA | November 10, 2025 | ransomware_live | — |
| SIAD | November 10, 2025 | ransomware_live | — |
| Everest Exclusive Interview for Dailydarkweb.net | November 6, 2025 | ransomware_live | — |
| AT&T Careers - Database Leaked | October 28, 2025 | ransomware_live | — |
| ANIA KRUK | October 27, 2025 | ransomware_live | — |
| MotorsportMarkt.de | October 27, 2025 | ransomware_live | — |
| Dublin Airport | October 26, 2025 | ransomware_live | — |
| Svenska Kraftnät | October 25, 2025 | ransomware_live | — |
| Air Arabia | October 25, 2025 | ransomware_live | — |
| Air Arabia DataBase on sale for $2 Million | October 25, 2025 | ransomware_live | — |
| AT&T Careers | October 21, 2025 | ransomware_live | — |
| Collins Aerospace Admits Responsibility for Flight Chaos at Heathrow, Brussels and Other M... | October 19, 2025 | ransomware_live | — |
| MUSE-INSECURE: Inside Colins Aerospaces Security Failure | October 17, 2025 | ransomware_live | — |
| Colins Aerospace / RTX.com | October 17, 2025 | ransomware_live | — |
| MUSE-INSECURE: Inside Collins Aerospaces Security Failure | October 17, 2025 | ransomware_live | — |
| Collins Aerospace / RTX.com | October 17, 2025 | ransomware_live | — |
| Streebo | October 10, 2025 | ransomware_live | — |
| Professional Trust Company | September 15, 2025 | ransomware_live | — |
| Studio Legale Tisot Iuris | September 15, 2025 | ransomware_live | — |
| Key 4 Energy Srl | September 15, 2025 | ransomware_live | — |
| MFO ITALIA | September 15, 2025 | ransomware_live | — |
| BMW | September 14, 2025 | ransomware_live | — |
| Groupe Clarins | September 11, 2025 | ransomware_live | — |
| Allegis Group | September 8, 2025 | ransomware_live | — |
| Cordeiro Guerra & Associati | August 31, 2025 | ransomware_live | — |
| Everest file server now online | August 29, 2025 | ransomware_live | — |
| Easy Credit | August 29, 2025 | ransomware_live | — |
| Aupaircare and Intraxinc | August 29, 2025 | ransomware_live | — |
| Everest file server | August 29, 2025 | ransomware_live | — |
| Matiss | August 17, 2025 | ransomware_live | — |
| MYVISAJOBS.COM | August 14, 2025 | ransomware_live | — |
| BRIJU.PL | August 14, 2025 | ransomware_live | — |
| Voltus GmbH | August 12, 2025 | ransomware_live | — |
| Philadelphia Investment Partners | August 11, 2025 | ransomware_live | — |
| La Perouse | August 8, 2025 | ransomware_live | — |
| EMMCORP.COM | August 6, 2025 | ransomware_live | — |
| Brunton-Shaw | August 6, 2025 | ransomware_live | — |
| BRUNTON-SHAW.COM | August 6, 2025 | ransomware_live | — |
| DAT AUTOHUS AG | August 6, 2025 | ransomware_live | — |
| Viking Automation | July 28, 2025 | ransomware_live | — |
| Bitbox | July 26, 2025 | ransomware_live | — |
| Mailchimp | July 26, 2025 | ransomware_live | — |
| Grayscale Investments | July 26, 2025 | ransomware_live | — |
| iPROMOTEu | July 25, 2025 | ransomware_live | — |
| New American Funding - Full leak published | July 24, 2025 | ransomware_live | — |
| Best Price Financial Services | July 23, 2025 | ransomware_live | — |
| Crumbl | July 23, 2025 | ransomware_live | — |
| Crumbl - Full leak published | July 23, 2025 | ransomware_live | — |
| Watchfinder & Co | July 21, 2025 | ransomware_live | — |
| Vantage Finance | July 21, 2025 | ransomware_live | — |
| APL | July 21, 2025 | ransomware_live | — |
| New American Funding | July 15, 2025 | ransomware_live | — |
| Fishman, Larsen & Callister - Full leak published | July 11, 2025 | ransomware_live | — |
| Katz & Doorakian Law Firm, P.L. - File tree upload | July 11, 2025 | ransomware_live | — |
| Rezayat Group | July 8, 2025 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).