frag
First seen March 24, 2025Active30 claimed victims
The claims below are reproduced as posted by frag on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
Frag is a ransomware group that emerged in late 2024, exploiting a critical Veeam Backup & Replication vulnerability (CVE-2024-40711) to compromise targets in industrial sectors, with blockchain analysis linking it to a shared wallet cluster with the Akira group.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| Cryoviva | June 12, 2025 | ransomware_live | — |
| Evasa | June 11, 2025 | ransomware_live | — |
| Source Photonics | April 4, 2025 | ransomware_live | — |
| SEAQUEST SEAFOOD | March 14, 2025 | ransomware_live | — |
| Southwest Inspection and Testing | March 3, 2025 | ransomware_live | — |
| Nelson Law Firm | March 3, 2025 | ransomware_live | — |
| Moody Homes | March 3, 2025 | ransomware_live | — |
| California Gasket and Rubber Corporation | February 28, 2025 | ransomware_live | — |
| Bunting Capital Management Inc | February 28, 2025 | ransomware_live | — |
| Woodbine Hospitality | November 21, 2024 | ransomware_live | — |
| AeroWorx | November 19, 2024 | ransomware_live | — |
| Superior Technology, Inc. | November 17, 2024 | ransomware_live | — |
| Rahnama Law | November 14, 2024 | ransomware_live | — |
| Texas Fifth Wall Roofing Systems | November 14, 2024 | ransomware_live | — |
| Andrew Davidson & Co., Inc. | November 14, 2024 | ransomware_live | — |
| Lake Beverage Corp. | November 12, 2024 | ransomware_live | — |
| AmeriKen Die Supply, Inc | November 12, 2024 | ransomware_live | — |
| Komoto Healthcare | November 9, 2024 | ransomware_live | — |
| iTEK Services, Inc. | November 1, 2024 | ransomware_live | — |
| STATEWIDE ENTERPRISES | October 23, 2024 | ransomware_live | — |
| QUILTCRAFT | October 23, 2024 | ransomware_live | — |
| Maine Highlands Federal Credit Union | October 23, 2024 | ransomware_live | — |
| Ellis Glass and Mirror Ltd | October 22, 2024 | ransomware_live | — |
| Community Management, Inc. | October 21, 2024 | ransomware_live | — |
| FRANKLIN PRODUCTS | October 19, 2024 | ransomware_live | — |
| Salvi, Schostok & Pritchard P.C. | October 18, 2024 | ransomware_live | — |
| Red Credit solution, LLC | October 15, 2024 | ransomware_live | — |
| Opulent | October 7, 2024 | ransomware_live | — |
| Kontane Logistics, Inc. | September 27, 2024 | ransomware_live | — |
| Stuwarooij | September 24, 2024 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).