freecivilian
First seen December 31, 2022Active14 claimed victims
The claims below are reproduced as posted by freecivilian on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
FreeCivilian is a data extortion group with suspected ties to Russian GRU military intelligence, known for targeting Ukrainian government websites — including sites offering surrender guidance to Russian troops — blending cybercrime with apparent state-aligned political objectives.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| diia.gov.ua | December 31, 2022 | ransomware_live | — |
| e-driver.hsc.gov.ua | December 31, 2022 | ransomware_live | — |
| wanted.mvs.gov.ua | December 31, 2022 | ransomware_live | — |
| minregion.gov.ua | December 31, 2022 | ransomware_live | — |
| health.mia | December 31, 2022 | ransomware_live | — |
| mtsbu.ua | December 31, 2022 | ransomware_live | — |
| motorsich.com | December 31, 2022 | ransomware_live | — |
| kyivcity.com | December 31, 2022 | ransomware_live | — |
| bdr.mvs.gov.ua | December 31, 2022 | ransomware_live | — |
| gkh.in.ua | December 31, 2022 | ransomware_live | — |
| kmu.gov.ua | December 31, 2022 | ransomware_live | — |
| mon.gov.ua | December 31, 2022 | ransomware_live | — |
| minagro.gov.ua | December 31, 2022 | ransomware_live | — |
| mfa.gov.ua | December 31, 2022 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).