funksec
First seen December 4, 2024Active172 claimed victims
The claims below are reproduced as posted by funksec on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
FunkSec is an AI-assisted ransomware-as-a-service group that launched its data leak site in December 2024 and rapidly claimed over 85 victims across government, technology, finance, and education sectors globally, demanding unusually low ransoms and using AI tooling to lower the technical bar for affiliates.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| abd-ong.org | December 18, 2024 | ransomware_live | — |
| seaislerealty.com | December 18, 2024 | ransomware_live | — |
| robertfinaleeditions | December 18, 2024 | ransomware_live | — |
| Nathan American Academy | December 18, 2024 | ransomware_live | — |
| flybase.org | December 18, 2024 | ransomware_live | — |
| chixking.ca | December 18, 2024 | ransomware_live | — |
| pbos.gov.pk | December 17, 2024 | ransomware_live | — |
| rtdc.gov.mn | December 17, 2024 | ransomware_live | — |
| dinamalar.com | December 17, 2024 | ransomware_live | — |
| ibram.org.br | December 17, 2024 | ransomware_live | — |
| ekitistate.gov.ng | December 15, 2024 | ransomware_live | — |
| pathsalatc.org.in | December 15, 2024 | ransomware_live | — |
| rangiamb.org.in | December 15, 2024 | ransomware_live | — |
| gstpam.org | December 15, 2024 | ransomware_live | — |
| arkajainuniver | December 15, 2024 | ransomware_live | — |
| indianaerospaceand | December 15, 2024 | ransomware_live | — |
| akobdc.com | December 15, 2024 | ransomware_live | — |
| skopje.gov.mk | December 14, 2024 | ransomware_live | — |
| maxprofit.mcode.me | December 14, 2024 | ransomware_live | — |
| zetech.ac.ke | December 14, 2024 | ransomware_live | — |
| lakhipurmb.org.in | December 13, 2024 | ransomware_live | — |
| fuse.io | December 13, 2024 | ransomware_live | — |
| lamundialdeseguros.com | December 13, 2024 | ransomware_live | — |
| bee-insurance.com | December 13, 2024 | ransomware_live | — |
| lamundialdeseguros | December 13, 2024 | ransomware_live | — |
| dealplexus.com | December 11, 2024 | ransomware_live | — |
| mandiricoal.net | December 11, 2024 | ransomware_live | — |
| quiztarget.com | December 11, 2024 | ransomware_live | — |
| kurosu.com.py Breach | December 10, 2024 | ransomware_live | — |
| workers.com.zm Breach | December 10, 2024 | ransomware_live | — |
| workers.com.zm | December 10, 2024 | ransomware_live | — |
| kurosu.com.py | December 10, 2024 | ransomware_live | — |
| fpsc-anz.com Breach | December 10, 2024 | ransomware_live | — |
| senseis.xmp.net | December 10, 2024 | ransomware_live | — |
| thebetareview.com | December 10, 2024 | ransomware_live | — |
| wacer.com.au | December 10, 2024 | ransomware_live | — |
| www.appicgarage.com | December 10, 2024 | ransomware_live | — |
| fpsc-anz.com | December 10, 2024 | ransomware_live | — |
| gervetusa.com | December 10, 2024 | ransomware_live | — |
| singularanalysts.com | December 10, 2024 | ransomware_live | — |
| pti.agency | December 9, 2024 | ransomware_live | — |
| sincorpe.org.br | December 9, 2024 | ransomware_live | — |
| precisediagnosticspacs | December 9, 2024 | ransomware_live | — |
| singularanalysts.com Breach | December 9, 2024 | ransomware_live | — |
| gervetusa.com Breach | December 9, 2024 | ransomware_live | — |
| ncfe.org.in | December 8, 2024 | ransomware_live | — |
| spdyn.de technology | December 8, 2024 | ransomware_live | — |
| ayswrewards | December 7, 2024 | ransomware_live | — |
| FunkLocker | December 7, 2024 | ransomware_live | — |
| zero5 | December 7, 2024 | ransomware_live | — |
| uniamarmores | December 7, 2024 | ransomware_live | — |
| mtgazeta.uz | December 6, 2024 | ransomware_live | — |
| altuslab | December 5, 2024 | ransomware_live | — |
| edizionidottrinari | December 5, 2024 | ransomware_live | — |
| ctsjo.com | December 5, 2024 | ransomware_live | — |
| Zero 5 | December 4, 2024 | ransomware_live | — |
| USA Network | December 4, 2024 | ransomware_live | — |
| Smart-it-partner | December 4, 2024 | ransomware_live | — |
| styched | December 4, 2024 | ransomware_live | — |
| IFA Paris | December 4, 2024 | ransomware_live | — |
| x-cart automotive | December 4, 2024 | ransomware_live | — |
| xui.one | December 4, 2024 | ransomware_live | — |
| intbizth | December 4, 2024 | ransomware_live | — |
| verificativa | December 4, 2024 | ransomware_live | — |
| rscn.org.jo | December 4, 2024 | ransomware_live | — |
| albazaar | December 4, 2024 | ransomware_live | — |
| kingdom | December 4, 2024 | ransomware_live | — |
| uniaomarmores | December 4, 2024 | ransomware_live | — |
| sanirent.com.mx | September 29, 2024 | ransomware_live | — |
| isurges.com | May 10, 2024 | ransomware_live | — |
| jastreet.com | May 10, 2024 | ransomware_live | — |
| Moon | April 13, 2023 | ransomware_live | — |
← NewerPage 2 of 2
Claim data from ransomware.live and RansomLook (CC BY 4.0).