grief
First seen May 26, 2021Active3 claimed victims
The claims below are reproduced as posted by grief on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
Doppelpaymer is a ransomware family that encrypts user data and later on it asks for a ransom in order to restore original files. It is recognizable by its trademark file extension added to encrypted files: .doppeled. It also creates a note file named: ".how2decrypt.txt".
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| Booneville School District | June 30, 2021 | ransomware_live | — |
| Lancaster Independent School District | June 9, 2021 | ransomware_live | — |
| Clover Park School District | May 26, 2021 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).