BreachCensus

gunra

First seen April 23, 2025Active54 claimed victims

The claims below are reproduced as posted by gunra on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.

Listed organisation? Contact [email protected].

Profile

Gunra is a financially motivated ransomware group that emerged in April 2025, using double-extortion tactics against real estate, pharmaceuticals, and manufacturing sectors across Japan, Egypt, Panama, Italy, and Argentina, deploying separate Windows and Linux variants with a strict five-day payment deadline.

Description from ransomware.live.

Claimed victims (as posted by the group — unverified)

Victim (as posted)Claimed onSourcePress coverage
OccidentalSeptember 4, 2026ransomware_live
Blanco & EtcheverrySeptember 4, 2026ransomware_live
BOMOHSAAugust 18, 2026ransomware_live
PT All Cosmos BiotekAugust 5, 2026ransomware_live
worldtubeAugust 4, 2026ransomware_live
Siam Stabilizers and Chemicals Co., Ltd. / SSCJuly 30, 2026ransomware_live
WeilhotelJuly 29, 2026ransomware_live
Dissinger and Dissinger Law FirmJuly 16, 2026ransomware_live
New Tiles S.L.July 10, 2026ransomware_live
Yuditec S.A.June 30, 2026ransomware_live
on-usJune 30, 2026ransomware_live
Pirámide SegurosJune 30, 2026ransomware_live
Suárez&ClaveraJune 12, 2026ransomware_live
MHE9 Logística LtdaJune 12, 2026ransomware_live
Cambridge Law ChambersJune 9, 2026ransomware_live
STAREMPIREMay 30, 2026ransomware_live
SOMAFIXMay 29, 2026ransomware_live
Cablematic Dos Mil SLUMay 22, 2026ransomware_live
KUKJE PHARM CO.,LTDApril 8, 2026ransomware_live
bkksky.comApril 8, 2026ransomware_live
triotech.com.sgApril 8, 2026ransomware_live
ASPShipsApril 8, 2026ransomware_live
DiamondApril 8, 2026ransomware_live
VINTAGE HOMESTEAD GmbHyApril 8, 2026ransomware_live
Envy RecyclingApril 8, 2026ransomware_live
Ventilaciones Nerual, S.L.April 8, 2026ransomware_live
Eric Davis DentalApril 8, 2026ransomware_live
INCARFE S.L.April 8, 2026ransomware_live
NeoDermApril 8, 2026ransomware_live
Ipiranga ContábilApril 8, 2026ransomware_live
Grupo PyDApril 8, 2026ransomware_live
Thai Petroleum & Trading Co., Ltd.April 8, 2026ransomware_live
El Ezh Building Contracting LLCApril 8, 2026ransomware_live
Frontier Financial GroupApril 8, 2026ransomware_live
INHA UniversityDecember 29, 2025ransomware_live
miraense.comOctober 1, 2025ransomware_live
hwacheonSeptember 10, 2025ransomware_live
Samwha Capacitor GroupSeptember 3, 2025ransomware_live
Seoul Guarantee InsuranceAugust 18, 2025ransomware_live
SEGUROS AMÉRICAAugust 18, 2025ransomware_live
Justicia Penal MilitarAugust 18, 2025ransomware_live
ACCS Le GroupeJune 6, 2025ransomware_live
American Hospital DubaiJune 5, 2025ransomware_live
Olho D'Água DistribuidoraMay 26, 2025ransomware_live
Anjos RamosMay 24, 2025ransomware_live
Adria GrupaMay 22, 2025ransomware_live
MG ChemicalsMay 17, 2025ransomware_live
Grupo Jorge BatistaMay 12, 2025ransomware_live
Bioprofarma Bagó S.AApril 27, 2025ransomware_live
KLINGER ItalyApril 26, 2025ransomware_live
Shinko ShojiApril 23, 2025ransomware_live
Varela HermanosApril 15, 2025ransomware_live
TOMOKU CO., LTD.April 14, 2025ransomware_live
Dar Al TebApril 7, 2025ransomware_live

Claim data from ransomware.live and RansomLook (CC BY 4.0).