BreachCensus

gunra

First seen April 23, 2025Active54 claimed victims

The claims below are reproduced as posted by gunra on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.

Listed organisation? Contact [email protected].

Profile

Gunra is a financially motivated ransomware group that emerged in April 2025, using double-extortion tactics against real estate, pharmaceuticals, and manufacturing sectors across Japan, Egypt, Panama, Italy, and Argentina, deploying separate Windows and Linux variants with a strict five-day payment deadline.

Description from ransomware.live.

Claimed victims (as posted by the group — unverified)

Victim (as posted)Claimed onSourcePress coverage
OccidentalSeptember 4, 2026ransomware_live—
Blanco & EtcheverrySeptember 4, 2026ransomware_live—
BOMOHSAAugust 18, 2026ransomware_live—
PT All Cosmos BiotekAugust 5, 2026ransomware_live—
worldtubeAugust 4, 2026ransomware_live—
Siam Stabilizers and Chemicals Co., Ltd. / SSCJuly 30, 2026ransomware_live—
WeilhotelJuly 29, 2026ransomware_live—
Dissinger and Dissinger Law FirmJuly 16, 2026ransomware_live—
New Tiles S.L.July 10, 2026ransomware_live—
Yuditec S.A.June 30, 2026ransomware_live—
on-usJune 30, 2026ransomware_live—
Pirámide SegurosJune 30, 2026ransomware_live—
Suárez&ClaveraJune 12, 2026ransomware_live—
MHE9 Logística LtdaJune 12, 2026ransomware_live—
Cambridge Law ChambersJune 9, 2026ransomware_live—
STAREMPIREMay 30, 2026ransomware_live—
SOMAFIXMay 29, 2026ransomware_live—
Cablematic Dos Mil SLUMay 22, 2026ransomware_live—
KUKJE PHARM CO.,LTDApril 8, 2026ransomware_live—
bkksky.comApril 8, 2026ransomware_live—
triotech.com.sgApril 8, 2026ransomware_live—
ASPShipsApril 8, 2026ransomware_live—
DiamondApril 8, 2026ransomware_live—
VINTAGE HOMESTEAD GmbHyApril 8, 2026ransomware_live—
Envy RecyclingApril 8, 2026ransomware_live—
Ventilaciones Nerual, S.L.April 8, 2026ransomware_live—
Eric Davis DentalApril 8, 2026ransomware_live—
INCARFE S.L.April 8, 2026ransomware_live—
NeoDermApril 8, 2026ransomware_live—
Ipiranga ContábilApril 8, 2026ransomware_live—
Grupo PyDApril 8, 2026ransomware_live—
Thai Petroleum & Trading Co., Ltd.April 8, 2026ransomware_live—
El Ezh Building Contracting LLCApril 8, 2026ransomware_live—
Frontier Financial GroupApril 8, 2026ransomware_live—
INHA UniversityDecember 29, 2025ransomware_live—
miraense.comOctober 1, 2025ransomware_live—
hwacheonSeptember 10, 2025ransomware_live—
Samwha Capacitor GroupSeptember 3, 2025ransomware_live—
Seoul Guarantee InsuranceAugust 18, 2025ransomware_live—
SEGUROS AMÉRICAAugust 18, 2025ransomware_live—
Justicia Penal MilitarAugust 18, 2025ransomware_live—
ACCS Le GroupeJune 6, 2025ransomware_live—
American Hospital DubaiJune 5, 2025ransomware_live—
Olho D'Água DistribuidoraMay 26, 2025ransomware_live—
Anjos RamosMay 24, 2025ransomware_live—
Adria GrupaMay 22, 2025ransomware_live—
MG ChemicalsMay 17, 2025ransomware_live—
Grupo Jorge BatistaMay 12, 2025ransomware_live—
Bioprofarma Bagó S.AApril 27, 2025ransomware_live—
KLINGER ItalyApril 26, 2025ransomware_live—
Shinko ShojiApril 23, 2025ransomware_live—
Varela HermanosApril 15, 2025ransomware_live—
TOMOKU CO., LTD.April 14, 2025ransomware_live—
Dar Al TebApril 7, 2025ransomware_live—

Claim data from ransomware.live and RansomLook (CC BY 4.0).