Helix
Also known as: UNC7761, helixFirst seen August 7, 2026Active8 claimed victims
The claims below are reproduced as posted by Helix on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| AmSpec | August 22, 2026 | ransomware_live | — |
| Delek US | August 19, 2026 | ransomware_live | — |
| Kennedy Jenks | August 16, 2026 | ransomware_live | — |
| Westland Insurance | August 7, 2026 | ransomware_live | — |
| Morguard | August 7, 2026 | ransomware_live | — |
| Highwoods Properties | August 7, 2026 | ransomware_live | — |
| Uber | August 7, 2026 | ransomware_live | — |
| Venture Logistics | August 7, 2026 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).