karakurt
First seen December 11, 2022Active74 claimed victims
The claims below are reproduced as posted by karakurt on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
Karakurt is a pure data-extortion group (no encryption) assessed with high confidence to be the extortion arm of the Conti ransomware group, active from 2021, that steals data and threatens to auction or publish it unless ransoms ranging from $25,000 to $13 million are paid.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| Yakima Valley Radiology | September 22, 2023 | ransomware_live | — |
| Hospice of Huntington | September 22, 2023 | ransomware_live | — |
| Valley Mountain Regional Center | August 31, 2023 | ransomware_live | — |
| COSI | August 2, 2023 | ransomware_live | — |
| Regional Family Medicine | July 28, 2023 | ransomware_live | — |
| McAlester Regional Health Center | July 28, 2023 | ransomware_live | — |
| Jefferson County Health Center | July 3, 2023 | ransomware_live | — |
| Pan Pacific Hotels Group | June 28, 2023 | ransomware_live | — |
| CentroMed | June 28, 2023 | ransomware_live | — |
| Reeds Spring School District | June 26, 2023 | ransomware_live | — |
| Eastside Union School District | June 21, 2023 | ransomware_live | — |
| Beacon ABA Services | June 5, 2023 | ransomware_live | — |
| Chattanooga Heart Institute | May 23, 2023 | ransomware_live | — |
| York County School of Technology | May 15, 2023 | ransomware_live | — |
| Peachtree Orthopedics | May 12, 2023 | ransomware_live | — |
| Our Sunday Visitor | April 29, 2023 | ransomware_live | — |
| La Red Health Center | April 27, 2023 | ransomware_live | — |
| TransMedics | April 24, 2023 | ransomware_live | — |
| Winona Powder Coating | April 24, 2023 | ransomware_live | — |
| Lifeline Vascular Access | April 24, 2023 | ransomware_live | — |
| Wynn-Reeth | April 21, 2023 | ransomware_live | — |
| Ozarks Community Hospital | April 18, 2023 | ransomware_live | — |
| Pharm-Pacc Corporation | April 17, 2023 | ransomware_live | — |
| Medicalodges, Inc | April 12, 2023 | ransomware_live | — |
| Petaluma Health Center | April 12, 2023 | ransomware_live | — |
| Officeworks Inc | April 6, 2023 | ransomware_live | — |
| OptionMetrics | March 31, 2023 | ransomware_live | — |
| FINANCE INSTITUTION AUCTION | March 29, 2023 | ransomware_live | — |
| MICROFINANCE INSTITUTION | March 28, 2023 | ransomware_live | — |
| National Board of Osteopathic Medical Examiners | March 20, 2023 | ransomware_live | — |
| River City Science Academy | January 9, 2023 | ransomware_live | — |
| Goodwill industries | December 21, 2022 | ransomware_live | — |
| LIBERTY PULTRUSIONS | December 20, 2022 | ransomware_live | — |
| Bevolution Group | December 18, 2022 | ransomware_live | — |
| TLC | December 18, 2022 | ransomware_live | — |
| Gage Brothers | December 16, 2022 | ransomware_live | — |
| Batesville Products | December 13, 2022 | ransomware_live | — |
| Centrisys cnp | December 11, 2022 | ransomware_live | — |
| BauVal | December 11, 2022 | ransomware_live | — |
| Stratus | December 11, 2022 | ransomware_live | — |
| Roxboro | December 11, 2022 | ransomware_live | — |
| Regulatory Authority for Telecommunications and Posts (ARTP) | December 11, 2022 | ransomware_live | — |
| PTSC | December 11, 2022 | ransomware_live | — |
| Legend Holdings | December 11, 2022 | ransomware_live | — |
| Abdullah Al-Othaim Markets | December 11, 2022 | ransomware_live | — |
| Ethigen Limited | December 11, 2022 | ransomware_live | — |
| Cromwell Management Inc. | December 11, 2022 | ransomware_live | — |
| Cheval Electronic Enclosure | December 11, 2022 | ransomware_live | — |
| Club Asteria Belek | December 11, 2022 | ransomware_live | — |
| R1 Group | December 11, 2022 | ransomware_live | — |
| Trantor | December 11, 2022 | ransomware_live | — |
| Deerberg | December 11, 2022 | ransomware_live | — |
| Vercity | December 11, 2022 | ransomware_live | — |
| Schrader-Pacific International | December 11, 2022 | ransomware_live | — |
| San Benito Consolidated Independent School District | December 11, 2022 | ransomware_live | — |
| Urban | December 11, 2022 | ransomware_live | — |
| The Summit | December 11, 2022 | ransomware_live | — |
| ipb Baggenstos Montagen | December 11, 2022 | ransomware_live | — |
| Medilife Hastanesi | December 11, 2022 | ransomware_live | — |
| Özel GözAkademi Hastanesi | December 11, 2022 | ransomware_live | — |
| Qualified Staffing | December 11, 2022 | ransomware_live | — |
| Davenport Community School | December 11, 2022 | ransomware_live | — |
| Metroclean | December 11, 2022 | ransomware_live | — |
| Bergamo Metal | December 11, 2022 | ransomware_live | — |
| APECQ | December 11, 2022 | ransomware_live | — |
| South Jersey Glass & Doors | December 11, 2022 | ransomware_live | — |
| Latitude 37 | December 11, 2022 | ransomware_live | — |
| APSM Systems | December 11, 2022 | ransomware_live | — |
| KINSHOFER GmbH | December 11, 2022 | ransomware_live | — |
| Energy Transfer Durafin Tubes | December 11, 2022 | ransomware_live | — |
| Hiersun Jewelry Co Ltd | December 11, 2022 | ransomware_live | — |
| Infinitum | December 11, 2022 | ransomware_live | — |
| William A. Kibbe & Associates | December 11, 2022 | ransomware_live | — |
| Municipalidad de belen | December 11, 2022 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).