kelvinsecurity
First seen April 1, 2022Active26 claimed victims
The claims below are reproduced as posted by kelvinsecurity on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
KelvinSecurity is a financially motivated hacking group active since at least 2015, primarily engaged in stealing and selling databases from telecommunications, healthcare, and political organizations worldwide, with notable breaches including Vodafone Italia and Frost & Sullivan; the group's leader was arrested by Spanish police.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| Mansfield Energy | May 24, 2022 | ransomware_live | — |
| TRANSCONTRACT | May 24, 2022 | ransomware_live | — |
| Channel Navigator business intelligence IT | May 13, 2022 | ransomware_live | — |
| PTC Industries | May 6, 2022 | ransomware_live | — |
| Next Leak On Hold | May 6, 2022 | ransomware_live | — |
| Instance IT Solutions India | May 3, 2022 | ransomware_live | — |
| bfclcoin | May 3, 2022 | ransomware_live | — |
| Municipality of Posadas | May 3, 2022 | ransomware_live | — |
| NATION Costa Rica | April 25, 2022 | ransomware_live | — |
| Waiting for next leak | April 25, 2022 | ransomware_live | — |
| PT Pertamina Gas | April 22, 2022 | ransomware_live | — |
| Banco do Brasil | April 1, 2022 | ransomware_live | — |
| ANTEL | April 1, 2022 | ransomware_live | — |
| Pakistan Human Rights | April 1, 2022 | ransomware_live | — |
| Nestle | April 1, 2022 | ransomware_live | — |
| Equicom SAVINGS BANK | April 1, 2022 | ransomware_live | — |
| ICONIC | April 1, 2022 | ransomware_live | — |
| CORT | April 1, 2022 | ransomware_live | — |
| CR ASIA | April 1, 2022 | ransomware_live | — |
| CARACOL TV COLOMBIA | April 1, 2022 | ransomware_live | — |
| BEXIMCO | April 1, 2022 | ransomware_live | — |
| Salvadoran Ministry of Foreign Affairs | April 1, 2022 | ransomware_live | — |
| eGOV | April 1, 2022 | ransomware_live | — |
| Cellulant Corporation | April 1, 2022 | ransomware_live | — |
| BMW CHILE | April 1, 2022 | ransomware_live | — |
| caribetours | April 1, 2022 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).