killsec
First seen March 21, 2024Active286 claimed victims
The claims below are reproduced as posted by killsec on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
KillSec originated as a hacktivist group aligned with the Anonymous movement before pivoting to ransomware operations in October 2023, officially launching a RaaS platform in June 2024 with an affiliate-friendly 88% revenue split, primarily targeting healthcare, financial services, and government sectors with over 250 documented victims as of late 2025.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| Giti Corp | September 18, 2026 | ransomware_live | — |
| Global Go | August 23, 2026 | ransomware_live | — |
| origins ivf | July 23, 2026 | ransomware_live | — |
| Bulwark Exterminating | July 23, 2026 | ransomware_live | — |
| cashcowboy | July 23, 2026 | ransomware_live | — |
| acehospital.in | June 3, 2026 | ransomware_live | — |
| csinsurance.mx | June 3, 2026 | ransomware_live | — |
| dsdlawfirm.com | May 14, 2026 | ransomware_live | — |
| mrs holdings | May 9, 2026 | ransomware_live | — |
| Medical PAY | May 1, 2026 | ransomware_live | — |
| palram.com | March 17, 2026 | ransomware_live | — |
| hospitalvetdiadema24h.com.br | March 17, 2026 | ransomware_live | — |
| NextCapitalTrust | March 14, 2026 | ransomware_live | — |
| meena health | March 14, 2026 | ransomware_live | — |
| shlomo bit | March 11, 2026 | ransomware_live | — |
| yurdriversnetwork | March 6, 2026 | ransomware_live | — |
| MedicalGPT | March 6, 2026 | ransomware_live | — |
| MyFair | March 6, 2026 | ransomware_live | — |
| primaria ungheni | February 25, 2026 | ransomware_live | — |
| onlinedivorcetexas.com | February 21, 2026 | ransomware_live | — |
| Orain.io | February 17, 2026 | ransomware_live | — |
| Getly | February 9, 2026 | ransomware_live | — |
| brooklyn group | February 4, 2026 | ransomware_live | — |
| X-CD Technologies | January 23, 2026 | ransomware_live | — |
| publicsafety.ohio.gov | January 10, 2026 | ransomware_live | — |
| grade results | December 24, 2025 | ransomware_live | — |
| republica federative do brasil | December 15, 2025 | ransomware_live | — |
| dabafinance.com | December 14, 2025 | ransomware_live | — |
| seajob | December 9, 2025 | ransomware_live | — |
| playroll | December 9, 2025 | ransomware_live | — |
| caryanams | December 9, 2025 | ransomware_live | — |
| koncept law | December 9, 2025 | ransomware_live | — |
| screenate | December 9, 2025 | ransomware_live | — |
| Rama Judicial | November 27, 2025 | ransomware_live | — |
| Force Brokerage | November 15, 2025 | ransomware_live | — |
| Vanan Online Services | October 23, 2025 | ransomware_live | — |
| iCare Software | October 23, 2025 | ransomware_live | — |
| DUC App: Global Money Movement, Sim... | October 23, 2025 | ransomware_live | — |
| FAAB Invest Advisors Private Limite... | October 23, 2025 | ransomware_live | — |
| J AND S Electrical And Lighting Sup... | October 23, 2025 | ransomware_live | — |
| Economy Restaurant Equipment And Su... | October 23, 2025 | ransomware_live | — |
| Badger Popcorn And Concession Suppl... | October 23, 2025 | ransomware_live | — |
| National Institute of Administratio... | October 23, 2025 | ransomware_live | — |
| KillSec 4.0 | October 4, 2025 | ransomware_live | — |
| XChief / ForexChief | September 28, 2025 | ransomware_live | — |
| WalletKu Indompet Indonesia | September 28, 2025 | ransomware_live | — |
| Study Gate | September 25, 2025 | ransomware_live | — |
| Cadorim | September 22, 2025 | ransomware_live | — |
| Top4Fans | September 22, 2025 | ransomware_live | — |
| UwayApply | September 22, 2025 | ransomware_live | — |
| Scanbo | September 22, 2025 | ransomware_live | — |
| MortDash | September 22, 2025 | ransomware_live | — |
| FDB Collections | September 22, 2025 | ransomware_live | — |
| AX CAPITAL | September 22, 2025 | ransomware_live | — |
| VTK Legal | September 22, 2025 | ransomware_live | — |
| BEHCA | September 22, 2025 | ransomware_live | — |
| Fractalite | September 22, 2025 | ransomware_live | — |
| Rainwalk Technology | September 22, 2025 | ransomware_live | — |
| Allure Clinics | September 16, 2025 | ransomware_live | — |
| HappyTenant | September 15, 2025 | ransomware_live | — |
| BlockBets Casino | September 11, 2025 | ransomware_live | — |
| Accelerated Academy | September 10, 2025 | ransomware_live | — |
| Docklyne | September 10, 2025 | ransomware_live | — |
| BFLI | September 10, 2025 | ransomware_live | — |
| 1 ACT Driving Schools | September 10, 2025 | ransomware_live | — |
| BusOnlineTicket Thailand | September 10, 2025 | ransomware_live | — |
| Princeps Credit Systems Limited | September 10, 2025 | ransomware_live | — |
| Nathan And Nathan | September 9, 2025 | ransomware_live | — |
| AVA Senior Connect | September 9, 2025 | ransomware_live | — |
| Archer Health | September 7, 2025 | ransomware_live | — |
| GPS Trackit | September 7, 2025 | ransomware_live | — |
| Nathan | September 7, 2025 | ransomware_live | — |
| MedicSolution+ | September 6, 2025 | ransomware_live | — |
| GoTelemedicina | September 6, 2025 | ransomware_live | — |
| eMedicoERP | September 6, 2025 | ransomware_live | — |
| Suiza Lab | September 6, 2025 | ransomware_live | — |
| DUC App: Global Money Movement, Simplified | August 20, 2025 | ransomware_live | — |
| Doctocliq | August 19, 2025 | ransomware_live | — |
| StudentKare | June 14, 2025 | ransomware_live | — |
| NewGen | June 14, 2025 | ransomware_live | — |
| Sama | May 26, 2025 | ransomware_live | — |
| Novaria | May 26, 2025 | ransomware_live | — |
| Constructive Building Solutions | May 25, 2025 | ransomware_live | — |
| Medswana | May 20, 2025 | ransomware_live | — |
| SNS SYSTEM | May 5, 2025 | ransomware_live | — |
| Enflame Technology | April 17, 2025 | ransomware_live | — |
| US BioTek Laboratories | April 2, 2025 | ransomware_live | — |
| IMA Global | April 2, 2025 | ransomware_live | — |
| Collective Architecture | April 2, 2025 | ransomware_live | — |
| Royal Saudi Air Force | April 2, 2025 | ransomware_live | — |
| Brügger Architekten AG | April 2, 2025 | ransomware_live | — |
| Flagship Press Flagship Press | April 1, 2025 | ransomware_live | — |
| Hanna Global Solutions | April 1, 2025 | ransomware_live | — |
| AAPG | April 1, 2025 | ransomware_live | — |
| Hexicor | April 1, 2025 | ransomware_live | — |
| Dorel Home | April 1, 2025 | ransomware_live | — |
| Nydegger + Finger AG | April 1, 2025 | ransomware_live | — |
| Lendco | April 1, 2025 | ransomware_live | — |
| Fancy Films | April 1, 2025 | ransomware_live | — |
| Brella | April 1, 2025 | ransomware_live | — |
Page 1 of 3Older →
Claim data from ransomware.live and RansomLook (CC BY 4.0).