killsec
First seen March 21, 2024Active286 claimed victims
The claims below are reproduced as posted by killsec on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
KillSec originated as a hacktivist group aligned with the Anonymous movement before pivoting to ransomware operations in October 2023, officially launching a RaaS platform in June 2024 with an affiliate-friendly 88% revenue split, primarily targeting healthcare, financial services, and government sectors with over 250 documented victims as of late 2025.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| Testima Engineering | April 1, 2025 | ransomware_live | — |
| Workers Informática Ltda | April 1, 2025 | ransomware_live | — |
| Ocuco | April 1, 2025 | ransomware_live | — |
| BenefitElect | April 1, 2025 | ransomware_live | — |
| 747 Studios | April 1, 2025 | ransomware_live | — |
| Design Design | March 31, 2025 | ransomware_live | — |
| Kyocera Document Solutions Europe | March 31, 2025 | ransomware_live | — |
| Lee & Sakahara Architects | March 31, 2025 | ransomware_live | — |
| Lupin Limited | March 28, 2025 | ransomware_live | — |
| Precision Accounting Intl | March 23, 2025 | ransomware_live | — |
| Innovative Surfaces | March 22, 2025 | ransomware_live | — |
| SPARSH Hospital | March 22, 2025 | ransomware_live | — |
| Officio Medical | March 21, 2025 | ransomware_live | — |
| Cayman National Bank | March 21, 2025 | ransomware_live | — |
| Instituto de Ojos | March 20, 2025 | ransomware_live | — |
| interiseworld.com | March 20, 2025 | ransomware_live | — |
| Obra Play | March 20, 2025 | ransomware_live | — |
| Harcourts Prime Properties | March 18, 2025 | ransomware_live | — |
| Trymata | March 11, 2025 | ransomware_live | — |
| Skyward Specialty Insurance | March 11, 2025 | ransomware_live | — |
| Wendy Wu Tours | March 4, 2025 | ransomware_live | — |
| Workforce Group | March 2, 2025 | ransomware_live | — |
| G&M Direct Hire | February 23, 2025 | ransomware_live | — |
| Novi Community School District | February 23, 2025 | ransomware_live | — |
| BluAgent Technologies, Inc | February 23, 2025 | ransomware_live | — |
| Shaghalni | February 23, 2025 | ransomware_live | — |
| Medical File | February 20, 2025 | ransomware_live | — |
| NimuSoft | February 19, 2025 | ransomware_live | — |
| Help Me Grow Yolo | February 19, 2025 | ransomware_live | — |
| Brolly | February 19, 2025 | ransomware_live | — |
| BeniPlus | February 19, 2025 | ransomware_live | — |
| EzyLegal | February 19, 2025 | ransomware_live | — |
| DR.Claims FL LLC | February 19, 2025 | ransomware_live | — |
| Obex Medical | February 12, 2025 | ransomware_live | — |
| Logix Corporate Solutions | February 11, 2025 | ransomware_live | — |
| WhoHire | February 10, 2025 | ransomware_live | — |
| Albright Institute | February 10, 2025 | ransomware_live | — |
| ASRAM Medical College and Hospita | February 10, 2025 | ransomware_live | — |
| Capital Cell Global (CCG) | February 10, 2025 | ransomware_live | — |
| Enfin | February 10, 2025 | ransomware_live | — |
| Ponte16 Hotel & Casino | February 3, 2025 | ransomware_live | — |
| Nano Health | February 1, 2025 | ransomware_live | — |
| payahmedabadechallan.org | January 30, 2025 | ransomware_live | — |
| Let’s Secure Insurance | January 26, 2025 | ransomware_live | — |
| Keepz | January 25, 2025 | ransomware_live | — |
| DataSociete | January 25, 2025 | ransomware_live | — |
| PrimoTicketing | January 24, 2025 | ransomware_live | — |
| Nimbus Facility Services | January 21, 2025 | ransomware_live | — |
| FAAB Invest Advisors Private Limited | January 21, 2025 | ransomware_live | — |
| anupalanonline.com | January 16, 2025 | ransomware_live | — |
| Farmacia Cofar | January 16, 2025 | ransomware_live | — |
| Badger Popcorn And Concession Supply Company | December 21, 2024 | ransomware_live | — |
| Avana Electrotek | December 21, 2024 | ransomware_live | — |
| Allied Packing And Rubber Inc | December 21, 2024 | ransomware_live | — |
| Albert Paper Company | December 21, 2024 | ransomware_live | — |
| Abrasive Supply Corporation | December 21, 2024 | ransomware_live | — |
| McCally Tool and Supply | December 21, 2024 | ransomware_live | — |
| Langford Tool And Drill Co | December 21, 2024 | ransomware_live | — |
| LAMERS ENTERPRISE INC | December 21, 2024 | ransomware_live | — |
| J AND S Electrical And Lighting Supply LLC | December 21, 2024 | ransomware_live | — |
| Hammons Supply Company | December 21, 2024 | ransomware_live | — |
| Greene Supply Company | December 21, 2024 | ransomware_live | — |
| GPM Lawn Sprinkler Supply | December 21, 2024 | ransomware_live | — |
| Greater Michigan Distributors | December 21, 2024 | ransomware_live | — |
| GAMKA SALES CO. INC | December 21, 2024 | ransomware_live | — |
| Economy Restaurant Equipment And Supply Company | December 21, 2024 | ransomware_live | — |
| Davis Products Company Inc | December 21, 2024 | ransomware_live | — |
| Casa Juarez Restaurant Supply Co | December 21, 2024 | ransomware_live | — |
| BRIGHT BOLT ENTERPRISES INC | December 21, 2024 | ransomware_live | — |
| Blome International | December 21, 2024 | ransomware_live | — |
| Water Utilities Corporation | December 20, 2024 | ransomware_live | — |
| Khalil Center | December 20, 2024 | ransomware_live | — |
| PT Pertamina | December 20, 2024 | ransomware_live | — |
| Accolent ERP Software | December 20, 2024 | ransomware_live | — |
| Verosa LLC | December 18, 2024 | ransomware_live | — |
| Tumeny Payments Limited | December 15, 2024 | ransomware_live | — |
| JSSR Options Co., Ltd. (JSSR) | December 15, 2024 | ransomware_live | — |
| Interforos Casting | December 11, 2024 | ransomware_live | — |
| USA2ME | December 5, 2024 | ransomware_live | — |
| gajicermat.com | November 28, 2024 | ransomware_live | — |
| gehnaindia.com | November 28, 2024 | ransomware_live | — |
| cloudofgoods.com | November 28, 2024 | ransomware_live | — |
| clubfitsoftware.com.au | November 28, 2024 | ransomware_live | — |
| briatek.com.ng | November 28, 2024 | ransomware_live | — |
| mydelux.com.my | November 26, 2024 | ransomware_live | — |
| empowersettlementservices.com | November 26, 2024 | ransomware_live | — |
| goformz.com | November 26, 2024 | ransomware_live | — |
| waltersgardens.com | November 26, 2024 | ransomware_live | — |
| RiverRestHome | November 25, 2024 | ransomware_live | — |
| inv[...]nator | November 25, 2024 | ransomware_live | — |
| Dardoc | November 25, 2024 | ransomware_live | — |
| Ithbar | November 25, 2024 | ransomware_live | — |
| Efi Sales | November 24, 2024 | ransomware_live | — |
| Eassy Life | November 24, 2024 | ransomware_live | — |
| Nationwide Legal | November 24, 2024 | ransomware_live | — |
| Vogue Homes | November 23, 2024 | ransomware_live | — |
| ABC Group | November 22, 2024 | ransomware_live | — |
| ViralPitch | November 21, 2024 | ransomware_live | — |
| LiquiTech | November 20, 2024 | ransomware_live | — |
| Camim | November 20, 2024 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).