krybit
First seen April 3, 2026Active135 claimed victims
The claims below are reproduced as posted by krybit on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
Krybit is an emerging RaaS group that launched in late March 2026, offering affiliates an 80/20 revenue split with support for Windows, Linux, ESXi, and NAS device encryption, and became notable for a public feud with rival group 0APT in which each breached and leaked the other's operator data.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| ligacancerguate.org | September 3, 2026 | ransomlook | — |
| incan.org.gt | September 3, 2026 | ransomlook | — |
| hccd-construction.com | September 1, 2026 | ransomlook | — |
| southsign.in | September 1, 2026 | ransomlook | — |
| transportesmontejo.com | September 1, 2026 | ransomlook | — |
| meccahighfeed.blogspot.com | September 1, 2026 | ransomlook | — |
| vedantaainstitute.in | September 1, 2026 | ransomlook | — |
| jswlaw.bt | September 1, 2026 | ransomlook | — |
| dmt-group.com | September 1, 2026 | ransomlook | — |
| amptc.net | September 1, 2026 | ransomlook | — |
| orex.co.th | September 1, 2026 | ransomlook | — |
| reignwoodpark.com | September 1, 2026 | ransomlook | — |
| www.alphaplantes.com | September 1, 2026 | ransomlook | — |
| tum.com.mx | September 1, 2026 | ransomlook | — |
| uicc.org | September 1, 2026 | ransomlook | — |
| seashellhospital.com | September 1, 2026 | ransomlook | — |
| www.sankovn.com | August 26, 2026 | ransomlook | — |
| ferretornillos.gt | August 26, 2026 | ransomlook | — |
| karkinos.in | August 26, 2026 | ransomlook | — |
| cgcgabon.com | August 26, 2026 | ransomlook | — |
| wmiemporium.com | August 26, 2026 | ransomlook | — |
| finodayacapital.com | August 26, 2026 | ransomlook | — |
| lemonfarm.com | August 26, 2026 | ransomlook | — |
| www.neooftalmo.com.br | August 26, 2026 | ransomlook | — |
| vascara.com | August 26, 2026 | ransomlook | — |
| mimafoods.net | August 26, 2026 | ransomlook | — |
| jindallifescience.com | August 26, 2026 | ransomlook | — |
| sysconth.com | August 26, 2026 | ransomlook | — |
| resi.com | August 24, 2026 | ransomware_live | — |
| www.hsi.info | August 19, 2026 | ransomware_live | — |
| sipresitalia.it | August 19, 2026 | ransomware_live | — |
| automotoresrosedal.com.ar | August 19, 2026 | ransomware_live | — |
| www.mestojilemnice.cz | August 19, 2026 | ransomware_live | — |
| sunsea.co.th | August 19, 2026 | ransomware_live | — |
| lhyk.com.sg | August 12, 2026 | ransomware_live | — |
| labindia.com | August 12, 2026 | ransomware_live | — |
| hisstw.com | August 12, 2026 | ransomware_live | — |
| www.apsanet.com.ar | August 11, 2026 | ransomware_live | — |
| www.kilpi-koskinen.fi | August 11, 2026 | ransomware_live | — |
| studiotibaldi.it | August 9, 2026 | ransomware_live | — |
| www.hymiasa.com | August 7, 2026 | ransomware_live | — |
| www.serengetiestates.co.za | August 7, 2026 | ransomware_live | — |
| www.ernat-bureau-etudes.fr | August 7, 2026 | ransomware_live | — |
| www.actini.com | August 7, 2026 | ransomware_live | — |
| reflet2000.fr | August 7, 2026 | ransomware_live | — |
| cesmac.edu.br | August 4, 2026 | ransomware_live | — |
| www.buzztrading104.co.za | August 2, 2026 | ransomware_live | — |
| countrymotors.com.mx | August 2, 2026 | ransomware_live | — |
| www.ville-rinxent.fr | August 2, 2026 | ransomware_live | — |
| nigeria.asa-international.com | August 2, 2026 | ransomware_live | — |
| www.dcpartner.co.za | August 2, 2026 | ransomware_live | — |
| www.prohealth.sg | August 2, 2026 | ransomware_live | — |
| chkck.com | July 23, 2026 | ransomware_live | — |
| laxai.com | July 23, 2026 | ransomware_live | — |
| nilepet.com | July 23, 2026 | ransomware_live | — |
| Vibonum Technologies Private Limited | July 22, 2026 | ransomware_live | — |
| dhli.in | July 22, 2026 | ransomware_live | — |
| eurohold.bg | July 19, 2026 | ransomware_live | — |
| euroins.bg | July 18, 2026 | ransomware_live | — |
| www.lagus.cz | July 17, 2026 | ransomware_live | — |
| rehabmalaysia.com | July 17, 2026 | ransomware_live | — |
| formasuniversales.com | July 17, 2026 | ransomware_live | — |
| eitzchaim.com | July 17, 2026 | ransomware_live | — |
| shelby.com.mx | July 8, 2026 | ransomware_live | — |
| xuerong.com | July 8, 2026 | ransomware_live | — |
| seprec.gob.bo | July 5, 2026 | ransomware_live | — |
| duflosa.com | July 3, 2026 | ransomware_live | — |
| majuhome.com.my | July 3, 2026 | ransomware_live | — |
| moscati.org | July 1, 2026 | ransomware_live | — |
| www.northern-access.com | July 1, 2026 | ransomware_live | — |
| aai.com.tw | July 1, 2026 | ransomware_live | — |
| TRANSPORTES Y LOGISTICA BRAS, S.A | July 1, 2026 | ransomware_live | — |
| gitmea.com | July 1, 2026 | ransomware_live | — |
| www.diss.com | July 1, 2026 | ransomware_live | — |
| gsp.es | July 1, 2026 | ransomware_live | — |
| jaws.com.tw | July 1, 2026 | ransomware_live | — |
| blaofood.com | July 1, 2026 | ransomware_live | — |
| ford.mx | June 28, 2026 | ransomware_live | — |
| sansilvestre.edu.pe | June 25, 2026 | ransomware_live | — |
| politur.gob.do | June 25, 2026 | ransomware_live | — |
| coemi.com.br | June 19, 2026 | ransomware_live | — |
| www.mupras.com | June 19, 2026 | ransomware_live | — |
| aasa.ae | June 19, 2026 | ransomware_live | — |
| ersa.com.py | June 17, 2026 | ransomware_live | — |
| www.courdescomptes.sn | June 17, 2026 | ransomware_live | — |
| theorangeblowfish.com | June 15, 2026 | ransomware_live | — |
| frey.com | June 14, 2026 | ransomware_live | — |
| www.mbt-energy.com | June 13, 2026 | ransomware_live | — |
| www.progress-security.com | June 12, 2026 | ransomware_live | — |
| PROBE, S.A. DE C.V | June 10, 2026 | ransomware_live | — |
| libertyinsurance.com.ph | June 10, 2026 | ransomware_live | — |
| aisem.gob.bo | June 9, 2026 | ransomware_live | — |
| huashan.com.cn | June 6, 2026 | ransomware_live | — |
| schultz.com.br | June 5, 2026 | ransomware_live | — |
| www.elumax.com | June 3, 2026 | ransomware_live | — |
| www.transbras.com.gt | June 2, 2026 | ransomware_live | — |
| ecci-srl.com | May 30, 2026 | ransomware_live | — |
| activ88-interim.com | May 30, 2026 | ransomware_live | — |
| smile-siam.com | May 27, 2026 | ransomware_live | — |
| motofrenos.com | May 27, 2026 | ransomware_live | — |
Page 1 of 2Older →
Claim data from ransomware.live and RansomLook (CC BY 4.0).