kryptos
First seen October 8, 2025Active5 claimed victims
The claims below are reproduced as posted by kryptos on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
Kryptos is a small ransomware group first observed in October 2025, conducting simultaneous attacks across North America and Oceania on its debut day with a focus on professional, technical, and legal service sectors, with only 3 known documented victims.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| Provincial Department of Health Services Sri Lanka | November 6, 2025 | ransomware_live | — |
| Adichunchanagiri Institute Of Technology | October 24, 2025 | ransomware_live | — |
| Nor************* | October 8, 2025 | ransomware_live | — |
| Har****** | October 8, 2025 | ransomware_live | — |
| Mea************ | October 8, 2025 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).