lamashtu
First seen April 13, 2026Active34 claimed victims
The claims below are reproduced as posted by lamashtu on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
Lamashtu is an extortion group that first appeared in April 2026, claiming attacks against organizations in France, Romania, and Thailand across energy, pharmaceutical, and film sectors; it has not yet been confirmed as operating actual file-encrypting ransomware rather than pure data-theft extortion.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| Great Foods | June 17, 2026 | ransomware_live | — |
| PatayaFood | June 10, 2026 | ransomware_live | — |
| Shanpoornam Metals | May 29, 2026 | ransomware_live | — |
| H-W-G & Acros Sport | May 26, 2026 | ransomware_live | — |
| ROTH‑TECHNIK AUSTRIA | May 19, 2026 | ransomware_live | — |
| MSC Group | May 18, 2026 | ransomware_live | — |
| Parle Agro | May 16, 2026 | ransomware_live | — |
| Saharuang | May 12, 2026 | ransomware_live | — |
| NaRaYa | May 12, 2026 | ransomware_live | — |
| Sistemas Electrónicos y de Telecomunicaciones | May 11, 2026 | ransomware_live | — |
| Depósito Dental Universitario | May 11, 2026 | ransomware_live | — |
| Ashtech Infotech | May 8, 2026 | ransomware_live | — |
| Acros Sport GmbH | May 8, 2026 | ransomware_live | — |
| WOHA | May 6, 2026 | ransomware_live | — |
| GRANDHOME | May 5, 2026 | ransomware_live | — |
| ROYAL M HOTEL BY GEWAN FUJAIRAH LLC | May 4, 2026 | ransomware_live | — |
| Luna Group | May 4, 2026 | ransomware_live | — |
| Malaysian NPK Fertilizer Sdn. Bhd | April 25, 2026 | ransomware_live | — |
| Apple Film Group | April 25, 2026 | ransomware_live | — |
| Jesin Group | April 20, 2026 | ransomware_live | — |
| Biotehnos | April 16, 2026 | ransomware_live | — |
| VOLTERRIES | April 15, 2026 | ransomware_live | — |
| IPARBILBAO ABOGADOS - ROCA JUNYENT | April 14, 2026 | ransomware_live | — |
| GRUPO RONDA | April 14, 2026 | ransomware_live | — |
| WEDA ROBOTICS | April 14, 2026 | ransomware_live | — |
| LACROIX | April 14, 2026 | ransomware_live | — |
| The Seacare Hotel | April 13, 2026 | ransomware_live | — |
| International Assistance Sdn | April 13, 2026 | ransomware_live | — |
| Servetto Srl | April 13, 2026 | ransomware_live | — |
| ClientSolution EFO Service Srl Logitech Srl Safety | April 13, 2026 | ransomware_live | — |
| Beaver Engineering | April 11, 2026 | ransomware_live | — |
| FILAIR | April 11, 2026 | ransomware_live | — |
| CNAOC | April 11, 2026 | ransomware_live | — |
| Gauthier Tissus | April 11, 2026 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).