lamashtu
First seen April 13, 2026Active54 claimed victims
The claims below are reproduced as posted by lamashtu on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
Lamashtu is an extortion group that first appeared in April 2026, claiming attacks against organizations in France, Romania, and Thailand across energy, pharmaceutical, and film sectors; it has not yet been confirmed as operating actual file-encrypting ransomware rather than pure data-theft extortion.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| Hecker Holzsystembau | October 22, 2026 | ransomlook | — |
| VERGI Muenster | October 22, 2026 | ransomware_live | — |
| Gräfliches Hofbrauhaus Freising | October 22, 2026 | ransomware_live | — |
| WEPOS Chemie | October 21, 2026 | ransomware_live | — |
| MECA-PRECIS | October 21, 2026 | ransomware_live | — |
| FuG-Gruppe | October 21, 2026 | ransomware_live | — |
| Grupo Industrial Tauro | October 5, 2026 | ransomlook | — |
| TRANS LOGROÑO SOCIEDAD ANONIMA | October 5, 2026 | ransomlook | — |
| Bender Tribunenbau | October 5, 2026 | ransomlook | — |
| Fluge Audiovisuales | October 5, 2026 | ransomlook | — |
| GERLON | September 30, 2026 | ransomlook | — |
| Altmannshofer Sicherheits-Videotechnik | September 30, 2026 | ransomlook | — |
| PROJAHN | September 30, 2026 | ransomlook | — |
| Virtual Ideas | September 30, 2026 | ransomlook | — |
| FIDUCIAL | September 30, 2026 | ransomlook | — |
| Wilhelm Kühne | September 30, 2026 | ransomlook | — |
| Becker Logistik | September 30, 2026 | ransomlook | — |
| Vinco Energy | September 30, 2026 | ransomlook | — |
| Astidental di Sabbione | September 30, 2026 | ransomlook | — |
| Dr Damiel Pugliese | September 30, 2026 | ransomlook | — |
| Great Foods | June 17, 2026 | ransomware_live | — |
| PatayaFood | June 10, 2026 | ransomware_live | — |
| Shanpoornam Metals | May 29, 2026 | ransomware_live | — |
| H-W-G & Acros Sport | May 26, 2026 | ransomware_live | — |
| ROTH‑TECHNIK AUSTRIA | May 19, 2026 | ransomware_live | — |
| MSC Group | May 18, 2026 | ransomware_live | — |
| Parle Agro | May 16, 2026 | ransomware_live | — |
| Saharuang | May 12, 2026 | ransomware_live | — |
| NaRaYa | May 12, 2026 | ransomware_live | — |
| Sistemas Electrónicos y de Telecomunicaciones | May 11, 2026 | ransomware_live | — |
| Depósito Dental Universitario | May 11, 2026 | ransomware_live | — |
| Ashtech Infotech | May 8, 2026 | ransomware_live | — |
| Acros Sport GmbH | May 8, 2026 | ransomware_live | — |
| WOHA | May 6, 2026 | ransomware_live | — |
| GRANDHOME | May 5, 2026 | ransomware_live | — |
| ROYAL M HOTEL BY GEWAN FUJAIRAH LLC | May 4, 2026 | ransomware_live | — |
| Luna Group | May 4, 2026 | ransomware_live | — |
| Malaysian NPK Fertilizer Sdn. Bhd | April 25, 2026 | ransomware_live | — |
| Apple Film Group | April 25, 2026 | ransomware_live | — |
| Jesin Group | April 20, 2026 | ransomware_live | — |
| Biotehnos | April 16, 2026 | ransomware_live | — |
| VOLTERRIES | April 15, 2026 | ransomware_live | — |
| IPARBILBAO ABOGADOS - ROCA JUNYENT | April 14, 2026 | ransomware_live | — |
| GRUPO RONDA | April 14, 2026 | ransomware_live | — |
| WEDA ROBOTICS | April 14, 2026 | ransomware_live | — |
| LACROIX | April 14, 2026 | ransomware_live | — |
| The Seacare Hotel | April 13, 2026 | ransomware_live | — |
| International Assistance Sdn | April 13, 2026 | ransomware_live | — |
| Servetto Srl | April 13, 2026 | ransomware_live | — |
| ClientSolution EFO Service Srl Logitech Srl Safety | April 13, 2026 | ransomware_live | — |
| Beaver Engineering | April 11, 2026 | ransomware_live | — |
| FILAIR | April 11, 2026 | ransomware_live | — |
| CNAOC | April 11, 2026 | ransomware_live | — |
| Gauthier Tissus | April 11, 2026 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).