meow
First seen November 24, 2023Active145 claimed victims
The claims below are reproduced as posted by meow on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
Meow emerged in 2022 (resurfacing aggressively in 2024), initially operating as a RaaS using the Conti v2 codebase before transitioning to a data-extortion-only model — selling stolen data rather than encrypting files — with a heavy focus on US healthcare and medical research organizations.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| San Francisco Ballet | November 19, 2024 | ransomware_live | — |
| OMara Ag Equipment | November 14, 2024 | ransomware_live | — |
| Karl Malone Toyota | November 14, 2024 | ransomware_live | — |
| J.S.T. Espana | November 14, 2024 | ransomware_live | — |
| Herron Todd White | November 14, 2024 | ransomware_live | — |
| Cottles Asphalt Maintenance Inc | November 14, 2024 | ransomware_live | — |
| DieTech North America | November 14, 2024 | ransomware_live | — |
| Pine Belt Cars | November 14, 2024 | ransomware_live | — |
| Zyloware | November 14, 2024 | ransomware_live | — |
| Karman Inc | November 9, 2024 | ransomware_live | — |
| Finger Beton Unternehmensgruppe | November 9, 2024 | ransomware_live | — |
| Lexco | November 7, 2024 | ransomware_live | — |
| Equator Worldwide | November 7, 2024 | ransomware_live | — |
| Lincoln University | November 6, 2024 | ransomware_live | — |
| Houston Housing Authority | October 31, 2024 | ransomware_live | — |
| The Eye Clinic Surgicenter | October 26, 2024 | ransomware_live | — |
| PT Transportasi Gas Indonesia | October 26, 2024 | ransomware_live | — |
| Westwood Country Club | October 26, 2024 | ransomware_live | — |
| KEE Process | October 23, 2024 | ransomware_live | — |
| Youngs Timber Builders Merchants | October 23, 2024 | ransomware_live | — |
| By Design LLC | October 23, 2024 | ransomware_live | — |
| Sanglier Limited | October 21, 2024 | ransomware_live | — |
| Arango Billboard | October 21, 2024 | ransomware_live | — |
| Astero | October 14, 2024 | ransomware_live | — |
| Rocky Mountain Gastroenterology | October 13, 2024 | ransomware_live | — |
| OSG Tool | October 12, 2024 | ransomware_live | — |
| Modiin Ezrachi | October 12, 2024 | ransomware_live | — |
| Unita Turism | October 11, 2024 | ransomware_live | — |
| Atlantic Coast Consulting Inc | October 10, 2024 | ransomware_live | — |
| Barnes Cohen and Sullivan | October 10, 2024 | ransomware_live | — |
| La Futura | October 10, 2024 | ransomware_live | — |
| The Law Office of Omar O Vargas | October 10, 2024 | ransomware_live | — |
| The Superior Court of California | October 8, 2024 | ransomware_live | — |
| Accurate Railroad Construction Ltd | October 8, 2024 | ransomware_live | — |
| Davis Pickren Seydel and Sneed LLP | October 8, 2024 | ransomware_live | — |
| Maxdream | October 8, 2024 | ransomware_live | — |
| Trinity Wholesale Distributors Inc | October 8, 2024 | ransomware_live | — |
| Advantage CDC | October 8, 2024 | ransomware_live | — |
| Corantioquia | October 1, 2024 | ransomware_live | — |
| MacGillivray Law | September 30, 2024 | ransomware_live | — |
| Freshstart Credit Repair | September 30, 2024 | ransomware_live | — |
| Lee Hoffoss Injury Lawyers | September 30, 2024 | ransomware_live | — |
| Community Hospital of Anaconda | September 30, 2024 | ransomware_live | — |
| SaniRent | September 29, 2024 | ransomware_live | — |
| OffRoadAction | September 29, 2024 | ransomware_live | — |
| Moeller Door and Window | September 29, 2024 | ransomware_live | — |
| Alvan Blanch | September 29, 2024 | ransomware_live | — |
| EnviroNET Inc | September 18, 2024 | ransomware_live | — |
| Environmental Code Consultants Inc | September 18, 2024 | ransomware_live | — |
| CSMR Agrupación de Colaboración Empresaria | September 12, 2024 | ransomware_live | — |
| Carpenter McCadden and Lane LLP | September 12, 2024 | ransomware_live | — |
| Arville | September 11, 2024 | ransomware_live | — |
| Advanced Physician Management Services LLC | September 11, 2024 | ransomware_live | — |
| Myelec Electrical | September 10, 2024 | ransomware_live | — |
| IDF and Mossad agents | September 10, 2024 | ransomware_live | — |
| Elsoms Seeds | September 7, 2024 | ransomware_live | — |
| Nocciole Marchisio | September 7, 2024 | ransomware_live | — |
| Special Oilfield Services Company LLC | August 31, 2024 | ransomware_live | — |
| Instituto Cardiovascular del Cesar | August 31, 2024 | ransomware_live | — |
| NOBI AS | August 31, 2024 | ransomware_live | — |
| Grupo Modesto Cerqueira | August 31, 2024 | ransomware_live | — |
| Donco and Sons Inc. | August 31, 2024 | ransomware_live | — |
| Caseificio Alta Valsesia | August 31, 2024 | ransomware_live | — |
| Success Microfinance Bank | August 28, 2024 | ransomware_live | — |
| Y. Shilat Management Services Ltd | August 28, 2024 | ransomware_live | — |
| Woden | August 28, 2024 | ransomware_live | — |
| Diamcad | August 28, 2024 | ransomware_live | — |
| Artesanía Chopo | August 27, 2024 | ransomware_live | — |
| Modulkit | August 27, 2024 | ransomware_live | — |
| Barkal Food Industries | August 27, 2024 | ransomware_live | — |
| Finlogic S.p.A | August 27, 2024 | ransomware_live | — |
| WT Gruber Steuerberatung GmbH | August 27, 2024 | ransomware_live | — |
| South American Tours | August 26, 2024 | ransomware_live | — |
| Complete Payroll Solutions | August 26, 2024 | ransomware_live | — |
| Optimize EGS | August 26, 2024 | ransomware_live | — |
| Vans Lumber and Custom Builders | August 26, 2024 | ransomware_live | — |
| All Parks Insurance | August 26, 2024 | ransomware_live | — |
| CANEA ONE | August 22, 2024 | ransomware_live | — |
| Burns Industrial Equipment | August 21, 2024 | ransomware_live | — |
| Certified Transmission | August 19, 2024 | ransomware_live | — |
| Rostance Edwards | August 16, 2024 | ransomware_live | — |
| Lennartsfors AB | August 16, 2024 | ransomware_live | — |
| Robson Planning Group Inc | August 16, 2024 | ransomware_live | — |
| Zydus Pharmaceuticals | August 15, 2024 | ransomware_live | — |
| Gaston Fence | August 13, 2024 | ransomware_live | — |
| Safefood | August 13, 2024 | ransomware_live | — |
| E-Z UP | August 13, 2024 | ransomware_live | — |
| Aerotech Solutions | August 13, 2024 | ransomware_live | — |
| Element Food Solutions | August 13, 2024 | ransomware_live | — |
| American Contract Systems | August 13, 2024 | ransomware_live | — |
| HUD User | August 7, 2024 | ransomware_live | — |
| KLA | August 7, 2024 | ransomware_live | — |
| FatBoy Cellular | August 7, 2024 | ransomware_live | — |
| Banx Systems | August 6, 2024 | ransomware_live | — |
| CPA Tax Solutions | August 3, 2024 | ransomware_live | — |
| Premier Equities | August 2, 2024 | ransomware_live | — |
| Remitano | August 2, 2024 | ransomware_live | — |
| Dometic Group | August 2, 2024 | ransomware_live | — |
| PeoplesHR | August 2, 2024 | ransomware_live | — |
| National Beverage | August 2, 2024 | ransomware_live | — |
Page 1 of 2Older →
Claim data from ransomware.live and RansomLook (CC BY 4.0).