meow
First seen November 24, 2023Active145 claimed victims
The claims below are reproduced as posted by meow on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
Meow emerged in 2022 (resurfacing aggressively in 2024), initially operating as a RaaS using the Conti v2 codebase before transitioning to a data-extortion-only model — selling stolen data rather than encrypting files — with a heavy focus on US healthcare and medical research organizations.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| WPG Holdings | August 2, 2024 | ransomware_live | — |
| Villarreal and Begum Law Firm | July 26, 2024 | ransomware_live | — |
| The Physical Medicine Rehabilitation Center | July 26, 2024 | ransomware_live | — |
| Andersen Tax | July 26, 2024 | ransomware_live | — |
| Nuclep | July 26, 2024 | ransomware_live | — |
| Miami Gardens Florida | July 26, 2024 | ransomware_live | — |
| Daikin | July 26, 2024 | ransomware_live | — |
| Encore | July 26, 2024 | ransomware_live | — |
| Global Industry Analysts | July 26, 2024 | ransomware_live | — |
| Texas Tech University | July 26, 2024 | ransomware_live | — |
| First Commonwealth Federal Credit Union | July 16, 2024 | ransomware_live | — |
| Golan Christie Taglia | July 16, 2024 | ransomware_live | — |
| Odfjell Drilling | July 16, 2024 | ransomware_live | — |
| Guhring | July 16, 2024 | ransomware_live | — |
| BCS Systems | July 16, 2024 | ransomware_live | — |
| Hewlett Packard Enterprise | July 16, 2024 | ransomware_live | — |
| CBIZ Inc | July 16, 2024 | ransomware_live | — |
| Greenheck | July 16, 2024 | ransomware_live | — |
| Greenheck Fan | June 22, 2024 | ransomware_live | — |
| CBIZ, Inc | June 22, 2024 | ransomware_live | — |
| GE Aerospace | May 20, 2024 | ransomware_live | — |
| Biomedical Research Institute | March 6, 2024 | ransomware_live | — |
| Future Generations Foundation | March 5, 2024 | ransomware_live | — |
| River Delta Unified School District | February 20, 2024 | ransomware_live | — |
| Arlington Perinatal Associates | February 12, 2024 | ransomware_live | — |
| Freedom Munitions | February 12, 2024 | ransomware_live | — |
| Allmetal Inc. | February 12, 2024 | ransomware_live | — |
| Disaronno International | February 12, 2024 | ransomware_live | — |
| Southwark Council | February 1, 2024 | ransomware_live | — |
| Winona Pattern & Mold | January 24, 2024 | ransomware_live | — |
| Lake of the Woods County | December 27, 2023 | ransomware_live | — |
| Bladen County Public Library | December 20, 2023 | ransomware_live | — |
| RCSB PDB | December 19, 2023 | ransomware_live | — |
| Tulane University | December 13, 2023 | ransomware_live | — |
| Memorial Sloan Kettering Cancer Center | December 12, 2023 | ransomware_live | — |
| Agamatrix | December 1, 2023 | ransomware_live | — |
| Katsky Korins | November 26, 2023 | ransomware_live | — |
| Standard Filter | November 22, 2023 | ransomware_live | — |
| Vanderbilt University Medical Center | November 18, 2023 | ransomware_live | — |
| Equaldex | November 9, 2023 | ransomware_live | — |
| Back Roads | November 5, 2023 | ransomware_live | — |
| Zenithpharma | November 5, 2023 | ransomware_live | — |
| Es Saadi | November 5, 2023 | ransomware_live | — |
| WemaBank | September 14, 2023 | ransomware_live | — |
| Giti | September 4, 2023 | ransomware_live | — |
← NewerPage 2 of 2
Claim data from ransomware.live and RansomLook (CC BY 4.0).