BreachCensus

mogilevich

First seen February 20, 2024Active8 claimed victims

The claims below are reproduced as posted by mogilevich on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.

Listed organisation? Contact [email protected].

Profile

Mogilevich appeared in February 2024, rapidly claiming high-profile breaches of Epic Games, DJI, Shein, and Kick.com, but was quickly exposed as a fraud — the group's operator admitted they were "professional fraudsters" who sold fake breach data and access to a non-existent RaaS panel.

Description from ransomware.live.

Claimed victims (as posted by the group — unverified)

Victim (as posted)Claimed onSourcePress coverage
SheinMarch 1, 2024ransomware_live—
KickMarch 1, 2024ransomware_live—
DJI CompanyMarch 1, 2024ransomware_live—
Bangladesh PoliceFebruary 28, 2024ransomware_live—
EpicGamesFebruary 27, 2024ransomware_live—
Ireland's Department of Foreign AffairsFebruary 27, 2024ransomware_live—
BAZAARVOICE.COMFebruary 26, 2024ransomware_live—
INFINITIUSA.COMFebruary 20, 2024ransomware_live—

Claim data from ransomware.live and RansomLook (CC BY 4.0).