monti
First seen December 7, 2022Active110 claimed victims
The claims below are reproduced as posted by monti on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
Monti is a ransomware group first observed in June 2022 that initially copied nearly all of Conti's leaked source code, pivoting to target government, legal, and healthcare entities, later releasing a new Linux variant in 2023 with significantly less Conti code similarity, and experimenting with an affiliate model.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| Amtech Software | May 7, 2025 | ransomware_live | — |
| American Eagle Logistics | May 3, 2025 | ransomware_live | — |
| Gloria Cales | March 19, 2025 | ransomware_live | — |
| CD | March 19, 2025 | ransomware_live | — |
| agi.net | March 6, 2025 | ransomware_live | — |
| 365labs - Security Corp | March 4, 2025 | ransomware_live | — |
| FM.GOB.AR | March 2, 2025 | ransomware_live | — |
| sole technology | February 11, 2025 | ransomware_live | — |
| FENSTERMAKER | January 30, 2025 | ransomware_live | — |
| nenok.de | January 30, 2025 | ransomware_live | — |
| SCV Med Group | January 29, 2025 | ransomware_live | — |
| metalurgica roma | January 28, 2025 | ransomware_live | — |
| BBLAWFIRM | January 28, 2025 | ransomware_live | — |
| Acoustiblok | January 28, 2025 | ransomware_live | — |
| lnetwork | January 28, 2025 | ransomware_live | — |
| Omni Fiber LLC | January 22, 2025 | ransomware_live | — |
| ibericar | December 22, 2024 | ransomware_live | — |
| Oxford Auto Insurance | November 20, 2024 | ransomware_live | — |
| Southern Oregon Veterinary Specialty Center | November 19, 2024 | ransomware_live | — |
| KVF | November 19, 2024 | ransomware_live | — |
| Premier Tax Services | November 19, 2024 | ransomware_live | — |
| Anderson Miller LTD | November 19, 2024 | ransomware_live | — |
| La Tazza D'oro | October 21, 2024 | ransomware_live | — |
| Raeyco Lab Equipment | October 21, 2024 | ransomware_live | — |
| Welding and Fabrication (Humble Mfg) | October 21, 2024 | ransomware_live | — |
| Burgess Kilpatrick | October 21, 2024 | ransomware_live | — |
| City Of Forest Park - Full Leak | October 4, 2024 | ransomware_live | — |
| City Of Forest Park | October 4, 2024 | ransomware_live | — |
| Cotala Cross-Media | August 30, 2024 | ransomware_live | — |
| Prism Construction | August 30, 2024 | ransomware_live | — |
| City Projects | August 30, 2024 | ransomware_live | — |
| Welding and Fabrication (humblemfg) | August 30, 2024 | ransomware_live | — |
| Raeyco Lab Equipment Systems Management | August 30, 2024 | ransomware_live | — |
| Seng Tsoi Architect | August 30, 2024 | ransomware_live | — |
| Richmond Auto Mall | August 30, 2024 | ransomware_live | — |
| Burgess Kilpartick | August 30, 2024 | ransomware_live | — |
| Phyton Biotech | August 30, 2024 | ransomware_live | — |
| Blue Maven Group | August 26, 2024 | ransomware_live | — |
| bluemaven.ca problems | August 26, 2024 | ransomware_live | — |
| Phoenix | August 22, 2024 | ransomware_live | — |
| Adorna & Guzman Dentistry | August 1, 2024 | ransomware_live | — |
| Regas (regasenergy.com) | July 24, 2024 | ransomware_live | — |
| forestparkga.gov | July 24, 2024 | ransomware_live | — |
| Excelsior Orthopaedics | July 8, 2024 | ransomware_live | — |
| Wayne Memorial Hospital | June 30, 2024 | ransomware_live | — |
| VTWin.ca | June 24, 2024 | ransomware_live | — |
| Compagnia Trasporti Integrati S.R.L | June 24, 2024 | ransomware_live | — |
| Aéroport de Pau | May 26, 2024 | ransomware_live | — |
| Esc Pau Etudes-Conseils | May 26, 2024 | ransomware_live | — |
| CNPC Sport | May 26, 2024 | ransomware_live | — |
| project sold | May 15, 2024 | ransomware_live | — |
| Kuhn Rechtsanwlte GmbH | May 10, 2024 | ransomware_live | — |
| Spine West | February 24, 2024 | ransomware_live | — |
| APEX - apexspedition.de | February 23, 2024 | ransomware_live | — |
| Smith Capital | February 1, 2024 | ransomware_live | — |
| Smith Capital - Press Release | January 21, 2024 | ransomware_live | — |
| Diablo Valley Oncology and Hematology Medical Group - Press Release | January 4, 2024 | ransomware_live | — |
| HMW - Press Release | December 9, 2023 | ransomware_live | — |
| HMW | December 9, 2023 | ransomware_live | — |
| Tryax Realty Management - Press Release | December 7, 2023 | ransomware_live | — |
| Tryax Realty Management | December 7, 2023 | ransomware_live | — |
| Rudolf-Venture Chemical Inc - Part 1 | December 5, 2023 | ransomware_live | — |
| Hello Jacobs from RVC | December 1, 2023 | ransomware_live | — |
| Hello Cristina from Law Offices of John E Hill | December 1, 2023 | ransomware_live | — |
| Rudolf GmbH & Rudolf Venture Chemicals Inc - Press Release | November 30, 2023 | ransomware_live | — |
| Law Offices of John E Hill | November 28, 2023 | ransomware_live | — |
| Law Offices of John E Hill - Press Release | November 27, 2023 | ransomware_live | — |
| Imt - Press Release | November 27, 2023 | ransomware_live | — |
| Imt | November 27, 2023 | ransomware_live | — |
| Magsaysay Maritime - Press Release | November 9, 2023 | ransomware_live | — |
| Rudolf Venture Chemical Inc - Press Release | November 9, 2023 | ransomware_live | — |
| University of Defence - Full Leak | October 23, 2023 | ransomware_live | — |
| Superline - Full Leak | October 19, 2023 | ransomware_live | — |
| Superline | October 19, 2023 | ransomware_live | — |
| Superline - Press Release | October 9, 2023 | ransomware_live | — |
| University Obrany - Part 2 (Tiny Leak) | October 7, 2023 | ransomware_live | — |
| For UNOB | October 6, 2023 | ransomware_live | — |
| University of Defence - Part 1 | October 3, 2023 | ransomware_live | — |
| Rainbow Travel Service - Press Release | October 1, 2023 | ransomware_live | — |
| Cascade Family Dental - Press Release | October 1, 2023 | ransomware_live | — |
| Auckland University of Technology | September 22, 2023 | ransomware_live | — |
| University Obrany - Press Release | September 20, 2023 | ransomware_live | — |
| East Baking Press Release | September 14, 2023 | ransomware_live | — |
| Ja Quith Press Release | September 14, 2023 | ransomware_live | — |
| Abatti Companies - Press Release | August 4, 2023 | ransomware_live | — |
| Abatti Companies | August 4, 2023 | ransomware_live | — |
| Bickel & Brewer - Press Release | August 2, 2023 | ransomware_live | — |
| Hungarian Investment Promotion Agency | July 30, 2023 | ransomware_live | — |
| Hungarian Investment Promotion Agency Press Release | July 22, 2023 | ransomware_live | — |
| Siden & Associates Press Release | July 22, 2023 | ransomware_live | — |
| Servizi Omnia All data upload | May 30, 2023 | ransomware_live | — |
| Servizi Omnia | May 27, 2023 | ransomware_live | — |
| ASL 1 - Avezzano Sulmona L'Aquila *All data upload* | May 15, 2023 | ransomware_live | — |
| ASL 1 - Avezzano Sulmona L'Aquila *UPD 05-13* | May 13, 2023 | ransomware_live | — |
| ASL 1 - Avezzano Sulmona L'Aquila *UPD 05-11* | May 11, 2023 | ransomware_live | — |
| CSD Network Services Ltd | May 11, 2023 | ransomware_live | — |
| ASL 1 - Avezzano Sulmona L'Aquila *UPD 05-10* | May 10, 2023 | ransomware_live | — |
| {UPD} Control & Automation technology - LUX Automation | May 8, 2023 | ransomware_live | — |
| ASL 1 - Avezzano Sulmona L'Aquila *first 10gb upload* | May 8, 2023 | ransomware_live | — |
| ASL 1 - Avezzano Sulmona L'Aquila *UPDATE* | May 6, 2023 | ransomware_live | — |
Page 1 of 2Older →
Claim data from ransomware.live and RansomLook (CC BY 4.0).