netrunner
First seen April 3, 2026Active12 claimed victims
The claims below are reproduced as posted by netrunner on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
NetRunner is a ransomware group active from at least 2025 targeting diverse sectors including healthcare, telecommunications, manufacturing, and agriculture across Japan, Italy, the US, and Jordan, notably demanding a $100M ransom from Nippon Medical School Musashi Kosugi Hospital.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| Mid Atlantic Gynecologic Oncology and Pelvic Surgery Associates | October 8, 2026 | ransomware_live | — |
| M** A******* G********** O******* a** P***** S****** A********* | October 5, 2026 | ransomware_live | — |
| Precon Marine Inc | October 3, 2026 | ransomware_live | — |
| Main Place Mall | October 2, 2026 | ransomware_live | — |
| P***** M***** I** | September 30, 2026 | ransomware_live | — |
| M*** P**** M*** | September 28, 2026 | ransomware_live | — |
| Seoyon E-Hwa Summit | April 3, 2026 | ransomware_live | — |
| GEG Telecomunicazioni | April 3, 2026 | ransomware_live | — |
| Shiraume Hospital | April 3, 2026 | ransomware_live | — |
| Nippon Medical School Musashi Kosugi Hospital | April 3, 2026 | ransomware_live | — |
| Harman Fitness | April 3, 2026 | ransomware_live | — |
| Jordan India Fertilizer Company | April 3, 2026 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).