BreachCensus

noescape

First seen June 12, 2023Active126 claimed victims

The claims below are reproduced as posted by noescape on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.

Listed organisation? Contact [email protected].

Profile

NoEscape was a RaaS operation active from May to December 2023 believed to be a rebrand of the defunct Avaddon ransomware, targeting professional services, manufacturing, and healthcare with triple-extortion capabilities (encryption, data theft, and optional DDoS), before abruptly shutting down in an apparent exit scam.

Description from ransomware.live.

Claimed victims (as posted by the group — unverified)

Victim (as posted)Claimed onSourcePress coverage
Science History InstituteNovember 26, 2023ransomware_live—
Grupo PRIDESNovember 26, 2023ransomware_live—
Nida CorpNovember 26, 2023ransomware_live—
UF ResourcesNovember 26, 2023ransomware_live—
TALENTUM Temporal SASNovember 18, 2023ransomware_live—
VerdecoraNovember 18, 2023ransomware_live—
PruittHealthNovember 17, 2023ransomware_live—
Rc Moore IncNovember 11, 2023ransomware_live—
CarespringNovember 10, 2023ransomware_live—
Enware Australia Pty LtdNovember 10, 2023ransomware_live—
PAR Group CoNovember 5, 2023ransomware_live—
Lander County Convention & Tourism AuthorityNovember 5, 2023ransomware_live—
Kwik Industries, Inc.November 5, 2023ransomware_live—
Putzel Electrical Contractors IncNovember 2, 2023ransomware_live—
Jeffcoat Mechanical Services IncOctober 31, 2023ransomware_live—
Ezi Floor ProductsOctober 31, 2023ransomware_live—
Mpr LiftsOctober 31, 2023ransomware_live—
OE Federal Credit UnionOctober 29, 2023ransomware_live—
Action Santé TravailOctober 29, 2023ransomware_live—
Orion Township Public LibraryOctober 28, 2023ransomware_live—
Agile Display SolutionsOctober 27, 2023ransomware_live—
Avianor GroupOctober 27, 2023ransomware_live—
VinovalieOctober 26, 2023ransomware_live—
labor force IncOctober 26, 2023ransomware_live—
Two SaintsOctober 25, 2023ransomware_live—
St Raphael'S HospiceOctober 25, 2023ransomware_live—
STRUMETOctober 25, 2023ransomware_live—
McKeag & CoOctober 25, 2023ransomware_live—
PR ClinicalOctober 25, 2023ransomware_live—
Spolzino Termosanitari SrlOctober 25, 2023ransomware_live—
Dynametal Technologies IncOctober 25, 2023ransomware_live—
R N Wooler & Co LtdOctober 25, 2023ransomware_live—
Schwob AGOctober 25, 2023ransomware_live—
Southeastern Orthopaedic SpecialistsOctober 25, 2023ransomware_live—
Order of Psychologists of LombardyOctober 23, 2023ransomware_live—
International Community SchoolsOctober 23, 2023ransomware_live—
Motorcycles of Charlotte & GreensboroOctober 23, 2023ransomware_live—
Central University of BayamónOctober 23, 2023ransomware_live—
MisterminitOctober 23, 2023ransomware_live—
INSTANT ACCESSOctober 23, 2023ransomware_live—
KBS Accountants, Tax Specialists & LawyersOctober 23, 2023ransomware_live—
Gasmart OrganizationOctober 23, 2023ransomware_live—
Korea Petroleum Industries CompanyOctober 23, 2023ransomware_live—
Penfield Fire CompanyOctober 23, 2023ransomware_live—
City of VictorvilleOctober 23, 2023ransomware_live—
Florists Supply LtdOctober 23, 2023ransomware_live—
KBS AccountantsOctober 12, 2023ransomware_live—
Instant Access CoOctober 9, 2023ransomware_live—
LDLC ASVELOctober 9, 2023ransomware_live—
Mount Holly NissanOctober 9, 2023ransomware_live—
GasmartOctober 9, 2023ransomware_live—
GEACAMOctober 6, 2023ransomware_live—
Granger Medical ClinicOctober 5, 2023ransomware_live—
Seattle Housing AuthorityOctober 5, 2023ransomware_live—
Korea Petroleum Industrial Co. LtdOctober 5, 2023ransomware_live—
Ordine Degli Psicologi Della LombardiaOctober 3, 2023ransomware_live—
Centre Du SablonOctober 1, 2023ransomware_live—
Penfield Fire CoOctober 1, 2023ransomware_live—
Elbe-Obst Fruchtverarbeitung GmbHOctober 1, 2023ransomware_live—
Effigest Capital ServicesOctober 1, 2023ransomware_live—
Kentie Systeemtechniek BVSeptember 25, 2023ransomware_live—
Healthy Baby Essentials IncSeptember 25, 2023ransomware_live—
BELLSONICA CORPORATIONSeptember 24, 2023ransomware_live—
SEFAG ZrtSeptember 24, 2023ransomware_live—
El Colegio De San LuisSeptember 24, 2023ransomware_live—
ScaraSeptember 21, 2023ransomware_live—
Powerhouse Retail Services LLCSeptember 20, 2023ransomware_live—
Waterloo MediaSeptember 20, 2023ransomware_live—
Leekes LtdSeptember 17, 2023ransomware_live—
BPR Properties LLCSeptember 16, 2023ransomware_live—
Kool-Air IncSeptember 14, 2023ransomware_live—
Küng Ag BernSeptember 10, 2023ransomware_live—
IKPSeptember 10, 2023ransomware_live—
International Joint CommissionSeptember 7, 2023ransomware_live—
EDUCAL, SA de CVSeptember 7, 2023ransomware_live—
Fondation Vincent De PaulSeptember 7, 2023ransomware_live—
Infinity Construction CompanySeptember 4, 2023ransomware_live—
AdSage Technology Co., Ltd.September 3, 2023ransomware_live—
Mulkay Cardiology ConsultantsSeptember 2, 2023ransomware_live—
Altmann Dental GmbH & Co KGSeptember 2, 2023ransomware_live—
QI Holdings Ltd.August 28, 2023ransomware_live—
Rs Logistics LtdAugust 28, 2023ransomware_live—
GORDON, MUIR & FOLEY LLPAugust 28, 2023ransomware_live—
Northwave s.r.l.August 28, 2023ransomware_live—
HBME LLCAugust 28, 2023ransomware_live—
OmniatelAugust 28, 2023ransomware_live—
Pasquale Bruni LtdAugust 26, 2023ransomware_live—
Iina Ba IncAugust 23, 2023ransomware_live—
Gujarat Industries Power Company Ltd.August 21, 2023ransomware_live—
Softverg Co., Ltd.August 18, 2023ransomware_live—
FiocruzAugust 18, 2023ransomware_live—
Ningbo Yinzhou Vocational High SchoolAugust 18, 2023ransomware_live—
Infuance Communication IncAugust 13, 2023ransomware_live—
FYTISA Industrial Felts and FabricsSLAugust 13, 2023ransomware_live—
Contact 121 Pty LtdAugust 11, 2023ransomware_live—
au Domain Administration LtdAugust 11, 2023ransomware_live—
FTRIA CO. LTDAugust 9, 2023ransomware_live—
Fondation De VerdeilAugust 8, 2023ransomware_live—
Federal Bar AssociationAugust 7, 2023ransomware_live—
John L Lowery & AssociatesAugust 7, 2023ransomware_live—
Page 1 of 2Older →

Claim data from ransomware.live and RansomLook (CC BY 4.0).