noescape
First seen June 12, 2023Active126 claimed victims
The claims below are reproduced as posted by noescape on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
NoEscape was a RaaS operation active from May to December 2023 believed to be a rebrand of the defunct Avaddon ransomware, targeting professional services, manufacturing, and healthcare with triple-extortion capabilities (encryption, data theft, and optional DDoS), before abruptly shutting down in an apparent exit scam.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| Lower Yukon School District | August 5, 2023 | ransomware_live | — |
| Kreacta | August 1, 2023 | ransomware_live | — |
| Republican Vilnius Psychiatric Hospital | July 30, 2023 | ransomware_live | — |
| Newton IT Solutions | July 27, 2023 | ransomware_live | — |
| Avertronics Inc | July 27, 2023 | ransomware_live | — |
| Grupo SCA - Business Information | July 25, 2023 | ransomware_live | — |
| Addison Electronique | July 24, 2023 | ransomware_live | — |
| BEIJER REF | July 24, 2023 | ransomware_live | — |
| Ville de Chevilly-Larue | July 24, 2023 | ransomware_live | — |
| Fushimitsu Gumi Co., Ltd | July 24, 2023 | ransomware_live | — |
| Garac - Business Information | July 24, 2023 | ransomware_live | — |
| Corinium Carpets | July 20, 2023 | ransomware_live | — |
| Girardini Holding Srl | July 18, 2023 | ransomware_live | — |
| Acomen | July 18, 2023 | ransomware_live | — |
| Rampi Srl | July 18, 2023 | ransomware_live | — |
| Burton & South Derbyshire College | July 11, 2023 | ransomware_live | — |
| Jordan Airmotive Ltd | July 11, 2023 | ransomware_live | — |
| Protactics | July 8, 2023 | ransomware_live | — |
| Innodis Group | July 7, 2023 | ransomware_live | — |
| University of Hawaii | June 19, 2023 | ransomware_live | — |
| Promotion Fulfillment Center | June 19, 2023 | ransomware_live | — |
| Credit Team | June 19, 2023 | ransomware_live | — |
| Cyril Johnston Hire | June 18, 2023 | ransomware_live | — |
| Centre Hospitalier Régional de Namur | June 14, 2023 | ransomware_live | — |
| CASTEC Inc | June 11, 2023 | ransomware_live | — |
| Doesburg Components | June 7, 2023 | ransomware_live | — |
← NewerPage 2 of 2
Claim data from ransomware.live and RansomLook (CC BY 4.0).