payoutsking
Also known as: Payouts KingFirst seen July 7, 2025Active112 claimed victims
The claims below are reproduced as posted by payoutsking on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
PayoutsKing is an active ransomware group observed through at least 2026 that has claimed attacks against a wide range of industries internationally — including Del Monte Foods and V. FRAAS — across the US, UK, Germany, and Ireland using standard double-extortion tactics.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| Institute of Culinary Education | May 28, 2025 | ransomware_live | — |
| Silent Gliss Italia | May 26, 2025 | ransomware_live | — |
| LTL | May 21, 2025 | ransomware_live | — |
| MEDIALAB | May 15, 2025 | ransomware_live | — |
| Crenshaw Community Hospital | May 13, 2025 | ransomware_live | — |
| EvoluPharm | May 12, 2025 | ransomware_live | — |
| Belmont Engineered Plastics | May 7, 2025 | ransomware_live | — |
| CR Architecture + Design | May 5, 2025 | ransomware_live | — |
| Arch-Con Corporation | May 1, 2025 | ransomware_live | — |
| Gateway Community | April 28, 2025 | ransomware_live | — |
| Rhea Vendors Group SpA | April 24, 2025 | ransomware_live | — |
| BARIATRIX NUTRITION | April 17, 2025 | ransomware_live | — |
← NewerPage 2 of 2
Claim data from ransomware.live and RansomLook (CC BY 4.0).