pysa
First seen July 1, 2020Active309 claimed victims
The claims below are reproduced as posted by pysa on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
Mespinosa is a ransomware which encrypts file using an asymmetric encryption and adds .pysa as file extension. According to dissectingmalware the extension "pysa" is probably derived from the Zanzibari Coin with the same name.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| ΤÎΧÎÎÎÎÎÎÎÎ Î ÎÎÎÎ ÎΣΤÎÎÎÎ ÎΥΠΡÎÎ¥ | September 20, 2022 | ransomware_live | — |
| CHR Solutions | December 6, 2021 | ransomware_live | — |
| Universitat Autònoma de Barcelona | November 8, 2021 | ransomware_live | — |
| Ferrara | November 8, 2021 | ransomware_live | — |
| City of Bridgeport, WV | November 8, 2021 | ransomware_live | — |
| Diputación de Segovia | November 8, 2021 | ransomware_live | — |
| ProActive Works | November 8, 2021 | ransomware_live | — |
| Family Dentist Newbury | November 8, 2021 | ransomware_live | — |
| Florida Heart Associates | November 8, 2021 | ransomware_live | — |
| Metaenergia | November 8, 2021 | ransomware_live | — |
| Raj Transport Inc. | November 8, 2021 | ransomware_live | — |
| Thunderbird Adventist Academy | November 8, 2021 | ransomware_live | — |
| Astera Software | November 8, 2021 | ransomware_live | — |
| Jalasoft | November 8, 2021 | ransomware_live | — |
| AECOM | November 8, 2021 | ransomware_live | — |
| Vision Source | November 8, 2021 | ransomware_live | — |
| Community Brands | November 8, 2021 | ransomware_live | — |
| Family Dental Health | November 8, 2021 | ransomware_live | — |
| Alternatives, Inc. | November 8, 2021 | ransomware_live | — |
| Bryant Industrial Services | November 8, 2021 | ransomware_live | — |
| Capitol Beauty School | November 8, 2021 | ransomware_live | — |
| MPRL E&P | November 8, 2021 | ransomware_live | — |
| Department of Justice and Constitutional Development | November 8, 2021 | ransomware_live | — |
| Niemi Bil i LuleÃ¥ | November 8, 2021 | ransomware_live | — |
| Emi Jay | November 8, 2021 | ransomware_live | — |
| Pitts Baptist Church | November 8, 2021 | ransomware_live | — |
| Gulfport MS | November 8, 2021 | ransomware_live | — |
| La Bodega | November 8, 2021 | ransomware_live | — |
| Comstock Johnson Architects | November 8, 2021 | ransomware_live | — |
| EHS | November 8, 2021 | ransomware_live | — |
| MVS Mailers | November 8, 2021 | ransomware_live | — |
| Garner Dental Group | November 8, 2021 | ransomware_live | — |
| Property Damage Restoration | November 8, 2021 | ransomware_live | — |
| Westvale Primary School | November 8, 2021 | ransomware_live | — |
| Hickory Veterinary Hospital | November 8, 2021 | ransomware_live | — |
| Lucton School | November 8, 2021 | ransomware_live | — |
| SWL | November 8, 2021 | ransomware_live | — |
| ΤÎΧÎÎÎÎÎÎÎÎ Î ÎÎÎÎ ÎΣΤÎÎÎÎ ÎΥΠΡÎÎ¥ | November 8, 2021 | ransomware_live | — |
| Eason Horticultural Resources | November 8, 2021 | ransomware_live | — |
| The Leschaco Group | November 8, 2021 | ransomware_live | — |
| Nordic Pharma | November 8, 2021 | ransomware_live | — |
| Rockbridge and Bath County | November 8, 2021 | ransomware_live | — |
| Dr Schneider | November 8, 2021 | ransomware_live | — |
| Stratford Land | November 8, 2021 | ransomware_live | — |
| Schmincke Künstlerfarben | November 8, 2021 | ransomware_live | — |
| Premier Energy | November 8, 2021 | ransomware_live | — |
| Emkay Food Sales | November 8, 2021 | ransomware_live | — |
| Woodchurch High School | November 8, 2021 | ransomware_live | — |
| Westmont Helena | November 8, 2021 | ransomware_live | — |
| CarpenterProjects | November 8, 2021 | ransomware_live | — |
| Las Vegas Cancer Center | November 8, 2021 | ransomware_live | — |
| Fly Arik Air | November 8, 2021 | ransomware_live | — |
| Bayonet | November 8, 2021 | ransomware_live | — |
| itimCloud | November 8, 2021 | ransomware_live | — |
| CHRYSO | November 8, 2021 | ransomware_live | — |
| Skatetown | November 8, 2021 | ransomware_live | — |
| UEMOA | November 8, 2021 | ransomware_live | — |
| R.E. Pedrotti Co. | November 8, 2021 | ransomware_live | — |
| Rusty Hardin & Associates | November 8, 2021 | ransomware_live | — |
| Kent County Council | November 8, 2021 | ransomware_live | — |
| The Skinners Kent Academy | November 8, 2021 | ransomware_live | — |
| Motor Appliance Corporation | October 25, 2021 | ransomware_live | — |
| Suntide Commercial Realty | October 25, 2021 | ransomware_live | — |
| Cenikor | October 25, 2021 | ransomware_live | — |
| Höerskool Labori Paarl | October 25, 2021 | ransomware_live | — |
| Weiss Properties | October 22, 2021 | ransomware_live | — |
| Ruskin Community High School | October 22, 2021 | ransomware_live | — |
| Townley Grammar School | October 22, 2021 | ransomware_live | — |
| Hall Technologies Inc | October 18, 2021 | ransomware_live | — |
| InfoSync IT Solutions | October 18, 2021 | ransomware_live | — |
| CreateInfor | October 18, 2021 | ransomware_live | — |
| Campus Sacre Coeur Wien Gymnasium | October 18, 2021 | ransomware_live | — |
| Price Davis LLC | October 18, 2021 | ransomware_live | — |
| QPharma | October 18, 2021 | ransomware_live | — |
| Western Urethane | October 18, 2021 | ransomware_live | — |
| Our Lady's Abingdon | October 18, 2021 | ransomware_live | — |
| Lesk Engineering | October 18, 2021 | ransomware_live | — |
| Ocean View Nursing & Rehabilitation | October 4, 2021 | ransomware_live | — |
| Associated Solutions | October 4, 2021 | ransomware_live | — |
| HMCC | October 4, 2021 | ransomware_live | — |
| Adore Fashions | October 4, 2021 | ransomware_live | — |
| Jurysync | October 4, 2021 | ransomware_live | — |
| St Benet Biscop | October 4, 2021 | ransomware_live | — |
| ITS, Inc. | October 4, 2021 | ransomware_live | — |
| Ardagh Group | October 4, 2021 | ransomware_live | — |
| Instituto Mixto de Ayuda Social | October 4, 2021 | ransomware_live | — |
| Santélys | October 4, 2021 | ransomware_live | — |
| Consolidated High School District 230 | October 4, 2021 | ransomware_live | — |
| HABI | September 13, 2021 | ransomware_live | — |
| Woodlake Unified | September 13, 2021 | ransomware_live | — |
| Haverhill High School | September 13, 2021 | ransomware_live | — |
| Spartanburg & Pelham OB-GYN | September 13, 2021 | ransomware_live | — |
| Grupo SAN | September 13, 2021 | ransomware_live | — |
| Jesse Engineering Co | September 13, 2021 | ransomware_live | — |
| One Community Health | September 13, 2021 | ransomware_live | — |
| Betson Enterprises | September 13, 2021 | ransomware_live | — |
| Drug Alcohol Testing | September 10, 2021 | ransomware_live | — |
| My Cloud Star | September 9, 2021 | ransomware_live | — |
| HPW | September 9, 2021 | ransomware_live | — |
| HVAC Facility & Plant Maintenance Tools | September 9, 2021 | ransomware_live | — |
Page 1 of 4Older →
Claim data from ransomware.live and RansomLook (CC BY 4.0).