pysa
First seen July 1, 2020Active309 claimed victims
The claims below are reproduced as posted by pysa on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
Mespinosa is a ransomware which encrypts file using an asymmetric encryption and adds .pysa as file extension. According to dissectingmalware the extension "pysa" is probably derived from the Zanzibari Coin with the same name.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| Danko Emergency Equipment | September 9, 2021 | ransomware_live | — |
| FCS Financial | September 9, 2021 | ransomware_live | — |
| Logansport Community School Corporation | September 9, 2021 | ransomware_live | — |
| Karavan Trailers | September 9, 2021 | ransomware_live | — |
| WPSD Local 6 | September 9, 2021 | ransomware_live | — |
| LJ Hooker Aspley | September 9, 2021 | ransomware_live | — |
| Famous Supply | September 9, 2021 | ransomware_live | — |
| the NET - Northeast Tennessee Media Group | September 9, 2021 | ransomware_live | — |
| Bulley | September 9, 2021 | ransomware_live | — |
| Sarmad Steel | September 9, 2021 | ransomware_live | — |
| Vermont Personal Injury Lawyers | September 9, 2021 | ransomware_live | — |
| Upstate HomeCare | September 9, 2021 | ransomware_live | — |
| The Fashion Group International | September 9, 2021 | ransomware_live | — |
| OHL Judlau | September 9, 2021 | ransomware_live | — |
| Cyclone Steel | September 9, 2021 | ransomware_live | — |
| Geotechnical Consultants Inc. | September 9, 2021 | ransomware_live | — |
| Hyper Microsystems | September 9, 2021 | ransomware_live | — |
| St Bede's College | September 9, 2021 | ransomware_live | — |
| Buffalo Schools | September 9, 2021 | ransomware_live | — |
| Aztec Events | September 9, 2021 | ransomware_live | — |
| Alliance Architecture | September 9, 2021 | ransomware_live | — |
| AFP Elevator | September 9, 2021 | ransomware_live | — |
| Zane State College | September 9, 2021 | ransomware_live | — |
| Commack Fire Department | September 9, 2021 | ransomware_live | — |
| ATC Transportation | September 9, 2021 | ransomware_live | — |
| Zamora | September 9, 2021 | ransomware_live | — |
| Children's Network of Southwest Florida | September 9, 2021 | ransomware_live | — |
| Dayton Door Sales | September 9, 2021 | ransomware_live | — |
| Drug Alcohol Testing and Screening Compliance in Texas | September 9, 2021 | ransomware_live | — |
| Divorce Lawyer in Reading & Douglassville, PA | September 9, 2021 | ransomware_live | — |
| Worldwide Oilfield Machine | September 9, 2021 | ransomware_live | — |
| Affton School District | September 9, 2021 | ransomware_live | — |
| Gering Public Schools | September 9, 2021 | ransomware_live | — |
| Home Grown Grocery Food Supermarket | September 9, 2021 | ransomware_live | — |
| JVSmith Companies | September 9, 2021 | ransomware_live | — |
| Ciruli Brothers | September 9, 2021 | ransomware_live | — |
| Eagle Eye Produce | September 9, 2021 | ransomware_live | — |
| Wiener Laboratorios | September 9, 2021 | ransomware_live | — |
| Legacy Housing Corporation | September 9, 2021 | ransomware_live | — |
| Aireko | September 9, 2021 | ransomware_live | — |
| Grover Corparation | September 9, 2021 | ransomware_live | — |
| Public Restroom Company | September 9, 2021 | ransomware_live | — |
| Marlboro Pediatric Dentistryâ | September 9, 2021 | ransomware_live | — |
| Millersville University | September 9, 2021 | ransomware_live | — |
| Immanuel Lutheran Church and School | September 9, 2021 | ransomware_live | — |
| Modern Data Systems | September 9, 2021 | ransomware_live | — |
| Upstate Home Care | September 9, 2021 | ransomware_live | — |
| Levante UD | September 9, 2021 | ransomware_live | — |
| Dale Operating Company | September 9, 2021 | ransomware_live | — |
| Transam Carriers | September 9, 2021 | ransomware_live | — |
| Bridgeway Inc | September 9, 2021 | ransomware_live | — |
| City of Covington Louisiana | September 9, 2021 | ransomware_live | — |
| Western Flyer Express | September 9, 2021 | ransomware_live | — |
| Forest City Fire Protection | September 9, 2021 | ransomware_live | — |
| Woodholme Gastroenterology Associates | September 9, 2021 | ransomware_live | — |
| Momentum Transportation | September 9, 2021 | ransomware_live | — |
| Florence-Darlington Technical College | September 9, 2021 | ransomware_live | — |
| FirstCash Inc | September 9, 2021 | ransomware_live | — |
| Tenderloin Housing Clinic | September 9, 2021 | ransomware_live | — |
| Paysoft | September 9, 2021 | ransomware_live | — |
| EBSU | September 9, 2021 | ransomware_live | — |
| Repro X-Press | September 9, 2021 | ransomware_live | — |
| BABB Security Systems | September 9, 2021 | ransomware_live | — |
| Ogden Golf & Country Club | September 9, 2021 | ransomware_live | — |
| OnLINE FM | September 9, 2021 | ransomware_live | — |
| A Superior Towing | September 9, 2021 | ransomware_live | — |
| La Châtaigneraie | September 9, 2021 | ransomware_live | — |
| Baldwin Wallace University | September 9, 2021 | ransomware_live | — |
| Blackhawk Mining | September 9, 2021 | ransomware_live | — |
| Zionsville Community Schools | September 9, 2021 | ransomware_live | — |
| IDS Online Store | September 9, 2021 | ransomware_live | — |
| Dallas Production | September 9, 2021 | ransomware_live | — |
| D.W. Haber & Son | September 9, 2021 | ransomware_live | — |
| Esteyco | September 9, 2021 | ransomware_live | — |
| American Industrial Felt & Supply, Inc | September 9, 2021 | ransomware_live | — |
| ProSource Wholesale | September 9, 2021 | ransomware_live | — |
| Lo Studio Bartoli & Arveda | September 9, 2021 | ransomware_live | — |
| Prefeitura de Balneário Camboriú | September 9, 2021 | ransomware_live | — |
| Syracuse New Times | September 9, 2021 | ransomware_live | — |
| Siesacloud | September 9, 2021 | ransomware_live | — |
| Plantaciones de Plátano | September 9, 2021 | ransomware_live | — |
| Grant Supplies | September 9, 2021 | ransomware_live | — |
| Viport | September 9, 2021 | ransomware_live | — |
| Powerblanket | September 9, 2021 | ransomware_live | — |
| Brain:IT | September 9, 2021 | ransomware_live | — |
| Fairfax University of America | September 9, 2021 | ransomware_live | — |
| Doak Shirreff Lawyers | September 9, 2021 | ransomware_live | — |
| Grand Annecy Agglomeration | September 9, 2021 | ransomware_live | — |
| Cleveland Institute of Music | September 9, 2021 | ransomware_live | — |
| Tucker Oil Company Inc. | September 9, 2021 | ransomware_live | — |
| Wolf Lake Industrial Center and Terminals | September 9, 2021 | ransomware_live | — |
| Implanta Spa | September 9, 2021 | ransomware_live | — |
| Peters Bosel Lawyers | September 9, 2021 | ransomware_live | — |
| Little Elm | September 9, 2021 | ransomware_live | — |
| Flamingo Horticulture | September 9, 2021 | ransomware_live | — |
| Prairie View A&M University | September 9, 2021 | ransomware_live | — |
| Intecs group | September 9, 2021 | ransomware_live | — |
| Wisconsin Public Radio | September 9, 2021 | ransomware_live | — |
| Jebco Agencies Inc. | September 9, 2021 | ransomware_live | — |
| Romanoff Group | September 9, 2021 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).