pysa
First seen July 1, 2020Active309 claimed victims
The claims below are reproduced as posted by pysa on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
Mespinosa is a ransomware which encrypts file using an asymmetric encryption and adds .pysa as file extension. According to dissectingmalware the extension "pysa" is probably derived from the Zanzibari Coin with the same name.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| Neenan Company | September 9, 2021 | ransomware_live | — |
| Bridgwater & Taunton College | September 9, 2021 | ransomware_live | — |
| The Bascom | September 9, 2021 | ransomware_live | — |
| Blueknight Energy Partners | September 9, 2021 | ransomware_live | — |
| Ãstre Toten Kommune Voksenopplring | September 9, 2021 | ransomware_live | — |
| The FitzWimark School | September 9, 2021 | ransomware_live | — |
| DFW Communications,Inc. | September 9, 2021 | ransomware_live | — |
| Palos Community Consolidated School District 118 | September 9, 2021 | ransomware_live | — |
| CCS | September 9, 2021 | ransomware_live | — |
| Provenza Floors | September 9, 2021 | ransomware_live | — |
| Salesianum School | September 9, 2021 | ransomware_live | — |
| Brookfield Public Schools | September 9, 2021 | ransomware_live | — |
| Thinkware | September 9, 2021 | ransomware_live | — |
| Nama Khoi Municipality | September 9, 2021 | ransomware_live | — |
| Finance Evolution | September 9, 2021 | ransomware_live | — |
| Brickhaus | September 9, 2021 | ransomware_live | — |
| Summit Appliance | September 9, 2021 | ransomware_live | — |
| King Henrys | September 9, 2021 | ransomware_live | — |
| Outwest Express LLC | September 9, 2021 | ransomware_live | — |
| Serinus Energy Plc | September 9, 2021 | ransomware_live | — |
| Mid-Florida Pathology | September 9, 2021 | ransomware_live | — |
| Max. Aarts | September 9, 2021 | ransomware_live | — |
| Torello Moving Strategies | September 9, 2021 | ransomware_live | — |
| St. Mary School Hyde Park | September 9, 2021 | ransomware_live | — |
| Overlake Obstetricians & Gynecologists,PC | September 9, 2021 | ransomware_live | — |
| McKinney | September 9, 2021 | ransomware_live | — |
| Grupo Infoar | September 9, 2021 | ransomware_live | — |
| Bene Ficencia | September 9, 2021 | ransomware_live | — |
| St. Margaretâs Hospice Care | September 9, 2021 | ransomware_live | — |
| Riggins Company | September 9, 2021 | ransomware_live | — |
| Merchant Taylors' School | September 9, 2021 | ransomware_live | — |
| Dayliff | September 9, 2021 | ransomware_live | — |
| Benchmark Family Services | September 9, 2021 | ransomware_live | — |
| Tech 2000 | September 9, 2021 | ransomware_live | — |
| Mirai | September 9, 2021 | ransomware_live | — |
| Rontis Medical | September 9, 2021 | ransomware_live | — |
| Gemitchellco | September 9, 2021 | ransomware_live | — |
| Affinity Education | September 9, 2021 | ransomware_live | — |
| Mendes Júnior | September 9, 2021 | ransomware_live | — |
| Bruce Turner | September 9, 2021 | ransomware_live | — |
| Roughrider Internation Ltd. | September 9, 2021 | ransomware_live | — |
| Market Pioneer | September 9, 2021 | ransomware_live | — |
| Ayuntamiento de Guadarrama | September 9, 2021 | ransomware_live | — |
| Telhai | September 9, 2021 | ransomware_live | — |
| CWF Group Inc. | September 9, 2021 | ransomware_live | — |
| Mongoldford | September 9, 2021 | ransomware_live | — |
| Avelia | September 9, 2021 | ransomware_live | — |
| Econocom | September 9, 2021 | ransomware_live | — |
| Bakers S.A. Limited | September 9, 2021 | ransomware_live | — |
| IQA | September 9, 2021 | ransomware_live | — |
| Winters Independent School District | September 9, 2021 | ransomware_live | — |
| Heartland | September 9, 2021 | ransomware_live | — |
| ASE Bucuresti | September 9, 2021 | ransomware_live | — |
| Rafaela Alimentos | September 9, 2021 | ransomware_live | — |
| CASES | September 9, 2021 | ransomware_live | — |
| Irish Farmers Journals | September 9, 2021 | ransomware_live | — |
| Kuenne Gruppe | September 9, 2021 | ransomware_live | — |
| West Central Foodservice | September 9, 2021 | ransomware_live | — |
| Tor Vergata | September 9, 2021 | ransomware_live | — |
| UCEL | September 9, 2021 | ransomware_live | — |
| Myerscough College | September 9, 2021 | ransomware_live | — |
| MK Products | September 9, 2021 | ransomware_live | — |
| Bosley | September 9, 2021 | ransomware_live | — |
| ACE Glass | September 9, 2021 | ransomware_live | — |
| The Teka Group | September 9, 2021 | ransomware_live | — |
| Grand Homes | September 9, 2021 | ransomware_live | — |
| Assured Imaging | September 9, 2021 | ransomware_live | — |
| Uxbridge College | September 9, 2021 | ransomware_live | — |
| The Seifert Logistics Group | September 9, 2021 | ransomware_live | — |
| Upper Columbia Academy | September 9, 2021 | ransomware_live | — |
| Dublin | September 9, 2021 | ransomware_live | — |
| The CFC | September 9, 2021 | ransomware_live | — |
| Lindenwold | September 9, 2021 | ransomware_live | — |
| The Sixth Form Bolton | September 9, 2021 | ransomware_live | — |
| The Dantherm Group | September 9, 2021 | ransomware_live | — |
| Monty Holding Group | September 9, 2021 | ransomware_live | — |
| Illinois Valley Community College | September 9, 2021 | ransomware_live | — |
| Wichita Sheet Metal | September 9, 2021 | ransomware_live | — |
| Alliance Building Services | September 9, 2021 | ransomware_live | — |
| Marseille Provence | September 9, 2021 | ransomware_live | — |
| John Hardy | September 9, 2021 | ransomware_live | — |
| WHSE | September 9, 2021 | ransomware_live | — |
| MCLINC | September 9, 2021 | ransomware_live | — |
| Piedmont Orthopedics | OrthoAtlanta | September 9, 2021 | ransomware_live | — |
| Q3 Academy | September 9, 2021 | ransomware_live | — |
| The Masonic Home of Florida | September 9, 2021 | ransomware_live | — |
| Groupe Lefebvre M.R.P. | September 9, 2021 | ransomware_live | — |
| Cretsenbelledonne | September 9, 2021 | ransomware_live | — |
| Grupocif | September 9, 2021 | ransomware_live | — |
| Noorulislam | September 9, 2021 | ransomware_live | — |
| Ribasalvarez | September 9, 2021 | ransomware_live | — |
| HAC | September 9, 2021 | ransomware_live | — |
| Aebel | September 9, 2021 | ransomware_live | — |
| CDPO | September 9, 2021 | ransomware_live | — |
| Pjfitzpatrick | September 9, 2021 | ransomware_live | — |
| Saludladera | September 9, 2021 | ransomware_live | — |
| Famisanar | September 9, 2021 | ransomware_live | — |
| Poliview | September 9, 2021 | ransomware_live | — |
| Oliviers | September 9, 2021 | ransomware_live | — |
| Matthews | September 9, 2021 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).