quantum
First seen September 9, 2021Active68 claimed victims
The claims below are reproduced as posted by quantum on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
Quantum ransomware, active from mid-2021 through 2022, was a rebrand of the MountLocker/AstroLocker/XingLocker lineage that operated as RaaS, known for extremely fast attack timelines (under four hours from initial access to encryption) and ransom demands ranging from $150,000 to multi-million dollars.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| AHT Wisconsin Windows | December 9, 2022 | ransomware_live | — |
| Pilenpak | December 9, 2022 | ransomware_live | — |
| Acquarius Trust Group | December 9, 2022 | ransomware_live | — |
| Orotex | December 9, 2022 | ransomware_live | — |
| Radical Sportscars | December 9, 2022 | ransomware_live | — |
| ChemiFlex | December 9, 2022 | ransomware_live | — |
| Midland Cogeneration Venture | November 13, 2022 | ransomware_live | — |
| MCV Holding Company LLC | November 2, 2022 | ransomware_live | — |
| Midland Cogeneration Venture, Michigan | November 1, 2022 | ransomware_live | — |
| Lightbank | October 23, 2022 | ransomware_live | — |
| Rosenblatt Securities | October 19, 2022 | ransomware_live | — |
| Instituto Agrario Dominicano | September 2, 2022 | ransomware_live | — |
| Moscone Center | September 1, 2022 | ransomware_live | — |
| Moskowitz, Mandell & Salim, P.A. | August 23, 2022 | ransomware_live | — |
| Shaw & Slavsky | August 19, 2022 | ransomware_live | — |
| Freyr Solutions | August 8, 2022 | ransomware_live | — |
| BEESENSE | August 4, 2022 | ransomware_live | — |
| Liftow LTD | August 4, 2022 | ransomware_live | — |
| Autohaus | July 19, 2022 | ransomware_live | — |
| Delon Hampton & Associates, Chartered | July 19, 2022 | ransomware_live | — |
| Broshuis | Driving innovation | July 18, 2022 | ransomware_live | — |
| ZEUS Scientific | July 14, 2022 | ransomware_live | — |
| American International Industries | July 12, 2022 | ransomware_live | — |
| Crupi Group | June 30, 2022 | ransomware_live | — |
| Avante Health Solutions | June 29, 2022 | ransomware_live | — |
| RG Alliance Group | June 16, 2022 | ransomware_live | — |
| Medlab Pathology | June 14, 2022 | ransomware_live | — |
| M. Green and Company LLP | June 14, 2022 | ransomware_live | — |
| YMCA | June 14, 2022 | ransomware_live | — |
| Shred Station | June 14, 2022 | ransomware_live | — |
| Florida Department of Veterans' Affairs | May 27, 2022 | ransomware_live | — |
| Eurocept | May 23, 2022 | ransomware_live | — |
| Transsion Holdings | May 23, 2022 | ransomware_live | — |
| Active Communications International | May 23, 2022 | ransomware_live | — |
| InnPower | May 17, 2022 | ransomware_live | — |
| Hirsch Watch Straps & Accessories | May 17, 2022 | ransomware_live | — |
| Tex-Isle Supply | May 17, 2022 | ransomware_live | — |
| Henry | April 29, 2022 | ransomware_live | — |
| Petro Serve | April 29, 2022 | ransomware_live | — |
| Drive Products | April 29, 2022 | ransomware_live | — |
| Grosvenor Engineering Group | April 29, 2022 | ransomware_live | — |
| Hufcor | April 29, 2022 | ransomware_live | — |
| Valley Rentals | April 29, 2022 | ransomware_live | — |
| Tehama County Social Services | April 28, 2022 | ransomware_live | — |
| Elgin County | April 27, 2022 | ransomware_live | — |
| Confcommercio - Alessandria - Home | April 26, 2022 | ransomware_live | — |
| Camden City School District | April 20, 2022 | ransomware_live | — |
| Service Employees' International Union | April 12, 2022 | ransomware_live | — |
| Hi Tech HoneyComb | April 12, 2022 | ransomware_live | — |
| JetStar | April 12, 2022 | ransomware_live | — |
| Wolfe Industrial | April 11, 2022 | ransomware_live | — |
| Broadleaf | April 11, 2022 | ransomware_live | — |
| InfoTek Consulting Services | February 28, 2022 | ransomware_live | — |
| Jazeera Airways | February 9, 2022 | ransomware_live | — |
| Altoona Area School District | February 2, 2022 | ransomware_live | — |
| Lewis & Clark College | January 13, 2022 | ransomware_live | — |
| Chattanooga Chamber of Commerce | December 31, 2021 | ransomware_live | — |
| Sodiba | December 23, 2021 | ransomware_live | — |
| Biotique | December 23, 2021 | ransomware_live | — |
| The Jewelry Exchange is the Nations #1 Diamond Store. | December 9, 2021 | ransomware_live | — |
| Digital Workplace Services & Solutions | December 9, 2021 | ransomware_live | — |
| Zepter | December 9, 2021 | ransomware_live | — |
| PRIDE Community Services | December 9, 2021 | ransomware_live | — |
| UABL S.A. | November 30, 2021 | ransomware_live | — |
| </a> | November 22, 2021 | ransomware_live | — |
| PVR Ltd. | November 4, 2021 | ransomware_live | — |
| TILIA GROUP | November 4, 2021 | ransomware_live | — |
| Maple Lodge Farms | September 9, 2021 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).