ragnarlocker
First seen April 1, 2020Active128 claimed victims
The claims below are reproduced as posted by ragnarlocker on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
Ragnar Locker was an elite ransomware group active from December 2019 to October 2023 that targeted large enterprises and critical infrastructure — including Capcom and Campari — claiming at least 168 victims before being taken down by a Europol-led international law enforcement operation in October 2023.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| Eicon Controle Inteligentes | October 11, 2023 | ransomware_live | — |
| Scotbeef Ltd. - Leaks | October 11, 2023 | ransomware_live | — |
| International Presence Ltd - Leaked | October 6, 2023 | ransomware_live | — |
| Learning Partnership West - Leaked | October 5, 2023 | ransomware_live | — |
| Groupe Fructa Partner - Leaked | October 3, 2023 | ransomware_live | — |
| Astre - Leaked | September 30, 2023 | ransomware_live | — |
| Network Pacific Real Estate - Leak | September 30, 2023 | ransomware_live | — |
| Stratesys Full data leak | September 25, 2023 | ransomware_live | — |
| Retail House - Full Leak | September 22, 2023 | ransomware_live | — |
| Announcement: Skatax Accounting company going to be leaked | September 22, 2023 | ransomware_live | — |
| Announcement: COMECA Group going to be Leaked | September 22, 2023 | ransomware_live | — |
| Announcement: Stratesys solutions going to b | September 21, 2023 | ransomware_live | — |
| Announcement: Stratesys solutions going to be leaked | September 21, 2023 | ransomware_live | — |
| Announcement: Groupe Fructa Partner will be leaked soon | September 19, 2023 | ransomware_live | — |
| Announcement: Retail House going to be LEAKED | September 17, 2023 | ransomware_live | — |
| CITIZEN company LEAKED | September 17, 2023 | ransomware_live | — |
| Updates: Israel "MYMC" | September 15, 2023 | ransomware_live | — |
| Israel Medical Center - leaked | September 6, 2023 | ransomware_live | — |
| DOIT - Canadian IT company allowed leak of its own clients. | September 2, 2023 | ransomware_live | — |
| Batesville didn't react on appeal and allows Full Leak | August 8, 2023 | ransomware_live | — |
| Batesville Tool & Die, Inc will be leaked in 3 Days | July 31, 2023 | ransomware_live | — |
| Belize Electricity Limited - Leaked | July 10, 2023 | ransomware_live | — |
| Portugal Scotturb Data Leaked | July 5, 2023 | ransomware_live | — |
| Australian Universal Crane Leak | May 28, 2023 | ransomware_live | — |
| Autlan Metallorum, Mexican Miner Leak | May 18, 2023 | ransomware_live | — |
| CANTALK, Canadian translation services - Leak | April 25, 2023 | ransomware_live | — |
| Public Appeal to the CANTALK management | March 29, 2023 | ransomware_live | — |
| Temporary Leak Page #0013995NTa | March 10, 2023 | ransomware_live | — |
| New Leak in lawyers company. | March 3, 2023 | ransomware_live | — |
| New Leak in lawyers company AASP. | March 3, 2023 | ransomware_live | — |
| AASP claim there was no data leakage! | February 22, 2023 | ransomware_live | — |
| Hundred thousands of personal data, leak preview | December 28, 2022 | ransomware_live | — |
| Serena Hotels - Leaked | December 20, 2022 | ransomware_live | — |
| Wrapex Industrial - Leaked | December 20, 2022 | ransomware_live | — |
| ITONCLOUD - LEAKED | December 13, 2022 | ransomware_live | — |
| Essent company - Leaked | November 25, 2022 | ransomware_live | — |
| Leak Announcement - IT company ITonCLOUD | November 22, 2022 | ransomware_live | — |
| Belgium company Zwijndrecht - Leaked | November 16, 2022 | ransomware_live | — |
| DURAVIT A.G. - Announcement before publishing data | October 27, 2022 | ransomware_live | — |
| Dollmar SpA - Leaked | October 19, 2022 | ransomware_live | — |
| DIPF-INTERN - Leaked | October 18, 2022 | ransomware_live | — |
| Fashion company ZIGI NY - Leaked | October 13, 2022 | ransomware_live | — |
| TANG CAPITAL LEAKED | October 10, 2022 | ransomware_live | — |
| DMCI Holding Leaked | October 10, 2022 | ransomware_live | — |
| Avalon luxury transport company - Leaked | October 5, 2022 | ransomware_live | — |
| Malayan Flour Mills Bhd. Data Leak | October 3, 2022 | ransomware_live | — |
| AudioQuest Data Leaked | October 3, 2022 | ransomware_live | — |
| TAP Air Leak of more than 1.5 million of customers and many other. | September 19, 2022 | ransomware_live | — |
| Who is the real Bad Guys here? Or what recovery experts prefer to keep silent. | September 19, 2022 | ransomware_live | — |
| TAP AIR PORTUGAL - 115k personal data leak | September 12, 2022 | ransomware_live | — |
| DDoS instead of the Discuss - Nice try TAP Air | September 7, 2022 | ransomware_live | — |
| TAP Air - First Facts | September 2, 2022 | ransomware_live | — |
| Huge drama for Tap Air Portugal | August 31, 2022 | ransomware_live | — |
| USA Insurance company - Smith brothers File tree and some proofs | August 31, 2022 | ransomware_live | — |
| DESFA - Pipeline company LEAK | August 23, 2022 | ransomware_live | — |
| Announcement. Action Lab File-tree | August 23, 2022 | ransomware_live | — |
| Greece pipeline company breached - DESFA | August 19, 2022 | ransomware_live | — |
| File-tree of Tang Capital | August 18, 2022 | ransomware_live | — |
| Puma Biotechnology - decided to allow Leaks | August 2, 2022 | ransomware_live | — |
| GENSCO Inc. - allows Leak | July 19, 2022 | ransomware_live | — |
| Epec.PL - Lied about the absence of Leak | July 13, 2022 | ransomware_live | — |
| New Leak: Prudential LTG. | June 24, 2022 | ransomware_live | — |
| New Leak: Northern Data Systems | June 23, 2022 | ransomware_live | — |
| Sierra Packaging Leaked | June 4, 2022 | ransomware_live | — |
| Jonathan Adler Leaks | June 1, 2022 | ransomware_live | — |
| Germany Corporation "VMT-GmbH" Leaked | May 23, 2022 | ransomware_live | — |
| Simonson-Lumber decided to be Leaked | May 11, 2022 | ransomware_live | — |
| Simonson-Lumber Inc. First batch of Data. | April 20, 2022 | ransomware_live | — |
| International Centre Leaked | April 6, 2022 | ransomware_live | — |
| Smith Transport Full Leak | March 14, 2022 | ransomware_live | — |
| GHI Hornos Industriales Fully Leaked | March 4, 2022 | ransomware_live | — |
| GHI Hornos Industriales first batch of Data (0,1%) | February 28, 2022 | ransomware_live | — |
| Airspan Networks got Leaked | January 25, 2022 | ransomware_live | — |
| IT-companies Subex & Sectrio Leaked | January 8, 2022 | ransomware_live | — |
| Company Group LDLC | December 15, 2021 | ransomware_live | — |
| Leak of IT company Saksoft | December 10, 2021 | ransomware_live | — |
| Full Data Leak Linical | December 9, 2021 | ransomware_live | — |
| Update: Linicals Data | December 4, 2021 | ransomware_live | — |
| Groupe LDLC is going to be Leaked | December 2, 2021 | ransomware_live | — |
| Team Computers Ltd. - Leak | November 23, 2021 | ransomware_live | — |
| LINICAL doesn't care about digital hygiene | October 30, 2021 | ransomware_live | — |
| Atlas Financial Holdings, Inc. - Leaked | October 6, 2021 | ransomware_live | — |
| FULL DATA LEAK of Primary Residential Mortgage, Inc. // | September 14, 2021 | ransomware_live | — |
| Primary Residential Mortgage inc. - Leaked | September 11, 2021 | ransomware_live | — |
| Who is the real Bad Guys here? Or what recovery experts prefer to keep silent. | September 9, 2021 | ransomware_live | — |
| Announcement: FTP | July 1, 2021 | ransomware_live | — |
| GATEWAY Property Management | June 23, 2021 | ransomware_live | — |
| Software company Xoriant | June 6, 2021 | ransomware_live | — |
| New Leak GatewayPM | June 5, 2021 | ransomware_live | — |
| NEW Links for ADATA | May 26, 2021 | ransomware_live | — |
| ADATA LEAKED | May 25, 2021 | ransomware_live | — |
| ADATA | May 1, 2021 | ransomware_live | — |
| Webhelp's company - XtraSource | February 8, 2021 | ransomware_live | — |
| Ludwig Pfeiffer Leaked | January 26, 2021 | ransomware_live | — |
| Grupo SADA Leak | December 24, 2020 | ransomware_live | — |
| New Data Leak post from Chemical company | December 23, 2020 | ransomware_live | — |
| Kaye/Bassman International - New "Wall of Shamer" | December 18, 2020 | ransomware_live | — |
| Cornerstone-BB Group Leaked | December 14, 2020 | ransomware_live | — |
| Attention, Dassault Falcon Jet updated | December 13, 2020 | ransomware_live | — |
| Advertising Material: Forest Construction Leaked | December 12, 2020 | ransomware_live | — |
Page 1 of 2Older →
Claim data from ransomware.live and RansomLook (CC BY 4.0).