ragnarlocker
First seen April 1, 2020Active128 claimed victims
The claims below are reproduced as posted by ragnarlocker on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
Ragnar Locker was an elite ransomware group active from December 2019 to October 2023 that targeted large enterprises and critical infrastructure — including Capcom and Campari — claiming at least 168 victims before being taken down by a Europol-led international law enforcement operation in October 2023.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| New "WallofShamer" - East Coast Seafood Inc. | December 10, 2020 | ransomware_live | — |
| Updates with files in EastCoastSeafood Inc. | December 10, 2020 | ransomware_live | — |
| LEAK Post Campari Group | December 10, 2020 | ransomware_live | — |
| Shasun Chemicals & Drugs Ltd. LEAK | December 6, 2020 | ransomware_live | — |
| JMA Energy LEAK | December 5, 2020 | ransomware_live | — |
| New Files For Leak Campari Post | November 30, 2020 | ransomware_live | — |
| Ragnar_Team Announce of Potential "WallofShamer" | November 10, 2020 | ransomware_live | — |
| LEAK Post CAPCOM | November 8, 2020 | ransomware_live | — |
| LEAK post FINSA | November 8, 2020 | ransomware_live | — |
| Official appeal to DASSAULT FALCON JET | November 1, 2020 | ransomware_live | — |
| Campari Group | November 1, 2020 | ransomware_live | — |
| DASSAULT FALCON JET | October 30, 2020 | ransomware_live | — |
| Security breach of CAPCOM network | October 20, 2020 | ransomware_live | — |
| Security breach of Campari Group network | October 8, 2020 | ransomware_live | — |
| CMA CGM (french carrier, container line) | September 28, 2020 | ransomware_live | — |
| BIOLOGICAL E. Ltd. (BE) LEAK POST | September 27, 2020 | ransomware_live | — |
| Insignia Environmental company. | July 13, 2020 | ransomware_live | — |
| GST Autoleather Company ! | June 22, 2020 | ransomware_live | — |
| Bailey&Galyen Attorney at Law | June 22, 2020 | ransomware_live | — |
| New leaks from SOLTEK PACIFIC | June 22, 2020 | ransomware_live | — |
| Astro Industries, Inc. | June 22, 2020 | ransomware_live | — |
| ST Engineering | June 22, 2020 | ransomware_live | — |
| Leaks from company Omniga GmbH & Co. | June 19, 2020 | ransomware_live | — |
| Leaks from company EDP Group | June 19, 2020 | ransomware_live | — |
| Brunner Announce – Hello World ! | June 11, 2020 | ransomware_live | — |
| Leakage from company Catania, Mahon & Rider, PLLC | June 11, 2020 | ransomware_live | — |
| Leaks Company Birch Communications inc. | June 10, 2020 | ransomware_live | — |
| Energias de Portugal (EDP) | April 1, 2020 | ransomware_live | — |
← NewerPage 2 of 2
Claim data from ransomware.live and RansomLook (CC BY 4.0).