ransomed
First seen August 21, 2023Active68 claimed victims
The claims below are reproduced as posted by ransomed on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
RansomedVC was a short-lived extortion group active from August to November 2023 that claimed high-profile victims including Sony, innovating by threatening GDPR regulatory fines as an additional extortion lever; it briefly operated as a RaaS before shutting down in an apparent exit scam following reported arrests of six members.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| RANSOMEDVC is for sale | October 30, 2023 | ransomware_live | — |
| Ransomedvc Launches A forum | October 22, 2023 | ransomware_live | — |
| We Hire Pentesters(5BTC Payout) | October 20, 2023 | ransomware_live | — |
| Rob Lee Evidence : Sneak Peek | October 16, 2023 | ransomware_live | — |
| RE : Clarification | October 16, 2023 | ransomware_live | — |
| Ransomedvc Pentest Services! | October 16, 2023 | ransomware_live | — |
| webpag.com.br database leaked | October 15, 2023 | ransomware_live | — |
| Accenture Breach Evidence & Debunking Rob Lee’s Lies | October 15, 2023 | ransomware_live | — |
| Colonial Pipeline Company | October 15, 2023 | ransomware_live | — |
| NEW TWITTER | October 13, 2023 | ransomware_live | — |
| Fuck Palestine! We buy your access!! | October 13, 2023 | ransomware_live | — |
| iLife.bg | October 13, 2023 | ransomware_live | — |
| pilini.bg Database, Download Now! | October 13, 2023 | ransomware_live | — |
| I&G Brokers Database, Download Now | October 13, 2023 | ransomware_live | — |
| Kasida.bg Database Leaked, Download | October 13, 2023 | ransomware_live | — |
| rodoviariaonline.com.br | October 13, 2023 | ransomware_live | — |
| webpag.com.br | October 13, 2023 | ransomware_live | — |
| novoingresso.com.br | October 13, 2023 | ransomware_live | — |
| Baumit Bulgaria | October 13, 2023 | ransomware_live | — |
| Optimity UK | October 13, 2023 | ransomware_live | — |
| Metroclub.org | October 13, 2023 | ransomware_live | — |
| Partnership With Breachforums | October 7, 2023 | ransomware_live | — |
| DallBogg Breach | October 7, 2023 | ransomware_live | — |
| (SALE) District Of Columbia Elections 600k lines VOTERS DATA | October 5, 2023 | ransomware_live | — |
| NTT Docomo | October 4, 2023 | ransomware_live | — |
| NTT Docomo - Japan 1st Mobile Operator | September 26, 2023 | ransomware_live | — |
| SONY.COM | September 26, 2023 | ransomware_live | — |
| bnm.bg | September 26, 2023 | ransomware_live | — |
| Punto.bg | September 26, 2023 | ransomware_live | — |
| footshop.bg | September 26, 2023 | ransomware_live | — |
| districtshoes.bg | September 26, 2023 | ransomware_live | — |
| ecco.bg | September 26, 2023 | ransomware_live | — |
| myshoes.bg | September 25, 2023 | ransomware_live | — |
| ardes.bg | September 25, 2023 | ransomware_live | — |
| andrews.bg | September 25, 2023 | ransomware_live | — |
| popolo.bg | September 25, 2023 | ransomware_live | — |
| ebag.bg | September 25, 2023 | ransomware_live | — |
| mango.bg | September 25, 2023 | ransomware_live | — |
| gov.la | September 16, 2023 | ransomware_live | — |
| proxy-sale.com | September 9, 2023 | ransomware_live | — |
| kasida.bg | September 9, 2023 | ransomware_live | — |
| pilini.bg | September 9, 2023 | ransomware_live | — |
| airelec.bg | September 9, 2023 | ransomware_live | — |
| Linktera | September 8, 2023 | ransomware_live | — |
| Balmit Bulgaria | September 4, 2023 | ransomware_live | — |
| Swipe.bg | September 4, 2023 | ransomware_live | — |
| wantager.com | September 4, 2023 | ransomware_live | — |
| nucleus.live | September 4, 2023 | ransomware_live | — |
| makflix.eu | September 4, 2023 | ransomware_live | — |
| medcenter-tambov.ru | September 4, 2023 | ransomware_live | — |
| laasr.eu | September 4, 2023 | ransomware_live | — |
| quantinuum.com | September 4, 2023 | ransomware_live | — |
| easydentalcare.us | September 4, 2023 | ransomware_live | — |
| SKF.com | September 3, 2023 | ransomware_live | — |
| paynesvilleareainsurance.com | September 3, 2023 | ransomware_live | — |
| phms.com.au | September 3, 2023 | ransomware_live | — |
| Hawaii Health System | September 1, 2023 | ransomware_live | — |
| Powersports Marketing | August 31, 2023 | ransomware_live | — |
| S&P | August 31, 2023 | ransomware_live | — |
| MetroCLub DC | August 31, 2023 | ransomware_live | — |
| PSM | August 28, 2023 | ransomware_live | — |
| Metropolitan Club DC | August 27, 2023 | ransomware_live | — |
| State Farm | August 26, 2023 | ransomware_live | — |
| Optimity.co.uk | August 23, 2023 | ransomware_live | — |
| Jhooker | August 23, 2023 | ransomware_live | — |
| Transunion | August 23, 2023 | ransomware_live | — |
| A1 | August 21, 2023 | ransomware_live | — |
| I&G Brokers | August 21, 2023 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).