raworld
Also known as: ragroupFirst seen May 6, 2023Active125 claimed victims
The claims below are reproduced as posted by raworld on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
RA Group, also known as RA World, first surfaced in April 2023, utilizing a custom variant of the Babuk ransomware.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| Ire-Omba SpA | December 28, 2024 | ransomware_live | — |
| STEG Stadtentwicklung | December 28, 2024 | ransomware_live | — |
| Watertown Public Schools | December 28, 2024 | ransomware_live | — |
| ST****ng | December 22, 2024 | ransomware_live | — |
| Wa****ls | December 22, 2024 | ransomware_live | — |
| NE****IT | December 22, 2024 | ransomware_live | — |
| Ri****uk | December 22, 2024 | ransomware_live | — |
| De****ep | December 22, 2024 | ransomware_live | — |
| Gr****up | December 22, 2024 | ransomware_live | — |
| Compass Communications | December 11, 2024 | ransomware_live | — |
| Co****ns | December 4, 2024 | ransomware_live | — |
| NTrust | December 4, 2024 | ransomware_live | — |
| NT****st | December 2, 2024 | ransomware_live | — |
| Me****or | November 27, 2024 | ransomware_live | — |
| Lu****ng | November 27, 2024 | ransomware_live | — |
| Ventana Micro Systems | November 27, 2024 | ransomware_live | — |
| Contrack Facilities Management | November 27, 2024 | ransomware_live | — |
| Co****nt | November 25, 2024 | ransomware_live | — |
| Gulf Energy Maritime | November 23, 2024 | ransomware_live | — |
| Gu****me | November 17, 2024 | ransomware_live | — |
| Ge****og | November 17, 2024 | ransomware_live | — |
| SK Gas | November 12, 2024 | ransomware_live | — |
| Orange County Pathology Medical Group | November 12, 2024 | ransomware_live | — |
| BULLONERIE GALVIT | October 31, 2024 | ransomware_live | — |
| BU****IT | October 27, 2024 | ransomware_live | — |
| TR****GB | October 26, 2024 | ransomware_live | — |
| Matouk Bassiouny | October 25, 2024 | ransomware_live | — |
| Digital Engineering | October 24, 2024 | ransomware_live | — |
| P+B Team Aircargo | October 23, 2024 | ransomware_live | — |
| Prince Pipes | October 23, 2024 | ransomware_live | — |
| PB**ce | October 20, 2024 | ransomware_live | — |
| Di**ng | October 20, 2024 | ransomware_live | — |
| Pr****es | October 20, 2024 | ransomware_live | — |
| Ma****ny | August 4, 2024 | ransomware_live | — |
| Ascent Group | July 28, 2024 | ransomware_live | — |
| As****fs | July 24, 2024 | ransomware_live | — |
| Melchers Singapore | July 24, 2024 | ransomware_live | — |
| TheLutheranFoundation | July 24, 2024 | ransomware_live | — |
| Kusum Group of Companies | July 24, 2024 | ransomware_live | — |
| Po**** | May 2, 2024 | ransomware_live | — |
| Me****ng | May 2, 2024 | ransomware_live | — |
| Gr****en | May 2, 2024 | ransomware_live | — |
| Reederei Jüngerhans | May 2, 2024 | ransomware_live | — |
| GWF Frankenwein | May 2, 2024 | ransomware_live | — |
| Mainwein | April 24, 2024 | ransomware_live | — |
| La****up | April 22, 2024 | ransomware_live | — |
| Ma****in | April 22, 2024 | ransomware_live | — |
| charlesparsons (Attack again) | April 22, 2024 | ransomware_live | — |
| Po****sa | April 16, 2024 | ransomware_live | — |
| charlesparsons | April 16, 2024 | ransomware_live | — |
| Autoglass | April 16, 2024 | ransomware_live | — |
| UnivationTechnologies | April 16, 2024 | ransomware_live | — |
| Se****bH | April 12, 2024 | ransomware_live | — |
| Al****ch | April 12, 2024 | ransomware_live | — |
| Un****es | April 12, 2024 | ransomware_live | — |
| Victor Fauconnier | April 12, 2024 | ransomware_live | — |
| Gimex | April 12, 2024 | ransomware_live | — |
| Innomotive Systems Hainichen GmbH | April 3, 2024 | ransomware_live | — |
| Gi****ex | April 3, 2024 | ransomware_live | — |
| TUBEX Aluminium Tubes | April 2, 2024 | ransomware_live | — |
| C&C Casa e Construção Ltda | April 2, 2024 | ransomware_live | — |
| Sterling Plumbing Inc | April 2, 2024 | ransomware_live | — |
| KICO GROUP | April 2, 2024 | ransomware_live | — |
| Pascoe International | March 23, 2024 | ransomware_live | — |
| Title Management Inc | March 23, 2024 | ransomware_live | — |
| SchwarzGrantz | March 23, 2024 | ransomware_live | — |
| Sc****tz | March 21, 2024 | ransomware_live | — |
| St****nc | March 21, 2024 | ransomware_live | — |
| KI****UP | March 21, 2024 | ransomware_live | — |
| In****GmbH | March 21, 2024 | ransomware_live | — |
| SHORTERM GROUP | March 21, 2024 | ransomware_live | — |
| Ranzijn | March 21, 2024 | ransomware_live | — |
| Wurzbacher | March 21, 2024 | ransomware_live | — |
| Die Unfallkasse Thüringen | March 21, 2024 | ransomware_live | — |
| HALLIDAYS GROUP LIMITED | March 21, 2024 | ransomware_live | — |
| Rockford Gastroenterology Associates | March 21, 2024 | ransomware_live | — |
| Di Martino Group | March 21, 2024 | ransomware_live | — |
| ALAB laboratoria | March 21, 2024 | ransomware_live | — |
| Informist Media | March 21, 2024 | ransomware_live | — |
| SUMMIT VETERINARY PHARMACEUTICALS LIMITED | March 21, 2024 | ransomware_live | — |
| Chung Hwa Chemical Industrial Works | March 21, 2024 | ransomware_live | — |
| Aceromex | March 21, 2024 | ransomware_live | — |
| 24/7 Express Logistics | March 21, 2024 | ransomware_live | — |
| Yuxin Automobile Co.Ltd | March 21, 2024 | ransomware_live | — |
| NIDEC GPM GmbH | December 20, 2023 | ransomware_live | — |
| Die Unfallkasse Thüringen | December 20, 2023 | ransomware_live | — |
| HALLIDAYS GROUP LIMITED | December 20, 2023 | ransomware_live | — |
| Rockford Gastroenterology Associates | December 20, 2023 | ransomware_live | — |
| Di Martino Group | December 20, 2023 | ransomware_live | — |
| ALAB laboratoria | November 26, 2023 | ransomware_live | — |
| Al****ia | November 19, 2023 | ransomware_live | — |
| Informist Media | November 17, 2023 | ransomware_live | — |
| SUMMIT VETERINARY PHARMACEUTICALS LIMITED | November 17, 2023 | ransomware_live | — |
| Chung Hwa Chemical Industrial Works | November 17, 2023 | ransomware_live | — |
| Aceromex | November 17, 2023 | ransomware_live | — |
| Aceromex (Unpay-Start Leaking) | November 7, 2023 | ransomware_live | — |
| Yuxin Automobile Co.Ltd | November 7, 2023 | ransomware_live | — |
| 24/7 Express Logistics (Unpay-Start Leaking) | September 11, 2023 | ransomware_live | — |
| 24/7 Express Logistics | September 7, 2023 | ransomware_live | — |
| He****rk | September 4, 2023 | ransomware_live | — |
Page 1 of 2Older →
Claim data from ransomware.live and RansomLook (CC BY 4.0).