BreachCensus

redransomware

First seen March 28, 2024Active16 claimed victims

The claims below are reproduced as posted by redransomware on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.

Listed organisation? Contact [email protected].

Profile

Red Ransomware (Red CryptoApp) emerged in early 2024, debuting its "Wall of Shame" data leak site with 11 victims across IT, legal, hospitality, manufacturing, and education sectors predominantly in the US, using phishing and vulnerability exploitation with double-extortion tactics.

Description from ransomware.live.

Claimed victims (as posted by the group — unverified)

Victim (as posted)Claimed onSourcePress coverage
Kutes.comJune 11, 2024ransomware_live—
Aircod.comMay 28, 2024ransomware_live—
Sullairargentina.comMay 17, 2024ransomware_live—
Targus.comApril 19, 2024ransomware_live—
Thors-Data.dkMarch 5, 2024ransomware_live—
Saglobal.comMarch 5, 2024ransomware_live—
Solucionesls.comMarch 5, 2024ransomware_live—
Tecnolite.comMarch 5, 2024ransomware_live—
Baystate.eduMarch 5, 2024ransomware_live—
Kogok.comMarch 5, 2024ransomware_live—
Southcoindustries.comMarch 5, 2024ransomware_live—
Aluminumtrailer.comMarch 5, 2024ransomware_live—
Comohotels.comMarch 5, 2024ransomware_live—
BendallmednickMarch 5, 2024ransomware_live—
Sfi-wfc.comMarch 5, 2024ransomware_live—
K2systems.caMarch 5, 2024ransomware_live—

Claim data from ransomware.live and RansomLook (CC BY 4.0).