BreachCensus

royal

First seen November 4, 2022Active211 claimed victims

The claims below are reproduced as posted by royal on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.

Listed organisation? Contact [email protected].

Profile

According to Trendmicro, Royal ransomware was first observed in September 2022, and the threat actors behind it are believed to be seasoned cybercriminals who used to be part of Conti Team One.

Description from ransomware.live.

Claimed victims (as posted by the group — unverified)

Victim (as posted)Claimed onSourcePress coverage
Casa LeyFebruary 2, 2023ransomware_live—
MESSER CUTTING SYSTEMSFebruary 2, 2023ransomware_live—
TK ElevatorFebruary 1, 2023ransomware_live—
municipality of Torre del GrecoJanuary 30, 2023ransomware_live—
Walker SCMJanuary 30, 2023ransomware_live—
ServiceMasterJanuary 26, 2023ransomware_live—
IOCJanuary 26, 2023ransomware_live—
Travis County Sheriffs Officers AssociationJanuary 26, 2023ransomware_live—
CadmetJanuary 21, 2023ransomware_live—
Pillar Resource ServicesJanuary 21, 2023ransomware_live—
K Azarosian CostelloJanuary 18, 2023ransomware_live—
carinyaJanuary 17, 2023ransomware_live—
LivingstonJanuary 17, 2023ransomware_live—
Westsächsische Hochschule ZwickauJanuary 16, 2023ransomware_live—
AutodeltaJanuary 16, 2023ransomware_live—
Samuels and Son SeafoodJanuary 14, 2023ransomware_live—
Hills Salvage and RecyclingJanuary 14, 2023ransomware_live—
RuhrpumpenJanuary 12, 2023ransomware_live—
T A SupplyJanuary 12, 2023ransomware_live—
Chinery and DouglasJanuary 12, 2023ransomware_live—
Bevolution GroupJanuary 6, 2023ransomware_live—
LEK / HABOJanuary 6, 2023ransomware_live—
DSBJ DATA LEAKJanuary 5, 2023ransomware_live—
QUTDecember 31, 2022ransomware_live—
Waterloo Wellington Flight CentreDecember 30, 2022ransomware_live—
Iowa Public TelevisionDecember 30, 2022ransomware_live—
AONTTAGLDecember 30, 2022ransomware_live—
www.buildersmutual.comDecember 28, 2022ransomware_live—
EmoneyDecember 28, 2022ransomware_live—
Fantasy Springs Resort CasinoDecember 27, 2022ransomware_live—
Robinson PharmaDecember 27, 2022ransomware_live—
Grupo Ibiapina LtdaDecember 27, 2022ransomware_live—
HELMA Eigenheimbau AGDecember 27, 2022ransomware_live—
InforlandiaDecember 27, 2022ransomware_live—
INTRADODecember 27, 2022ransomware_live—
Atlatec SA de CVDecember 25, 2022ransomware_live—
Rech Informatica LtdaDecember 23, 2022ransomware_live—
Aegea Group companiesDecember 23, 2022ransomware_live—
Pinnacle CommunicationsDecember 22, 2022ransomware_live—
ATLASDecember 21, 2022ransomware_live—
Zehnders of FrankenmuthDecember 20, 2022ransomware_live—
MARK-TAYLORDecember 19, 2022ransomware_live—
ConformDecember 18, 2022ransomware_live—
All Seasons Global SolutionsDecember 17, 2022ransomware_live—
Leo Hamel Fine JewelersDecember 16, 2022ransomware_live—
Vincent FisterDecember 16, 2022ransomware_live—
Adams-Friendship Area School DistrictDecember 16, 2022ransomware_live—
SummitDecember 16, 2022ransomware_live—
PGT InnovationsDecember 16, 2022ransomware_live—
Duplicator Sales & ServiceDecember 16, 2022ransomware_live—
Trussbilt LLCDecember 16, 2022ransomware_live—
Cates Control SystemsDecember 16, 2022ransomware_live—
RMCLAWDecember 16, 2022ransomware_live—
Tubular Steel IncDecember 16, 2022ransomware_live—
Law Firm of Friedman + BartoumianDecember 16, 2022ransomware_live—
McAndrews Law OfficesDecember 16, 2022ransomware_live—
Virginia Farm BureauDecember 16, 2022ransomware_live—
Los Angeles Business JournalDecember 16, 2022ransomware_live—
M2S ElectronicsDecember 16, 2022ransomware_live—
Cristal ControlsDecember 16, 2022ransomware_live—
Naulty, Scaricamazza and McDevitt, LLCDecember 16, 2022ransomware_live—
LamtecDecember 16, 2022ransomware_live—
The Keenan Agency IncDecember 16, 2022ransomware_live—
Q.E.PDecember 16, 2022ransomware_live—
MolDecember 16, 2022ransomware_live—
https://allseasonmovers.comDecember 3, 2022ransomware_live—
http://www.yoursummit.comDecember 2, 2022ransomware_live—
http://www.pgtinnovations.comDecember 2, 2022ransomware_live—
https://www.rmclaw.net/November 29, 2022ransomware_live—
https://tubularsteel.caNovember 28, 2022ransomware_live—
https://www.cates.comNovember 28, 2022ransomware_live—
https://www.friedmanlawoffices.comNovember 26, 2022ransomware_live—
https://www.labusinessjournal.comNovember 24, 2022ransomware_live—
https://mcandrewslaw.comNovember 20, 2022ransomware_live—
https://naulty.comNovember 18, 2022ransomware_live—
https://www.vafb.comNovember 18, 2022ransomware_live—
https://www.m2selectronics.comNovember 17, 2022ransomware_live—
https://www.keenanins.comNovember 15, 2022ransomware_live—
http://www.lamtec.comNovember 15, 2022ransomware_live—
https://www.cristalcontrols.comNovember 15, 2022ransomware_live—
http://bfernandez.comNovember 11, 2022ransomware_live—
https://www.qep.comNovember 11, 2022ransomware_live—
http://www.zender.deNovember 9, 2022ransomware_live—
http://www.silverstone.co.ukNovember 9, 2022ransomware_live—
http://www.adven.comNovember 9, 2022ransomware_live—
http://aviso.ciNovember 8, 2022ransomware_live—
http://www.h-ortmeier.deNovember 8, 2022ransomware_live—
http://www.sheehanfamilycompanies.comNovember 7, 2022ransomware_live—
http://ivacorm.comNovember 7, 2022ransomware_live—
https://www.sohnen.comNovember 7, 2022ransomware_live—
https://www.zoominfo.com/c/maynards-industries-ltd/24117794November 5, 2022ransomware_live—
https://quantumplastics.comNovember 4, 2022ransomware_live—
https://fishmans.caNovember 4, 2022ransomware_live—
http://www.cymax.comNovember 4, 2022ransomware_live—
http://www.pressco.comNovember 4, 2022ransomware_live—
http://www.veroni.itNovember 4, 2022ransomware_live—
http://www.pandafunds.comNovember 4, 2022ransomware_live—
https://www.whitneyoilco.comNovember 4, 2022ransomware_live—
http://www.royalimaging.comNovember 4, 2022ransomware_live—
http://www.wiseyes.netNovember 4, 2022ransomware_live—
← NewerPage 2 of 3Older →

Claim data from ransomware.live and RansomLook (CC BY 4.0).