royal
First seen November 4, 2022Active211 claimed victims
The claims below are reproduced as posted by royal on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
According to Trendmicro, Royal ransomware was first observed in September 2022, and the threat actors behind it are believed to be seasoned cybercriminals who used to be part of Conti Team One.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| https://www.infocision.com | November 4, 2022 | ransomware_live | — |
| https://www.mmemed.com | November 4, 2022 | ransomware_live | — |
| https://orthoexperts.com | November 4, 2022 | ransomware_live | — |
| http://www.power-soft.com | November 4, 2022 | ransomware_live | — |
| https://www.sunwell.com | November 4, 2022 | ransomware_live | — |
| https://millermilling.com | November 4, 2022 | ransomware_live | — |
| https://www.benbrooklibrary.org | November 4, 2022 | ransomware_live | — |
| https://www.caminorealkitchens.com | November 4, 2022 | ransomware_live | — |
| https://happysapiensdental.com | November 4, 2022 | ransomware_live | — |
| https://www.prioritypower.net | November 4, 2022 | ransomware_live | — |
| https://nmhsi.org | November 4, 2022 | ransomware_live | — |
← NewerPage 3 of 3
Claim data from ransomware.live and RansomLook (CC BY 4.0).