RunSomeWares
First seen February 27, 2025Active7 claimed victims
The claims below are reproduced as posted by RunSomeWares on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
RunSomeWares is an emerging ransomware group that surfaced in February 2025 with initial victims across supply-chain services, financial services, accounting, and manufacturing, with unclear deployment of an encryptor vs. pure data-theft extortion.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| Morton LTC Pharmacy | October 8, 2026 | ransomware_live | — |
| Coös County Family Health | July 10, 2025 | ransomware_live | — |
| Harvest | April 10, 2025 | ransomware_live | — |
| Thai Metal Aluminium Co., Ltd | February 27, 2025 | ransomware_live | — |
| Donna G. Rogers, CPA, P.A. | February 27, 2025 | ransomware_live | — |
| F&V Capital Management, LLC (FVCM) | January 1, 2025 | ransomware_live | — |
| Gilbert | June 22, 2024 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).