sinobi
First seen July 5, 2025Active274 claimed victims
The claims below are reproduced as posted by sinobi on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
Sinobi is a private vetted-affiliate RaaS group that emerged in mid-2025, believed to be a rebrand of the Lynx/INC ransomware lineage, claiming 176 victims by end of 2025 through double-extortion attacks primarily against mid-market US organizations via compromised SonicWall VPN credentials.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| Unre3d | May 5, 2026 | ransomware_live | — |
| Bay State Land Services | May 5, 2026 | ransomware_live | — |
| Celeris Networks | May 5, 2026 | ransomware_live | — |
| Positiwise Infotech Pvt | May 5, 2026 | ransomware_live | — |
| Scales and Associates Inc | May 5, 2026 | ransomware_live | — |
| Neurotrials Research Inc | May 5, 2026 | ransomware_live | — |
| Teco | March 17, 2026 | ransomware_live | — |
| McAfee Tool & Die | March 17, 2026 | ransomware_live | — |
| Eco Sound Builders | March 17, 2026 | ransomware_live | — |
| Interpack Northwest | March 17, 2026 | ransomware_live | — |
| Summa Energy | March 17, 2026 | ransomware_live | — |
| Amerinational Management Services (AMS) | March 17, 2026 | ransomware_live | — |
| Elgi Electric & Industries | March 17, 2026 | ransomware_live | — |
| Mayfair Hotels & Resorts | February 19, 2026 | ransomware_live | — |
| Electriduct | February 19, 2026 | ransomware_live | — |
| Saltech Systems | February 19, 2026 | ransomware_live | — |
| Iblesoft | February 19, 2026 | ransomware_live | — |
| Graymatter | February 19, 2026 | ransomware_live | — |
| Gentegra | February 19, 2026 | ransomware_live | — |
| Halcyontek | February 10, 2026 | ransomware_live | — |
| Snyder Diamonds | February 10, 2026 | ransomware_live | — |
| Venesco | February 10, 2026 | ransomware_live | — |
| The Sundher Group | February 10, 2026 | ransomware_live | — |
| BCS ProSoft | February 10, 2026 | ransomware_live | — |
| Halcyon Technologies | February 10, 2026 | ransomware_live | — |
| Reilly Foam Corp | February 5, 2026 | ransomware_live | — |
| Western Slope Iron & Supply | February 5, 2026 | ransomware_live | — |
| InfoMontreal | February 5, 2026 | ransomware_live | — |
| Exco | February 5, 2026 | ransomware_live | — |
| Penn Fencing | February 5, 2026 | ransomware_live | — |
| Accountnet | February 5, 2026 | ransomware_live | — |
| Ashcraft | January 27, 2026 | ransomware_live | — |
| Gallagher Transport International | January 27, 2026 | ransomware_live | — |
| Morison Insurance Brokers | January 27, 2026 | ransomware_live | — |
| FIAMPACK | January 27, 2026 | ransomware_live | — |
| JP Research | January 27, 2026 | ransomware_live | — |
| Active Green + Ross | January 27, 2026 | ransomware_live | — |
| Affordable Housing Management Overview Metrics | January 27, 2026 | ransomware_live | — |
| Impressico Business Solutions | January 27, 2026 | ransomware_live | — |
| LeMatic | January 27, 2026 | ransomware_live | — |
| ShuBee | January 21, 2026 | ransomware_live | — |
| MODERNISTIC GARDEN & PET SUPPLY LTD | January 21, 2026 | ransomware_live | — |
| Asian Heart Institute | January 21, 2026 | ransomware_live | — |
| Bayside Dental | January 21, 2026 | ransomware_live | — |
| OnSight | January 21, 2026 | ransomware_live | — |
| West Cary Group | January 21, 2026 | ransomware_live | — |
| Galutti Automotive Industria Metalurgica Ltda | January 18, 2026 | ransomware_live | — |
| Title Guaranty | January 18, 2026 | ransomware_live | — |
| Office for Students | January 18, 2026 | ransomware_live | — |
| Bikkal & Associates (sblawyers) | January 18, 2026 | ransomware_live | — |
| Advanced Business Equipment | January 18, 2026 | ransomware_live | — |
| National Waste Associates | January 18, 2026 | ransomware_live | — |
| Avalon Hills | January 18, 2026 | ransomware_live | — |
| Channel Products | January 18, 2026 | ransomware_live | — |
| Bray Whaler | January 18, 2026 | ransomware_live | — |
| Geoplin | January 18, 2026 | ransomware_live | — |
| Pivotal Healthcare | January 18, 2026 | ransomware_live | — |
| Talleyville Fire | January 18, 2026 | ransomware_live | — |
| Vernon Sales | January 11, 2026 | ransomware_live | — |
| Youngstown Pipe & Steel | January 11, 2026 | ransomware_live | — |
| Pecan Tree Dental | January 11, 2026 | ransomware_live | — |
| Granville Inn | January 11, 2026 | ransomware_live | — |
| ITG Electronics | January 11, 2026 | ransomware_live | — |
| Ingomar Church | January 11, 2026 | ransomware_live | — |
| Cardiovascular Medical Group of Southern California (CVMG) | January 11, 2026 | ransomware_live | — |
| FOX Architects | January 11, 2026 | ransomware_live | — |
| Alpha Alternatives | January 11, 2026 | ransomware_live | — |
| InvivoGen HK | January 11, 2026 | ransomware_live | — |
| Pilot automotive | January 11, 2026 | ransomware_live | — |
| Merit Group | January 11, 2026 | ransomware_live | — |
| Kan & Krishme | January 11, 2026 | ransomware_live | — |
| Pools by Bradley | January 5, 2026 | ransomware_live | — |
| Lampire Biological Laboratories | January 5, 2026 | ransomware_live | — |
| Sva Y Tecnologia Movil De España | January 5, 2026 | ransomware_live | — |
| NLFX Professional | January 5, 2026 | ransomware_live | — |
| GreenValley International | January 5, 2026 | ransomware_live | — |
| American Health | January 5, 2026 | ransomware_live | — |
| Wesley Heating & Cooling | January 5, 2026 | ransomware_live | — |
| Windward Life Care | January 5, 2026 | ransomware_live | — |
| The Boathouse on the Bay | January 5, 2026 | ransomware_live | — |
| Lares | January 5, 2026 | ransomware_live | — |
| Krenzer Marine Overview Metrics | January 5, 2026 | ransomware_live | — |
| Harris Consulting Engineers | January 5, 2026 | ransomware_live | — |
| M&M Auto Parts | January 5, 2026 | ransomware_live | — |
| The Structures Group | January 5, 2026 | ransomware_live | — |
| Youngblood Tyler & Associates | January 3, 2026 | ransomware_live | — |
| Hanlon Electric | December 22, 2025 | ransomware_live | — |
| Total Air Solutions | December 22, 2025 | ransomware_live | — |
| Geometrics | December 22, 2025 | ransomware_live | — |
| Center for Life Resources ECI | December 22, 2025 | ransomware_live | — |
| North Star Asset Management | December 19, 2025 | ransomware_live | — |
| Turnamics | December 19, 2025 | ransomware_live | — |
| RM Medics | December 19, 2025 | ransomware_live | — |
| Behr Enterprises | December 18, 2025 | ransomware_live | — |
| FHIABA | December 18, 2025 | ransomware_live | — |
| NBS Canada | December 18, 2025 | ransomware_live | — |
| The Salarpuria Sattva Group | December 18, 2025 | ransomware_live | — |
| Optimum Window Manufacturing | December 18, 2025 | ransomware_live | — |
| Lawrence Family Jewish Community Center | December 18, 2025 | ransomware_live | — |
| South Shore Tool & Die | December 18, 2025 | ransomware_live | — |
Page 1 of 3Older →
Claim data from ransomware.live and RansomLook (CC BY 4.0).