Storm
Also known as: stormFirst seen August 7, 2026Active49 claimed victims
The claims below are reproduced as posted by Storm on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| GSAC Auto Financing | September 2, 2026 | ransomware_live | — |
| Star Aviation, Inc | September 2, 2026 | ransomware_live | — |
| Petrocare Construction | September 2, 2026 | ransomware_live | — |
| SITES Medical | September 1, 2026 | ransomware_live | — |
| Macquarrie | September 1, 2026 | ransomware_live | — |
| Chicago Partners Wealth Advisors | September 1, 2026 | ransomware_live | — |
| Superior Ag | September 1, 2026 | ransomware_live | — |
| GSAC | September 1, 2026 | ransomware_live | — |
| Our Hospice Of South Central Indiana | August 26, 2026 | ransomware_live | — |
| Agrimac | August 26, 2026 | ransomware_live | — |
| National Salvage | August 24, 2026 | ransomware_live | — |
| ITD Informations technologie | August 24, 2026 | ransomware_live | — |
| Otto Sieve GmbH | August 24, 2026 | ransomware_live | — |
| Sprachakademie Rhein-Ruhr | August 24, 2026 | ransomware_live | — |
| City of Mitchell | August 23, 2026 | ransomware_live | — |
| Sharp Motor Group | August 23, 2026 | ransomware_live | — |
| The Cecilian Bank | August 22, 2026 | ransomware_live | — |
| Schardein Mechanical | August 21, 2026 | ransomware_live | — |
| Phoenix Group of Companies | August 21, 2026 | ransomware_live | — |
| Pinnacle Hospital | August 21, 2026 | ransomware_live | — |
| AutoDie | August 21, 2026 | ransomware_live | — |
| Proveli | August 20, 2026 | ransomware_live | — |
| Ruggles Sign Company | August 20, 2026 | ransomware_live | — |
| Ramsey Bros | August 17, 2026 | ransomware_live | — |
| Penfold | August 17, 2026 | ransomware_live | — |
| Westco Motors Cairns | August 17, 2026 | ransomware_live | — |
| Standard Tool & Die | August 17, 2026 | ransomware_live | — |
| Valor Defense Solutions, Inc | August 17, 2026 | ransomware_live | — |
| WindRose Health Network | August 16, 2026 | ransomware_live | — |
| American Contractors Insurance Group | August 16, 2026 | ransomware_live | — |
| 3-point Australia | August 13, 2026 | ransomware_live | — |
| Hinman Straub | August 13, 2026 | ransomware_live | — |
| Integra Castings | August 11, 2026 | ransomware_live | — |
| Tapper Cuddy LLP | August 11, 2026 | ransomware_live | — |
| Canadian Mental Health Association | August 11, 2026 | ransomware_live | — |
| Rood & Riddle Equine Hospital | August 11, 2026 | ransomware_live | — |
| Supportive Insurance Services | August 10, 2026 | ransomware_live | — |
| TRP International | August 10, 2026 | ransomware_live | — |
| Southern Metals | August 10, 2026 | ransomware_live | — |
| Southern Metals Company | August 10, 2026 | ransomware_live | — |
| Sawyer Savings Bank | August 7, 2026 | ransomware_live | — |
| United Group of Companies | August 7, 2026 | ransomware_live | — |
| Southern Indiana Radiological Associates | August 6, 2026 | ransomware_live | — |
| Nelson Manufacturing | August 6, 2026 | ransomware_live | — |
| NCA Alarms | August 6, 2026 | ransomware_live | — |
| Pioneer Bank | August 6, 2026 | ransomware_live | — |
| EvansPetree | August 5, 2026 | ransomware_live | — |
| Liberty Healthcare Corporation | August 5, 2026 | ransomware_live | — |
| OVP Health | August 3, 2026 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).