stormous
First seen March 22, 2022Active188 claimed victims
The claims below are reproduced as posted by stormous on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
Stormous is an Arabic-speaking, pro-Russian ransomware and hacktivist group active since at least 2022, known for politically motivated attacks across 15+ countries, collaborating with GhostSec on the GhostLocker 2.0 RaaS platform and inheriting GhostSec's RaaS operations in mid-2024. On 1st July 2026 the group has annonced the end of their operations & ervices
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| calcomp.co.th | February 14, 2024 | ransomware_live | — |
| bombaygrills.com | February 14, 2024 | ransomware_live | — |
| calcomp | February 14, 2024 | ransomware_live | — |
| Abelsantosyasoc | February 14, 2024 | ransomware_live | — |
| Abelsantosyasoc.com.ar | February 2, 2024 | ransomware_live | — |
| pcmarket | January 31, 2024 | ransomware_live | — |
| KAI | January 22, 2024 | ransomware_live | — |
| uffs.edu.br | January 18, 2024 | ransomware_live | — |
| www.kai.id "FF" | January 14, 2024 | ransomware_live | — |
| pcmarket.uz | December 25, 2023 | ransomware_live | — |
| zonesoft.pt | December 21, 2023 | ransomware_live | — |
| trabzon.edu.tr | December 21, 2023 | ransomware_live | — |
| rmutto.ac.th | December 21, 2023 | ransomware_live | — |
| inwi.ma | December 21, 2023 | ransomware_live | — |
| evn.com.vn | December 21, 2023 | ransomware_live | — |
| zewailcity.edu.eg | December 21, 2023 | ransomware_live | — |
| comtrade.com | December 21, 2023 | ransomware_live | — |
| Epson | September 24, 2023 | ransomware_live | — |
| Interep | September 23, 2023 | ransomware_live | — |
| Enpos | September 13, 2023 | ransomware_live | — |
| Pvc-ms | September 7, 2023 | ransomware_live | — |
| Vivtok | August 31, 2023 | ransomware_live | — |
| Econocom | August 23, 2023 | ransomware_live | — |
| Jasper | August 23, 2023 | ransomware_live | — |
| Nipun | August 23, 2023 | ransomware_live | — |
| Mambo | August 23, 2023 | ransomware_live | — |
| dynamite | July 24, 2023 | ransomware_live | — |
| Senior | July 17, 2023 | ransomware_live | — |
| jasperpictures | July 15, 2023 | ransomware_live | — |
| Ministry of Energy and Mines (Cuba) " STORMOUS + GhostSec " | July 12, 2023 | ransomware_live | — |
| Ministry of Foreign Trade " STORMOUS + GhostSec " | July 12, 2023 | ransomware_live | — |
| Ministerio de Cultura de la Republica de Cuba " STORMOUS + GhostSec " | July 12, 2023 | ransomware_live | — |
| Nipun Consultancy | July 11, 2023 | ransomware_live | — |
| mamboafricaadventure | July 11, 2023 | ransomware_live | — |
| marehotels | July 11, 2023 | ransomware_live | — |
| archiplusinter.com | July 11, 2023 | ransomware_live | — |
| treenovum.es | July 11, 2023 | ransomware_live | — |
| Matrix | July 11, 2023 | ransomware_live | — |
| OKS | July 11, 2023 | ransomware_live | — |
| Arrowall | July 11, 2023 | ransomware_live | — |
| Ingersoll Rand | July 11, 2023 | ransomware_live | — |
| berjaya | July 11, 2023 | ransomware_live | — |
| SAGE | April 3, 2023 | ransomware_live | — |
| ARCHI+ | April 3, 2023 | ransomware_live | — |
| TREENOVUM | April 3, 2023 | ransomware_live | — |
| OCEAN | April 3, 2023 | ransomware_live | — |
| METALWORK | April 3, 2023 | ransomware_live | — |
| TWHOUSE | April 3, 2023 | ransomware_live | — |
| CAMERONMCH | April 3, 2023 | ransomware_live | — |
| MELCO | March 30, 2023 | ransomware_live | — |
| ieseco | March 30, 2023 | ransomware_live | — |
| matrixtelecoms | March 30, 2023 | ransomware_live | — |
| GOV.PL | March 30, 2023 | ransomware_live | — |
| FURUNO | March 27, 2023 | ransomware_live | — |
| OKSGROUP | March 27, 2023 | ransomware_live | — |
| ARROWAL | March 27, 2023 | ransomware_live | — |
| IRCO | March 27, 2023 | ransomware_live | — |
| LINX | March 27, 2023 | ransomware_live | — |
| SOCOMEC | March 26, 2023 | ransomware_live | — |
| KONICA | March 26, 2023 | ransomware_live | — |
| turvatehnika | March 26, 2023 | ransomware_live | — |
| DGCX | March 25, 2023 | ransomware_live | — |
| la providence | March 25, 2023 | ransomware_live | — |
| CESCE | March 25, 2023 | ransomware_live | — |
| CONFIDO | March 25, 2023 | ransomware_live | — |
| NOVELIS | March 25, 2023 | ransomware_live | — |
| berjayaClubs | March 25, 2023 | ransomware_live | — |
| ALKF+ | March 25, 2023 | ransomware_live | — |
| DAVINCI | March 25, 2023 | ransomware_live | — |
| FICHTNER | March 25, 2023 | ransomware_live | — |
| ioi | May 9, 2022 | ransomware_live | — |
| Coca-Cola | April 25, 2022 | ransomware_live | — |
| Mattele | April 25, 2022 | ransomware_live | — |
| Danaher | April 25, 2022 | ransomware_live | — |
| Success Neeti | April 12, 2022 | ransomware_live | — |
| Delhi Heights School | April 12, 2022 | ransomware_live | — |
| ALAM LMS | April 12, 2022 | ransomware_live | — |
| National Rehabilitation Training Center | April 12, 2022 | ransomware_live | — |
| Epic Games Data Breach | April 12, 2022 | ransomware_live | — |
| A message to France | April 4, 2022 | ransomware_live | — |
| infotech ua | March 31, 2022 | ransomware_live | — |
| MIGROS | March 28, 2022 | ransomware_live | — |
| Smith Transport company | March 28, 2022 | ransomware_live | — |
| 3S Standard Sharing Software | March 24, 2022 | ransomware_live | — |
| Satz Kontor GmbH data | March 23, 2022 | ransomware_live | — |
| Company ENOS PROPERTIES | March 22, 2022 | ransomware_live | — |
| Core Design | March 22, 2022 | ransomware_live | — |
| Aurora hacked data | March 22, 2022 | ransomware_live | — |
← NewerPage 2 of 2
Claim data from ransomware.live and RansomLook (CC BY 4.0).