BreachCensus

wannacry

First seen May 12, 2017Active33 claimed victims

The claims below are reproduced as posted by wannacry on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.

Listed organisation? Contact [email protected].

Profile

WannaCry ransomware is a cyber attack that spreads by exploiting vulnerabilities in the Windows operating system. At its peak in May 2017, WannaCry became a global threat. Cybercriminals used the ransomware to hold an organization's data hostage and extort money in the form of cryptocurrency. WannaCry spreads using EternalBlue, an exploit leaked from the National Security Agency (NSA). EternalBlue enables attackers to use a zero-day vulnerability to gain access to a system. It targets Windows computers that use a legacy version of the Server Message Block (SMB) protocol.

Description from ransomware.live.

Claimed victims (as posted by the group — unverified)

Victim (as posted)Claimed onSourcePress coverage
State of Connecticut (12 State Agencies, including the Department of Administrative Services)February 23, 2018ransomware_live
Becker CountyAugust 16, 2017ransomware_live
Murfreesboro PD and FDJuly 1, 2017ransomware_live
Honda Motor Co.June 19, 2017ransomware_live
TelkomMay 16, 2017ransomware_live
Rensselaer County LibraryMay 15, 2017ransomware_live
Chinese traffic police, immigration and public security bureausMay 12, 2017ransomware_live
Singapore shopping mallMay 12, 2017ransomware_live
Russian RailwaysMay 12, 2017ransomware_live
HitachiMay 12, 2017ransomware_live
Cook CountyMay 12, 2017ransomware_live
China gas stationsMay 12, 2017ransomware_live
MediaOnlineMay 12, 2017ransomware_live
RenaultMay 12, 2017ransomware_live
Indian police in the state of Andhra PradeshMay 12, 2017ransomware_live
SandvikMay 12, 2017ransomware_live
FedExMay 12, 2017ransomware_live
MegaFonMay 12, 2017ransomware_live
Thailand Digital BillboardMay 12, 2017ransomware_live
SberbankMay 12, 2017ransomware_live
National Health Service (NHS) UKMay 12, 2017ransomware_live
Deutsche Bahn (Germany Rail Network)May 12, 2017ransomware_live
Brazil's social security systemMay 12, 2017ransomware_live
Russian Interior MinistryMay 12, 2017ransomware_live
Chinese PoliceMay 12, 2017ransomware_live
NissanMay 12, 2017ransomware_live
Russia Central BankMay 12, 2017ransomware_live
Brazil's Foreign MinistryMay 12, 2017ransomware_live
PetrobrasMay 12, 2017ransomware_live
IberdrolaMay 12, 2017ransomware_live
Portugal TelecomMay 12, 2017ransomware_live
TelefonicaMay 12, 2017ransomware_live
Bank Of ChinaMay 12, 2017ransomware_live

Claim data from ransomware.live and RansomLook (CC BY 4.0).