BreachCensus

zeppelin

Active1 claimed victims

The claims below are reproduced as posted by zeppelin on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.

Listed organisation? Contact [email protected].

Profile

Zeppelin ransomware is a derivative of the Delphi-based Vega malware family and functions as a Ransomware as a Service (RaaS). From 2019 through at least June 2022, actors have used this malware to target a wide range of businesses and critical infrastructure organizations, including defense contractors, educational institutions, manufacturers, technology companies, and especially organizations in the healthcare and medical industries. Zeppelin actors have been known to request ransom payments in Bitcoin, with initial amounts ranging from several thousand dollars to over a million dollars.

Description from RansomLook (CC BY 4.0).

Claimed victims (as posted by the group — unverified)

Victim (as posted)Claimed onSourcePress coverage
Waikato District HealthMay 19, 2021ransomware_live—

Claim data from ransomware.live and RansomLook (CC BY 4.0).