CYBERSECURITYTRACKER
Incidents

Cloak

Review this actor's tracked leak-site claims, published reporting, and attributed threat evidence.

ransomware157 leak-site claims, all timeLatest observed leak-site post 2026-10-25

Portable threat brief

Cloak

Facts from stored data only; no AI-written text.

Opens the browser print dialog; choose Save as PDF.

Executive facts

Actor
Cloak
Kind
ransomware
Latest observed
2026-10-25
Leak-site claims
157
Catalogued techniques
0

Scope

Tracked sectors
Government, Healthcare, Financial Services, Construction & Engineering, Energy & Utilities
Claim records
2023-08-24 to 2026-10-25

Vulnerability events linked to this group

No dated vulnerability events are attached to this group's linked vulnerabilities.

Verified techniques

No verified ATT&CK mapping for this group.

Defensive actions

No defensive actions are attached to this profile.

Most-claimed sectorsGovernmentHealthcareFinancial ServicesConstruction & EngineeringEnergy & Utilities
Activity window in this site's data

This is only the dates observed by this site. It is not this actor's lifetime or evidence of dormancy outside these dates.

Claim records
First observed Latest observed
Verified ATT&CK phases represented

No verified ATT&CK mapping for this group

Origin and motivation

Origin and motivation not attributed.

No MITRE ATT&CK group mapping exists for this actor yet. Mappings here are strict: an actor links to a MITRE group only when the group's own name, aliases, or MITRE-published description match, and MITRE has not catalogued this group. Technique and defensive action data will appear automatically if a verified mapping lands.

Claims posted under this group's name or leak-site brand
157 on this site
View all on Breaches →
Leak-site claim activity

Claims per month, 2023-08 to 2026-10. Peak 24 in 2023-08.

2023-082026-10
Show monthly counts as a table
MonthClaims
2023-0824
2023-090
2023-100
2023-110
2023-127
2024-011
2024-020
2024-038
2024-047
2024-054
2024-063
2024-0710
2024-089
2024-097
2024-101
2024-1110
2024-1210
2025-018
2025-027
2025-035
2025-045
2025-051
2025-062
2025-072
2025-085
2025-091
2025-102
2025-112
2025-123
2026-010
2026-024
2026-030
2026-040
2026-050
2026-064
2026-070
2026-080
2026-090
2026-105

0 additional claims without a disclosure date

Ransomware claim data is unverified: RansomLook (CC BY 4.0) and ransomware.live (Terms of use: credit and link required).

Glossary