Embargo Review this actor's tracked leak-site claims, published reporting, and attributed threat evidence.
ransomware 45 leak-site claims, all timeLatest observed leak-site post 2026-09-10
PDF export is unavailable. The threat brief remains available below; use your browser's Print command.
PDF export is unavailable. The threat brief remains available below; use your browser's Print command.
Executive facts
Actor Embargo
Kind ransomware
Actor record created 2026-09-09
Latest observed 2026-09-10
Leak-site claims 45
Catalogued techniques 0 Scope
Tracked sectors Construction & Engineering, Healthcare, Financial Services, Technology, Transportation & Logistics
Claim records 2024-04-21 to 2026-09-10 Vulnerability events linked to this group No dated vulnerability events are attached to this group's linked vulnerabilities.
Verified techniques No verified ATT&CK mapping for this group.
Defensive actions No defensive actions are attached to this profile.
Most-claimed sectors Construction & Engineering Healthcare Financial Services Technology Transportation & Logistics
Activity window in this site's data
This is only the dates observed by this site. It is not this actor's lifetime or evidence of dormancy outside these dates.
Claim records First observed 2024-04-21 Latest observed 2026-09-10 Claims posted under this group's name or leak-site brand 45 Verified ATT&CK phases represented
No verified ATT&CK mapping for this group
Origin and motivation
Origin and motivation not attributed.
No MITRE ATT&CK group mapping exists for this actor yet. Mappings here are strict: an actor links to a MITRE group only when the group's own name, aliases, or MITRE-published description match, and MITRE has not catalogued this group. Technique and defensive action data will appear automatically if a verified mapping lands.
Claims posted under this group's name or leak-site brand
45 on this site gardensalive.com, bitsandpieces.com, iselinursery.local, weeksroses.org, esm.local Retail 2026-09-10 source ↗ gardensalive.com, bitsandpieces.com, iselinursery.local, weeksroses.org, esm.local Agriculture 2026-09-09 source ↗ www.maytrucking.com Transportation & Logistics 2026-06-30 source ↗ Auburn Electrical Construction Company Construction & Engineering 2026-06-09 source ↗ chipsoft.com Healthcare 2026-04-22 source ↗ cipsoft.com Healthcare 2026-04-20 source ↗ https://www.lagoonpark.com/ Hospitality 2026-03-31 source ↗ ludlums.com Aerospace & Defense 2026-03-26 source ↗ westport.com Automotive 2026-03-14 source ↗ seclore.com Technology 2026-03-11 source ↗ View all on Breaches → Leak-site claim activity
Claims per month, 2024-04 to 2026-09. Peak 6 in 2026-03.
2 3 2 2 2 1 0 5 0 1 4 2 0 3 0 2 0 0 0 3 1 0 0 6 2 0 2 0 0 2
2024-04 2026-09
Show monthly counts as a table 0 additional claims without a disclosure date
Ransomware claim data is unverified: RansomLook (CC BY 4.0) and ransomware.live (Terms of use: credit and link required).