CYBERSECURITYTRACKER
Incidents

Money Message

Review this actor's tracked leak-site claims, published reporting, and attributed threat evidence.

ransomware39 leak-site claims, all timeLatest observed leak-site post 2026-09-21

Portable threat brief

Money Message

Facts from stored data only; no AI-written text.

Opens the browser print dialog; choose Save as PDF.

Executive facts

Actor
Money Message
Kind
ransomware
Actor record created
2026-07-02
Latest observed
2026-09-21
Leak-site claims
39
Catalogued techniques
0

Scope

Tracked sectors
Healthcare, Transportation & Logistics, Manufacturing, Nonprofit, Education
Claim records
2023-04-08 to 2026-09-21

Vulnerability events linked to this group

No dated vulnerability events are attached to this group's linked vulnerabilities.

Verified techniques

No verified ATT&CK mapping for this group.

Defensive actions

No defensive actions are attached to this profile.

Ransomware claim data is unverified: RansomLook (CC BY 4.0).

Most-claimed sectorsHealthcareTransportation & LogisticsManufacturingNonprofitEducation
Activity window in this site's data

This is only the dates observed by this site. It is not this actor's lifetime or evidence of dormancy outside these dates.

Claim records
First observed Latest observed
Verified ATT&CK phases represented

No verified ATT&CK mapping for this group

Origin and motivation

Origin and motivation not attributed.

No MITRE ATT&CK group mapping exists for this actor yet. Mappings here are strict: an actor links to a MITRE group only when the group's own name, aliases, or MITRE-published description match, and MITRE has not catalogued this group. Technique and defensive action data will appear automatically if a verified mapping lands.

Claims posted under this group's name or leak-site brand
39 on this site
View all on Breaches →
Leak-site claim activity

Claims per month, 2023-04 to 2026-09. Peak 7 in 2023-04.

2023-042026-09
Show monthly counts as a table
MonthClaims
2023-047
2023-051
2023-060
2023-072
2023-080
2023-094
2023-104
2023-110
2023-120
2024-011
2024-020
2024-030
2024-040
2024-051
2024-061
2024-070
2024-080
2024-090
2024-100
2024-111
2024-122
2025-011
2025-020
2025-030
2025-041
2025-050
2025-060
2025-071
2025-081
2025-090
2025-100
2025-110
2025-120
2026-012
2026-020
2026-030
2026-040
2026-052
2026-060
2026-075
2026-081
2026-091

0 additional claims without a disclosure date

Ransomware claim data is unverified: RansomLook (CC BY 4.0).

Glossary