CYBERSECURITYTRACKER
Incidents

Ra Group

Review this actor's tracked leak-site claims, published reporting, and attributed threat evidence.

ransomware161 leak-site claims, all timeLatest observed leak-site post 2024-12-28

Portable threat brief

Ra Group

Facts from stored data only; no AI-written text.

Opens the browser print dialog; choose Save as PDF.

Executive facts

Actor
Ra Group
Kind
ransomware
Latest observed
2024-12-28
Leak-site claims
161
Catalogued techniques
0

Scope

Tracked sectors
Pharmaceuticals & Life Sciences, Business & Professional Services, Healthcare, Insurance, Manufacturing
Claim records
2023-05-06 to 2024-12-28

Vulnerability events linked to this group

No dated vulnerability events are attached to this group's linked vulnerabilities.

Verified techniques

No verified ATT&CK mapping for this group.

Defensive actions

No defensive actions are attached to this profile.

Ransomware claim data is unverified: RansomLook (CC BY 4.0).

Most-claimed sectorsPharmaceuticals & Life SciencesBusiness & Professional ServicesHealthcareInsuranceManufacturing
Activity window in this site's data

This is only the dates observed by this site. It is not this actor's lifetime or evidence of dormancy outside these dates.

Claim records
First observed Latest observed
Verified ATT&CK phases represented

No verified ATT&CK mapping for this group

Origin and motivation

Origin and motivation not attributed.

No MITRE ATT&CK group mapping exists for this actor yet. Mappings here are strict: an actor links to a MITRE group only when the group's own name, aliases, or MITRE-published description match, and MITRE has not catalogued this group. Technique and defensive action data will appear automatically if a verified mapping lands.

Claims posted under this group's name or leak-site brand
161 on this site
View all on Breaches →
Leak-site claim activity

Claims per month, 2023-05 to 2024-12. Peak 27 in 2024-03.

2023-052024-12
Show monthly counts as a table
MonthClaims
2023-0515
2023-066
2023-0712
2023-089
2023-0910
2023-100
2023-119
2023-128
2024-010
2024-020
2024-0327
2024-0419
2024-055
2024-060
2024-075
2024-081
2024-090
2024-1011
2024-1110
2024-1214

0 additional claims without a disclosure date

Ransomware claim data is unverified: RansomLook (CC BY 4.0).

Glossary