CYBERSECURITYTRACKER
Incidents

Stormous

Review this actor's tracked leak-site claims, published reporting, and attributed threat evidence.

ransomware230 leak-site claims, all timeLatest observed leak-site post 2026-07-02

Portable threat brief

Stormous

Facts from stored data only; no AI-written text.

Opens the browser print dialog; choose Save as PDF.

Executive facts

Actor
Stormous
Kind
ransomware
Actor record created
2026-07-02
Latest observed
2026-07-02
Leak-site claims
230
Catalogued techniques
0

Scope

Tracked sectors
Hospitality, Retail, Business & Professional Services, Government, Financial Services
Claim records
2022-04-12 to 2026-06-28

Vulnerability events linked to this group

No dated vulnerability events are attached to this group's linked vulnerabilities.

Verified techniques

No verified ATT&CK mapping for this group.

Defensive actions

No defensive actions are attached to this profile.

Ransomware claim data is unverified: RansomLook (CC BY 4.0).

Most-claimed sectorsHospitalityRetailBusiness & Professional ServicesGovernmentFinancial Services
Activity window in this site's data

This is only the dates observed by this site. It is not this actor's lifetime or evidence of dormancy outside these dates.

Claim records
First observed Latest observed
Verified ATT&CK phases represented

No verified ATT&CK mapping for this group

Origin and motivation

Origin and motivation not attributed.

No MITRE ATT&CK group mapping exists for this actor yet. Mappings here are strict: an actor links to a MITRE group only when the group's own name, aliases, or MITRE-published description match, and MITRE has not catalogued this group. Technique and defensive action data will appear automatically if a verified mapping lands.

Claims posted under this group's name or leak-site brand
230 on this site
View all on Breaches →
Leak-site claim activity

Claims per month, 2022-04 to 2026-06. Peak 23 in 2026-06.

2022-042026-06
Show monthly counts as a table
MonthClaims
2022-0411
2022-050
2022-060
2022-070
2022-080
2022-090
2022-100
2022-110
2022-120
2023-010
2023-020
2023-0321
2023-046
2023-050
2023-060
2023-0722
2023-080
2023-0915
2023-100
2023-110
2023-129
2024-012
2024-025
2024-030
2024-040
2024-0520
2024-060
2024-072
2024-081
2024-092
2024-105
2024-110
2024-129
2025-010
2025-023
2025-0317
2025-040
2025-0514
2025-064
2025-071
2025-080
2025-090
2025-1019
2025-114
2025-124
2026-011
2026-020
2026-030
2026-040
2026-0510
2026-0623

0 additional claims without a disclosure date

Ransomware claim data is unverified: RansomLook (CC BY 4.0).

Glossary