Ransomware Group intelligence

Fog

Inactive

Track Fog with 189 published victims and 3 known leak locations in a single intelligence view.

Victims 189 Known published victims in this dataset
First discovered 2024-07-16 Earliest victim discovery date
Last discovered 2025-03-20 Latest victim discovery date
Inactive since 401 days Days since the latest known victim
Top country United States 74 victims
Known locations 3 Leak or negotiation infrastructure tracked

Overview

Fog is tracked by Breach House as a ransomware group with 189 published victims.

United States is currently the most targeted country in this dataset.

3 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (3)

    Label Type Availability Links
    Leak location 1 Onion service Unknown xql562evsy7njcsngacphc2erzjfecwotdkobn3m4uxu2gtqh26newid.onion
    Leak location 2 Onion service Unknown xbkv2qey6u3gd3qxcojynrt4h5sgrhkar6whuo74wo63hijnn677jnyd.onion
    Leak location 3 Onion service Unknown xbkv2qey6u3gd3qxcojynrt4h5sgrhkar6whuo74wo63hijnn677jnyd.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (189)

    Search, filter and paginate the victim timeline for Fog.

    Type Target Discovered Country Business Category Intel Link
    Ransomware Newtown Friends School (newtownfriends.org) id18543 View details United States Education
    Ransomware RAE (Real Academia Española) (rae.es) id18469 View details Spain Other
    Ransomware University Diagnostic Medical Imaging, PC (udmi.net) id18386 View details United States Healthcare / Pharma
    Ransomware El Camino Real Academy (elcaminorealacademy) id18385 View details Education
    Ransomware Wilkinson Rogers (wilkinsonrogers.com) id18314 View details Other
    Ransomware Magnolia Manor (magnoliamanor.com) id18312 View details United States Other
    Ransomware WJCC Public Schools (wjccschools.org) id18220 View details United States Education
    Ransomware Oberlin Cable Co-op (oberlin.net) id18215 View details United States Other
    Ransomware 1X Internet id18213 View details Germany Other
    Ransomware Bizcode id18212 View details Italy Other
    Ransomware Manning Publications Co. id18211 View details United States Public Sector
    Ransomware Engikam id18210 View details Other
    Ransomware FHNW id18209 View details Switzerland Other
    Ransomware Aeonsparx id18208 View details Malaysia Other
    Ransomware CIE id18207 View details Czechia Other
    Ransomware Flightsim studio id18206 View details Other
    Ransomware Neopoly id18205 View details Germany Other
    Ransomware Kr3m id18204 View details Germany Other
    Ransomware InfoReach id18203 View details United States Other
    Ransomware Euranova id18202 View details Belgium Other
    Ransomware Inelmatic id18201 View details Spain Other
    Ransomware Kotliva id18200 View details Russian Federation Other
    Ransomware Inet id18199 View details Thailand Other
    Ransomware Blue Planet id18198 View details Other
    Ransomware Eumetsat id18197 View details Germany Other
    Ransomware Melexis id18196 View details Belgium Other
    Ransomware USGS id18195 View details United States Other
    Ransomware The 19 biggest gitlabs id18189 View details Other
    Ransomware SCOLARO FETTER GRIZANTI & McGOUGH, P.C. (scolaro.com) id18186 View details United States Other
    Ransomware Pampili (pampili.com.br) id18168 View details Brazil Other
    Ransomware Grupo Baston Aerossol (baston.com.br) id18164 View details Brazil Other
    Ransomware Central McGowan (centralmcgowan.com) id18133 View details United States Other
    Ransomware Klesk Metal Stamping Co (kleskmetalstamping.com) id18132 View details United States Manufacturing / Engineering
    Ransomware Gitlabs: Synelixis Solutions, INGV, VMO Holdings id17832 View details Services
    Ransomware Bayteq id17726 View details Ecuador IT
    Ransomware WDNA id17725 View details Spain Telecommunications
    Ransomware Naphix id17724 View details Australia Other
    Ransomware Gitlabs: Naphix, WDNA, Bayteq id17723 View details Other
    Ransomware Hochschule id17643 View details Germany Education
    Ransomware VISEO id17642 View details France IT
    Ransomware Next TI id17641 View details Indonesia Finance / Legal / Insurance
    Ransomware Haggin Oaks Golf (hagginoaks.com) id17633 View details United States Other
    Ransomware Gitlabs: Next TI, VISEO, Hochschule Trier id17628 View details Other
    Ransomware Greencastle-Antrim Senior High School (gcasd.org) id17568 View details United States Education
    Ransomware Pamrya.de id17560 View details Germany Transportation / Travel / Logistics
    Ransomware QBurst id17559 View details India IT
    Ransomware Acqua development id17558 View details Romania IT
    Ransomware Gitlabs: Acqua development, QBurst, Pamyra.de id17557 View details IT
    Ransomware ADULLACT id17519 View details France Communication / Marketing
    Ransomware Ayomi id17518 View details France Communication / Marketing
    Ransomware Omydoo id17517 View details France Services
    Ransomware Gitlabs: Omydoo, Ayomi, ADULLACT id17516 View details Other
    Ransomware Mozo Grau (mozo-grau.com) id17513 View details Spain Other
    Ransomware Squeezer-software id17494 View details IT —
    Ransomware Spacemanic id17493 View details Czechia Services —
    Ransomware INGV id17492 View details Italy IT —
    Ransomware Gitlabs: INGV, Spacemanic, Squeezer-software id17491 View details United States IT
    Ransomware Hess (hess-gmbh.de) id17473 View details Germany Other
    Ransomware Saint George's College (saintgeorge.cl) id17438 View details Chile Education
    Ransomware Aurora Public Schools (aurorak12.org) id17437 View details United States Education
    Ransomware The University of Notre Dame Australia (nd.edu.au) id17431 View details Australia Education
    Ransomware iRidge Inc. id17283 View details Japan IT
    Ransomware Maxvy Technologies Pvt id17282 View details India IT
    Ransomware Universitatea Politehnica din Bucuresti id17281 View details Romania IT
    Ransomware Gitlabs: Universitatea Politehnica din Bucuresti, Maxvy Technologies Pvt, iRidge Inc. id17277 View details IT
    Ransomware 3SS id17268 View details Germany Other —
    Ransomware Fligno id17267 View details Norway Other —
    Ransomware Chalmers tekniska högskola id17266 View details Sweden Other —
    Ransomware Gitlabs: Chalmers tekniska högskola, Fligno, 3SS id17264 View details Other
    Ransomware DIEM id17245 View details Italy Other —
    Ransomware Top Systems id17244 View details Brazil Services —
    Ransomware eConceptions id17243 View details Pakistan Other —
    Ransomware Gitlabs: eConceptions, Top Systems, DIEM id17242 View details Services
    Ransomware Kombinat id17223 View details Austria Communication / Marketing
    Ransomware HE2B id17222 View details Belgium Communication / Marketing
    Ransomware Prasaga id17221 View details United States Communication / Marketing
    Ransomware Propulsion Academy AG id17220 View details Switzerland Communication / Marketing
    Ransomware X-Pans id17219 View details France Communication / Marketing
    Ransomware Professional Computer Co., Ltd. id17218 View details Thailand Communication / Marketing
    Ransomware LUA Coffee id17217 View details Indonesia Communication / Marketing
    Ransomware GFZ Helmholtz Centre for Geosciences id17216 View details Germany Communication / Marketing
    Ransomware PT. ITPRENEUR INDONESIA TECHNOLOGY id17215 View details Indonesia IT
    Ransomware Devlion id17214 View details Israel Other
    Ransomware SOLEIL id17213 View details France Other
    Ransomware hemio.de id17212 View details Germany Other
    Ransomware Madia id17211 View details Netherlands Other
    Ransomware X-lab group id17210 View details Egypt Services
    Ransomware Bolin Centre for Climate Research id17209 View details Sweden Other
    Ransomware Gitlabs: hemio.de, SOLEIL, Devlion id17208 View details Germany Other
    Ransomware Gitlabs: Bolin Centre for Climate Research, X-lab group, Madia id17142 View details Services
    Ransomware Karadeniz Holding (karadenizholding.com) id17140 View details Türkiye Other
    Ransomware Gitlabs: PT. ITPRENEUR INDONESIA TECHNOLOGY, GFZ Helmholtz Centre for Geosciences, LUA Cof... id17105 View details Indonesia IT
    Ransomware Gitlabs: Professional Computer, X-Pans, Propulsion Academy AG id17023 View details Switzerland Communication / Marketing
    Ransomware Gitlabs: Prasaga, HE2B, Kombinat id17004 View details United States Communication / Marketing
    Ransomware Boutin Jones (boutindentino.com) id16980 View details United States Other
    Ransomware De La Salle High School (dlshs.org) id16818 View details United States Education
    Ransomware ELTEK Group (eltekgroup.com) id16817 View details Italy Services
    Ransomware Kooijman Vianen (kooijmanvianen.nl) id16781 View details Netherlands Other
    Ransomware The University of Oklahoma (ou.edu) id16646 View details United States Education
    Ransomware SciTech Services, Inc. id16645 View details United States IT
    Ransomware Buttery (butterycompany.com) id16644 View details United States Services
    Ransomware OmniRide (omniride.com) id16570 View details United States Other
    Ransomware Saint-Bar (saintbar.be) id16529 View details Belgium Hospitality / Food & Beverage / Tourism
    Ransomware Ober Mountain (OberGatlinburg.com) id16408 View details United States Other
    Ransomware Aroma Housewares Co (Aromaco.com) id16394 View details United States Other
    Ransomware RODS Surveying (rods.cc) id16287 View details Australia Other
    Ransomware Forum Architecture & Interior Design (forumarchitecture.com) id16283 View details United States Construction / Real Estate
    Ransomware Gallade Chemical (galladechem.com) id16282 View details United States Manufacturing / Engineering
    Ransomware Industria e Comercio Jolitex Ltda (jolitex.com) id16281 View details Brazil Services
    Ransomware Schenkelberg - Die Medienstrategen (schenkelberg-druck.de) id16229 View details Germany Other
    Ransomware Village Community School (vcsnyc.org) id16228 View details United States Education
    Ransomware Circle Electric (circleelectric.com) id16227 View details United States Other
    Ransomware Howell Township Public Schools (howell.k12.nj.us) id16224 View details United States Education
    Ransomware EP Holdings (epholdingsinc.com) id16223 View details United States Services
    Ransomware Jet Edge (jetedgewaterjets.com) id16208 View details United States Other
    Ransomware Energy Capital Credit Union (eccu.net) id16207 View details United States Finance / Legal / Insurance
    Ransomware Vroninks Ricker Weyts & Sacre- Notaires (notassoc.be) id16178 View details Belgium Other
    Ransomware Reliance Connects (relianceconnects.com) id16177 View details United States Other
    Ransomware SpeedLine Solutions (speedlinesolutions.com) id16140 View details Canada Services
    Ransomware Ouro Verde (ouroverde.net.br) id16137 View details Brazil Other
    Ransomware Cognity (cognity.gr) id16111 View details Greece Other
    Ransomware Waverley Christian College (wcc.vic.edu.au) id16110 View details Australia Education
    Ransomware Planters Telephone Cooperative (planters.net) id15986 View details United States Other
    Ransomware Dorner (dorner-gmbh.de) id15874 View details Germany Other
    Ransomware Conlin's Pharmacy (conlinspharmacy.com) id15796 View details Ireland Healthcare / Pharma
    Ransomware Weld Racing (weldracing.com) id15762 View details United States Other
    Ransomware Chanas Assurances S.A. (chanasassurances.com) id15715 View details Cameroon Other
    Ransomware ALLTUB Group (alltub.com) id15714 View details France Services
    Ransomware Bedminster School (bedminsterschool.org) id15713 View details United States Education
    Ransomware WPM Pathology Laboratory (wpmpath.com) id15708 View details Australia Other
    Ransomware Gruber Tool & Die (grubertool.com) id15683 View details United States Other
    Ransomware Signal Health Washington (signalhealthwa.com) id15670 View details United States Healthcare / Pharma
    Ransomware Pioneer Urban Land & Infrastructure (pioneerurban.in) id15659 View details India Construction / Real Estate
    Ransomware Pinnacle Plastic Products (pinnacleplasitcporducts.com) id15658 View details United States Manufacturing / Engineering
    Ransomware Complete Recycling Services (completerecyclingservices.com) id15657 View details United States Services
    Ransomware Marketing Incentives (leinsterappointments.ie) id15655 View details Ireland Communication / Marketing
    Ransomware Metroline (metrolinedirect.com) id15654 View details United States Other
    Ransomware Hogan Mfg (hoganmfg.com) id15559 View details United States Other
    Ransomware Fifteenfortyseven Critical Systems Realty (1547realty.com) id15558 View details United States Services
    Ransomware Burkburnett Independent School District id15487 View details United States Education
    Ransomware Valley Planing Mill (valleyplaning.com) id15486 View details United States Other
    Ransomware Waters Truck and Tractor (waterstruck.com) id15397 View details United States Other
    Ransomware Vector Transport (vectortransport.com) id15349 View details India Transportation / Travel / Logistics
    Ransomware Cape Cod Regional Technical High School (capetech.us) id15181 View details United States IT
    Ransomware GSR Andrade Architects (gsr-andrade.com) id15180 View details Brazil Other
    Ransomware Askling Car (asklingbil.se) id15084 View details Sweden Other
    Ransomware Jillamy (jillamy.com) id15061 View details United States Other
    Ransomware SmartSource (smartsource-inc.com) id15059 View details United States Services
    Ransomware Jordan Public Schools (https://www.jordan.k12.mn.us/) id15036 View details United States Education
    Ransomware Sage Automotive Interior (sageautomotiveinteriors.com) id15035 View details United States Manufacturing / Engineering
    Ransomware Evergreen SD50 (evergreensd50.com) id15017 View details Canada Other
    Ransomware Cucamonga Valley Water District (cvwdwater.com) id14978 View details United States Other
    Ransomware Evergreen Local School District (evgvikings.org) id14977 View details United States Education
    Ransomware Value City NJ (valuecitynj.com) id14949 View details United States Public Sector
    Ransomware The Getz Group (getz.com.hk) id14948 View details Hong Kong Services
    Ransomware Apache Mills, Inc. (apachemills.com) id14942 View details United States Services
    Ransomware Goshen Central School District (gcsny.org) id14908 View details United States Education
    Ransomware Mar-Bal (mar-bal.com) id14907 View details United States Other
    Ransomware Lincoln University (lincolnu.edu) id14899 View details United States Education
    Ransomware Clear Connection (clearconnection.com) id14898 View details United States Other
    Ransomware Schweiger Transport (schweiger-gmbh.de) id14864 View details Germany Transportation / Travel / Logistics
    Ransomware Philadelphia Macaroni (philamacaroni.com) id14863 View details United States Other
    Ransomware Trimarc Financial (trimarc.com) id14860 View details United States Finance / Legal / Insurance
    Ransomware Fromm (FrommBeauty.com) id14821 View details United States Other
    Ransomware Ultra Tune (ultratune.com.au) id14820 View details Australia Other
    Ransomware Welker (welker.com) id14796 View details United States Other
    Ransomware Cordogan Clark and Associates (cordoganclark.com) id14795 View details United States Other
    Ransomware Food Sciences Corporation (foodsciences.com) id14789 View details United States Agriculture / Food
    Ransomware Central Pennsylvania Food Bank id14777 View details United States Finance / Legal / Insurance
    Ransomware Juice Generation id14394 View details United States Other
    Ransomware Sunrise Farms id14374 View details Canada Agriculture / Food
    Ransomware Prentke Romich Company id14356 View details United States Communication / Marketing
    Ransomware S. Walter Packaging id14256 View details United States Other
    Ransomware Clatronic International GmbH id14255 View details Germany Services
    Ransomware Seaway Manufacturing Corp. id13845 View details United States Manufacturing / Engineering
    Ransomware IOI Corporation Berhad id13700 View details Services
    Ransomware Ziba Design id13699 View details Other
    Ransomware Hi-P International id13691 View details Services
    Ransomware BASF - Nunhems id13595 View details Netherlands Other
    Ransomware City of Cold Lake id13579 View details Canada Public Sector
    Ransomware Odessa College id13538 View details United States Education
    Ransomware Wichita State University Campus of Applied Sciences and Technology id13474 View details Education
    Ransomware Geelong Lutheran College id13385 View details Education
    Ransomware Asbury Theological Seminary id13384 View details Other
    Ransomware Djg Projects id13383 View details Communication / Marketing
    Ransomware Verweij Elektrotechniek id13382 View details IT
    Ransomware Alvin Independent School District id13381 View details United States Education
    Ransomware West Allis-West Milwaukee School District id13380 View details United States Education
    Ransomware German University of Technology in Oman id13379 View details Oman IT