Ransomware Group intelligence

Kairos

Active

Track Kairos with 83 published victims and 3 known leak locations in a single intelligence view.

Victims 83 Known published victims in this dataset
First discovered 2024-11-13 Earliest victim discovery date
Last discovered 2026-04-22 Latest victim discovery date
Inactive since 2 days Days since the latest known victim
Top country United States 41 victims
Known locations 3 Leak or negotiation infrastructure tracked

Overview

Kairos is tracked by Breach House as a ransomware group with 83 published victims.

United States is currently the most targeted country in this dataset.

3 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (3)

    Label Type Availability Links
    Leak location 1 Onion service Unknown erqnacjmdy3obvevyol7qhazkwkv57dwqvye5v46k5bcujtfa6sduad.onion
    Leak location 2 Onion service Unknown nerqnacjmdy3obvevyol7qhazkwkv57dwqvye5v46k5bcujtfa6sduad.onion
    Leak location 3 Onion service Unknown kairosgeuzkzz3ajntqcyxl3ib36szz3mg62mb3zbui33pbk3uzo4qqd.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (83)

    Search, filter and paginate the victim timeline for Kairos.

    Type Target Discovered Country Business Category Intel Link
    Ransomware Gregory Jewellers id28386 View details Australia Retail / E-commerce
    Ransomware Nordenta (a daughter company of LIFCO) id28350 View details Denmark Healthcare / Medicine
    Ransomware Strata Republic id28279 View details Australia Construction / Real Estate
    Ransomware FriendlyCare Pharmacy id28247 View details Australia Healthcare / Medicine
    Ransomware Pullen Moving id28118 View details United States Transportation / Travel / Logistics
    Ransomware Colonial Presbyterian Church id28115 View details United States NGOs / Associations
    Ransomware South Florida Injury Centers id28048 View details United States Healthcare / Medicine
    Ransomware Resch Maschinenbau id27486 View details Germany
    Ransomware Folet & Rivoire id27373 View details France
    Ransomware Institute of Social Security - Paraguay id27239 View details Paraguay Education
    Ransomware Katz Kantor Stonestreet & Buckner id27027 View details United States Communication / Marketing
    Ransomware Rockwood Retirement Communities id26914 View details United States Communication / Marketing
    Ransomware Robbins Parking Service Ltd id26505 View details Canada Communication / Marketing
    Ransomware The Marena Group id26479 View details United States Healthcare / Pharma
    Ransomware Seagrass Boutique Hospitality Group id26473 View details Australia Hospitality / Food & Beverage / Tourism
    Ransomware Melland High id24792 View details United States Education
    Ransomware Heidelberggc id24624 View details Australia Finance / Legal / Insurance
    Ransomware Milkagro id24623 View details Slovakia Other
    Ransomware Wilsenergy id24622 View details United States Energy
    Ransomware Nurturecare id24621 View details United States Communication / Marketing
    Ransomware OCBAR id24620 View details United States Hospitality / Food & Beverage / Tourism
    Ransomware Hazel Mercantile id24619 View details India Services
    Ransomware Summitcollege id24618 View details United States Education
    Ransomware The Property Business id24617 View details Australia Construction / Real Estate
    Ransomware Ekonomipoolen id24616 View details United States Other
    Ransomware ocbar.org/USA/114GB id23239 View details Hospitality / Food & Beverage / Tourism
    Ransomware www.ms-security-ltd.com/Cyprus/1.48TB id22965 View details Cyprus Communication / Marketing
    Ransomware www.nurturecare.com/USA/192GB id22844 View details Other
    Ransomware wilsenergy.com/USA/77.1GB id22732 View details Energy
    Ransomware www.milkagro.sk/Slovakia/335GB id22556 View details Slovakia Other
    Ransomware heidelberggc.com.au/Australia/26.4GB id22493 View details Australia Other
    Ransomware thepropertybusiness.com/Australia/164GB id22434 View details Australia Construction / Real Estate
    Ransomware ekonomipoolen.se/Sweden/32/GB id22433 View details Sweden Other
    Ransomware summitcollege.edu/USA/370GB id21996 View details United States Education
    Ransomware trico176.org/USA/180GB id21930 View details United States Other
    Ransomware melland.bright-futures.co.uk id21535 View details United Kingdom Education
    Ransomware mortensenlawoffices.com/USA/99GB id21408 View details United States Finance / Legal / Insurance
    Ransomware Bouey & Black LLP id21370 View details United States Other
    Ransomware inspiredbeauty.com id21142 View details United States Other
    Ransomware oandg.com.au id20900 View details Australia Other
    Ransomware mcparlane.com id20850 View details Other
    Ransomware stopzbugs.com/USA/146GB id20782 View details Other
    Ransomware taoscounty.org id20747 View details United States Public Sector
    Ransomware evanspharmacy.com/USA/56gb/ id20705 View details United States Healthcare / Pharma
    Ransomware jerichofd.com/USA/157GB/ id20400 View details Public Sector
    Ransomware ndsohio.org id20167 View details United States Construction / Real Estate
    Ransomware durhamarts.org id20153 View details United States Public Sector
    Ransomware loopergoodwine.com id19987 View details United States Other
    Ransomware thederbyhighschool.co.uk id19324 View details United Kingdom Education
    Ransomware coloradopulmonary.com id19318 View details United States Other
    Ransomware d-line-it.com id19201 View details Denmark Other
    Ransomware business.galesburg.org/members/member/rfms-inc-492 id19046 View details United States Services
    Ransomware RFMS, Inc. id19047 View details United States Services
    Ransomware galesburg.org id19033 View details Retail / E-commerce
    Ransomware stattorney.org id18869 View details United States Finance / Legal / Insurance
    Ransomware fredsalvuccicorp.com id18306 View details Services
    Ransomware drvitenas.com id18147 View details United States Healthcare / Pharma
    Ransomware usarice.com id18146 View details United States Other
    Ransomware thefireplacewarehouse.co.uk id17758 View details United Kingdom Transportation / Travel / Logistics
    Ransomware danecourt.kent.sch.uk id17589 View details United Kingdom Education
    Ransomware toitoiusa.com id17588 View details Other
    Ransomware casperstruck.com id17225 View details United States Other
    Ransomware medicalreportsltd.com id17224 View details United Kingdom Healthcare / Pharma
    Ransomware delpackaging.com id16966 View details United States Other
    Ransomware theurswickschool.co.uk id16728 View details United Kingdom Education
    Ransomware nightingalehammerson.org id16705 View details United Kingdom Other
    Ransomware realtaxcanada.com id16699 View details Canada Other
    Ransomware combinedpoolandspa.com id16668 View details United States Other
    Ransomware jgele.com id16660 View details United States Other
    Ransomware austinsfs.com.au id16212 View details Australia Finance / Legal / Insurance
    Ransomware eisenhowerlaw.com id16115 View details United States Finance / Legal / Insurance
    Ransomware aneticaid.com id16031 View details United States Other
    Ransomware tcpm.com id16030 View details United States Construction / Real Estate
    Ransomware archlou.org id16029 View details United States Other
    Ransomware T&M Equipment id15899 View details United States Other
    Ransomware brownpacking.com id15718 View details Germany Other
    Ransomware tacomaengineers.com id15645 View details Canada Other
    Ransomware sunnydayssunshinecenter.com id15284 View details United States Other
    Ransomware formosacpa.com.tw id15283 View details Taiwan, Province of China Public Sector
    Ransomware clayplattefamily.com id15282 View details United States Healthcare / Pharma
    Ransomware askyouraccountant.com id15281 View details Australia Services
    Ransomware pmrcenter.com id15280 View details United States Healthcare / Pharma
    Ransomware kansasrmc.com id15279 View details United States Healthcare / Pharma