Ransomware Group intelligence

Ragnarlocker

Inactive

Track Ragnarlocker with 128 published victims and 4 known leak locations in a single intelligence view.

Victims 128 Known published victims in this dataset
First discovered 2020-04-01 Earliest victim discovery date
Last discovered 2023-10-11 Latest victim discovery date
Inactive since 927 days Days since the latest known victim
Top country France 3 victims
Known locations 4 Leak or negotiation infrastructure tracked

Overview

Ragnarlocker is tracked by Breach House as a ransomware group with 128 published victims.

France is currently the most targeted country in this dataset.

4 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (4)

    Label Type Availability Links
    Leak location 1 Onion service Unknown rgleak7op734elep.onion
    Leak location 2 Onion service Unknown rgleaktxuey67yrgspmhvtnrqtgogur35lwdrup4d3igtbm3pupc4lyd.onion
    Leak location 3 Onion service Unknown p6o7m73ujalhgkiv.onion
    Leak location 4 Onion service Unknown ragnarnwvli32xnmwudsvhbl7klzmofxeylyhcqfc5ifx5mbybq3ekqd.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (128)

    Search, filter and paginate the victim timeline for Ragnarlocker.

    Type Target Discovered Country Business Category Intel Link
    Ransomware Scotbeef Ltd. - Leaks id9052 View details Services
    Ransomware Eicon Controle Inteligentes id9048 View details Other
    Ransomware International Presence Ltd - Leaked id8989 View details Communication / Marketing
    Ransomware Learning Partnership West - Leaked id8969 View details United Kingdom Education
    Ransomware Groupe Fructa Partner - Leaked id8947 View details Services
    Ransomware Network Pacific Real Estate - Leak id8910 View details Construction / Real Estate
    Ransomware Astre - Leaked id8909 View details Other
    Ransomware Stratesys Full data leak id8770 View details Other
    Ransomware Announcement: COMECA Group going to be Leaked id8745 View details Services
    Ransomware Announcement: Skatax Accounting company going to be leaked id8742 View details Finance / Legal / Insurance
    Ransomware Retail House - Full Leak id8735 View details Retail / E-commerce
    Ransomware Announcement: Stratesys solutions going to be leaked id8722 View details Services
    Ransomware Announcement: Stratesys solutions going to b id8721 View details Services
    Ransomware Announcement: Groupe Fructa Partner will be leaked soon id8693 View details Services
    Ransomware CITIZEN company LEAKED id8684 View details Services
    Ransomware Announcement: Retail House going to be LEAKED id8667 View details Retail / E-commerce
    Ransomware Updates: Israel "MYMC" id8634 View details Other
    Ransomware Israel Medical Center - leaked id8518 View details Healthcare / Pharma
    Ransomware DOIT - Canadian IT company allowed leak of its own clients. id8433 View details Services
    Ransomware Batesville didn't react on appeal and allows Full Leak id8085 View details Other
    Ransomware Batesville Tool & Die, Inc will be leaked in 3 Days id7990 View details Services
    Ransomware Belize Electricity Limited - Leaked id7198 View details Belize Energy
    Ransomware Portugal Scotturb Data Leaked id7120 View details Other
    Ransomware Australian Universal Crane Leak id6663 View details Other
    Ransomware Autlan Metallorum, Mexican Miner Leak id6467 View details Manufacturing / Engineering
    Ransomware CANTALK, Canadian translation services - Leak id6254 View details Services
    Ransomware Public Appeal to the CANTALK management id5968 View details Public Sector
    Ransomware Temporary Leak Page #0013995NTa id5967 View details Other
    Ransomware New Leak in lawyers company AASP. id5571 View details Finance / Legal / Insurance
    Ransomware New Leak in lawyers company. id5570 View details Finance / Legal / Insurance —
    Ransomware AASP claim there was no data leakage! id5510 View details Other
    Ransomware Hundred thousands of personal data, leak preview id5151 View details Communication / Marketing
    Ransomware Wrapex Industrial - Leaked id4936 View details Manufacturing / Engineering
    Ransomware Serena Hotels - Leaked id4930 View details Hospitality / Food & Beverage / Tourism
    Ransomware ITONCLOUD - LEAKED id4839 View details IT
    Ransomware Essent company - Leaked id4660 View details Services
    Ransomware Leak Announcement - IT company ITonCLOUD id4643 View details IT
    Ransomware Belgium company Zwijndrecht - Leaked id4612 View details Services
    Ransomware DURAVIT A.G. - Announcement before publishing data id4399 View details Other —
    Ransomware Dollmar SpA - Leaked id4362 View details Other
    Ransomware DIPF-INTERN - Leaked id4361 View details Other
    Ransomware Fashion company ZIGI NY - Leaked id4335 View details Services
    Ransomware DMCI Holding Leaked id4318 View details Other
    Ransomware TANG CAPITAL LEAKED id4315 View details Other
    Ransomware Avalon luxury transport company - Leaked id4287 View details Transportation / Travel / Logistics
    Ransomware AudioQuest Data Leaked id4276 View details Other —
    Ransomware Malayan Flour Mills Bhd. Data Leak id4275 View details Other —
    Ransomware Who is the real Bad Guys here? Or what recovery experts prefer to keep silent. id4208 View details Communication / Marketing —
    Ransomware TAP Air Leak of more than 1.5 million of customers and many other. id4203 View details Other —
    Ransomware TAP AIR PORTUGAL - 115k personal data leak id4123 View details Other —
    Ransomware DDoS instead of the Discuss - Nice try TAP Air id4099 View details Other —
    Ransomware TAP Air - First Facts id4074 View details Other —
    Ransomware USA Insurance company - Smith brothers File tree and some proofs id4060 View details Finance / Legal / Insurance —
    Ransomware Huge drama for Tap Air Portugal id4059 View details Other —
    Ransomware Announcement. Action Lab File-tree id3992 View details Other —
    Ransomware DESFA - Pipeline company LEAK id3991 View details Services —
    Ransomware Greece pipeline company breached - DESFA id3974 View details Services —
    Ransomware File-tree of Tang Capital id3962 View details Other —
    Ransomware Puma Biotechnology - decided to allow Leaks id3895 View details IT —
    Ransomware GENSCO Inc. - allows Leak id3824 View details Services —
    Ransomware Epec.PL - Lied about the absence of Leak id3768 View details Other —
    Ransomware New Leak: Prudential LTG. id3684 View details Communication / Marketing —
    Ransomware New Leak: Northern Data Systems id3683 View details Services —
    Ransomware Sierra Packaging Leaked id3584 View details Other —
    Ransomware Jonathan Adler Leaks id3571 View details Other —
    Ransomware Germany Corporation "VMT-GmbH" Leaked id3512 View details Services —
    Ransomware Simonson-Lumber decided to be Leaked id3414 View details Other —
    Ransomware Simonson-Lumber Inc. First batch of Data. id3222 View details Services —
    Ransomware International Centre Leaked id3103 View details Services —
    Ransomware Smith Transport Full Leak id2829 View details Transportation / Travel / Logistics —
    Ransomware GHI Hornos Industriales Fully Leaked id2775 View details Manufacturing / Engineering —
    Ransomware GHI Hornos Industriales first batch of Data (0,1%) id2743 View details Manufacturing / Engineering —
    Ransomware Airspan Networks got Leaked id2511 View details Telecommunications —
    Ransomware IT-companies Subex & Sectrio Leaked id2412 View details Other —
    Ransomware Company Group LDLC id2180 View details France Services —
    Ransomware Leak of IT company Saksoft id2159 View details Services —
    Ransomware Full Data Leak Linical id2137 View details Other —
    Ransomware Update: Linicals Data id2061 View details Other —
    Ransomware Groupe LDLC is going to be Leaked id2057 View details France Services —
    Ransomware Team Computers Ltd. - Leak id1980 View details IT —
    Ransomware LINICAL doesn't care about digital hygiene id1751 View details IT —
    Ransomware Atlas Financial Holdings, Inc. - Leaked id1570 View details Finance / Legal / Insurance —
    Ransomware FULL DATA LEAK of Primary Residential Mortgage, Inc. // id1378 View details Communication / Marketing —
    Ransomware Primary Residential Mortgage inc. - Leaked id1357 View details Communication / Marketing —
    Ransomware Who is the real Bad Guys here? Or what recovery experts prefer to keep silent. id1245 View details Communication / Marketing —
    Ransomware Announcement: FTP id661 View details Other —
    Ransomware GATEWAY Property Management id657 View details Construction / Real Estate —
    Ransomware Software company Xoriant id650 View details IT —
    Ransomware New Leak GatewayPM id649 View details Other —
    Ransomware NEW Links for ADATA id639 View details Other —
    Ransomware ADATA LEAKED id637 View details Other —
    Ransomware ADATA id617 View details Other —
    Ransomware Webhelp's company - XtraSource id580 View details Services —
    Ransomware Ludwig Pfeiffer Leaked id563 View details Other —
    Ransomware Grupo SADA Leak id557 View details Other —
    Ransomware New Data Leak post from Chemical company id556 View details Manufacturing / Engineering —
    Ransomware Kaye/Bassman International - New "Wall of Shamer" id552 View details Services —
    Ransomware Cornerstone-BB Group Leaked id550 View details Services —
    Ransomware Attention, Dassault Falcon Jet updated id548 View details Other —
    Ransomware Advertising Material: Forest Construction Leaked id545 View details Construction / Real Estate —
    Ransomware LEAK Post Campari Group id541 View details Services —
    Ransomware Updates with files in EastCoastSeafood Inc. id542 View details Agriculture / Food —
    Ransomware New "WallofShamer" - East Coast Seafood Inc. id543 View details Agriculture / Food —
    Ransomware Shasun Chemicals & Drugs Ltd. LEAK id539 View details Manufacturing / Engineering —
    Ransomware JMA Energy LEAK id538 View details Energy —
    Ransomware New Files For Leak Campari Post id532 View details Other —
    Ransomware Ragnar_Team Announce of Potential "WallofShamer" id522 View details Other —
    Ransomware LEAK Post CAPCOM id520 View details Other —
    Ransomware LEAK post FINSA id521 View details Other —
    Ransomware Campari Group id514 View details Italy Services —
    Ransomware Official appeal to DASSAULT FALCON JET id517 View details Other —
    Ransomware DASSAULT FALCON JET id513 View details Other —
    Ransomware Security breach of CAPCOM network id504 View details Telecommunications —
    Ransomware Security breach of Campari Group network id494 View details Telecommunications —
    Ransomware CMA CGM (french carrier, container line) id485 View details France Other —
    Ransomware BIOLOGICAL E. Ltd. (BE) LEAK POST id484 View details Services —
    Ransomware Insignia Environmental company. id442 View details Services —
    Ransomware Astro Industries, Inc. id423 View details Services —
    Ransomware Bailey&Galyen Attorney at Law id424 View details Finance / Legal / Insurance —
    Ransomware New leaks from SOLTEK PACIFIC id425 View details Other —
    Ransomware GST Autoleather Company ! id426 View details Services —
    Ransomware ST Engineering id427 View details Manufacturing / Engineering —
    Ransomware Leaks from company EDP Group id420 View details Services —
    Ransomware Leaks from company Omniga GmbH & Co. id421 View details Services —
    Ransomware Leakage from company Catania, Mahon & Rider, PLLC id418 View details Services —
    Ransomware Brunner Announce – Hello World ! id419 View details Other
    Ransomware Leaks Company Birch Communications inc. id416 View details Communication / Marketing —
    Ransomware Energias de Portugal (EDP) id349 View details Portugal Other —