Ransomware Group intelligence

Tengu

Active

Track Tengu with 50 published victims and 1 known leak locations in a single intelligence view.

Victims 50 Known published victims in this dataset
First discovered 2025-10-23 Earliest victim discovery date
Last discovered 2026-03-07 Latest victim discovery date
Inactive since 48 days Days since the latest known victim
Top country Morocco 4 victims
Known locations 1 Leak or negotiation infrastructure tracked

Overview

Tengu is tracked by Breach House as a ransomware group with 50 published victims.

Morocco is currently the most targeted country in this dataset.

1 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (1)

    Label Type Availability Links
    Leak location 1 Onion service Unknown longcc4fqrfcqt5lzceutylaxir6h66fp6df3oin6mvwvz6pfdbxc6qd.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (50)

    Search, filter and paginate the victim timeline for Tengu.

    Type Target Discovered Country Business Category Intel Link
    Ransomware Sileno Companies Inc id27173 View details Hospitality / Food & Beverage / Tourism
    Ransomware Communitymosaic.co.uk id27080 View details United Kingdom Other
    Ransomware Eos Technology srl id27079 View details Italy IT
    Ransomware DAINTY CLOUD INC id26934 View details United States IT
    Ransomware Al Arif Contracting Co. (L.L.C) id26856 View details United Arab Emirates Construction / Real Estate
    Ransomware martec.it id26855 View details Italy IT
    Ransomware www.shora.ma id26688 View details Morocco Services
    Ransomware femar.it id26638 View details Italy Healthcare / Pharma
    Ransomware 真言宗智山派 成就院 id26637 View details Japan NGOs / Associations
    Ransomware Junta Local de Conciliación y Arbitraje id26396 View details Mexico Public Sector
    Ransomware PT. Mitra Antar Tangguh id26395 View details Indonesia Other
    Ransomware megasilver.com.tw id26217 View details Taiwan, Province of China IT
    Ransomware all Data id26012 View details Education
    Ransomware We will be back soon id26004 View details Communication / Marketing
    Ransomware b2motorsport.co.il id25915 View details Israel Manufacturing / Engineering
    Ransomware Tahkout Group id25897 View details Algeria Manufacturing / Engineering
    Ransomware KSP TLM INDONESIA id25855 View details Indonesia Retail / E-commerce
    Ransomware FRUIT-BONTÉ Agroalimentaire id25854 View details France Agriculture / Food
    Ransomware lenotech.com.ph id25850 View details Philippines IT
    Ransomware COMPAGNIE FONCIÈRE PARISIENNE id25849 View details France Construction / Real Estate
    Ransomware skyegtours.com id25848 View details United Kingdom Transportation / Travel
    Ransomware Disuelas JC SAS id25817 View details Colombia Communication / Marketing
    Ransomware premmotors.com id25816 View details India Communication / Marketing
    Ransomware namico.go.ke id25815 View details Kenya Public Sector
    Ransomware Jakarta Nanyang School id25814 View details Indonesia Education
    Ransomware STRONG WINGS LLP id25694 View details Manufacturing / Engineering
    Ransomware www.coconutboard.gov.in id25622 View details India Communication / Marketing
    Ransomware Deck India Engineering Pvt. Ltd id25593 View details India Manufacturing / Engineering
    Ransomware GSM PORTAL TEKNOLOJİ HİZMETLERİ TİC. LTD. ŞTİ id25579 View details Türkiye IT
    Ransomware Nafae Sanitaire S.a.r.l id25570 View details Morocco Other
    Ransomware anfibius.net id25567 View details Spain Services
    Ransomware https://comercialautomotriz.com id25558 View details Ecuador Manufacturing / Engineering
    Ransomware Grupo Roa id25550 View details Colombia Construction / Real Estate
    Ransomware Nordstrom Rack id25530 View details United States Retail / E-commerce
    Ransomware Samson Equipment id25526 View details United States Education
    Ransomware https://seha.org.sa id25498 View details Saudi Arabia NGOs / Associations
    Ransomware Quick Safety Electric id25487 View details Energy
    Ransomware www.charoenchai.com id25442 View details Thailand Energy
    Ransomware strategic-ts.com id25354 View details United States IT
    Ransomware baja.gob.mx id25336 View details Mexico Public Sector
    Ransomware Unknown id24733 View details Other
    Ransomware https://www.revnomix.com id24593 View details India Hospitality / Food & Beverage / Tourism
    Ransomware **Rollingertec S.A. - Luxembourg** id24277 View details IT
    Ransomware Coral Clubes - Mexico id24157 View details Mexico Hospitality / Food & Beverage / Tourism
    Ransomware Le MULTI LABORATOIRE LC2A id23329 View details Morocco Communication / Marketing
    Ransomware UniCursos, Brazil id23316 View details Brazil Public Sector
    Ransomware FOOD & MUSIC MANAGEMENT SL id23304 View details Spain Agriculture / Food
    Ransomware Al Rimal Group id23303 View details United Arab Emirates Agriculture / Food
    Ransomware STAR LÉGUMES id23302 View details Morocco Communication / Marketing
    Ransomware Qatargas and Tar Company, Iran id23301 View details Iran, Islamic Republic of Energy