Threat actor
20 observed events
AIDark Project has been observed in six ransomware incidents, with reported activity affecting manufacturing, professional services, transportation, energy and utilities, and one other sector. The associated victim countries include the US, GB, and PH.
Following a successful cyberattack on Long Lewis, more than 500 GB of confidential information was stolen. More than 15,000 records containing personal data of the organization’s customers and employees, important financial and banking documents, and other …
Due to cyberattack on Genesis more than 70 Gb of company data was stolen. Leakage contains big amount of sensitive data such as company's customers data, bank and financial information documents. About 10 000 files are not secured by THERMO KING for now.
A "Mile Bluff Medical Center" company suffered a cyberattack leading to the theft of over 550 GB of sensitive data. Exposed files include a full SQL database backup, employee records, confidential company financial information, bank records, patients' perso…
Due to cyberattack at least 600Gb of sensitive data leaked in "Ohio Living Home Health & Hospice" in April 2026. It known that at least 5000 files with personal data were stolen, among whole it contained employee records, driver licenses, patient personal d…
A "Laurel Institutes" company suffered a cyberattack that led to the theft of approximately 50+ GB of sensitive data. Exposed files include financial confidential papers, bank records and medical personal information. Personal data of more than 1,000 studen…
At least 35gb of sensitive data was stolen from Labpharmacorp.com The unauthorized access resulted in the exfiltration of a vast internal archive. Among the extracted files are personal dossiers belonging to the workforce, an extensive collection of medical…
Due to cyberattack on Genesis more than 75Gb of company personal data was stolen. Leakage contains big amount of sensitive data such as personal emlpoyes documents, company's customers data, bank and financial information documents. About 50 000 files are n…
A sophisticated cyberattack in the company's network led to a massive data breach. As a result of the incident, approximately 1 TB of data was leaked, including confidential personal and financial information.
As a result of a successful cyberattack on the company, MECA suffered damage; more than 500 GB of confidential information was stolen, specifically the company’s customer data, important financial documents, and the personal data of the organization’s emplo…
AIDark Project claims to have listed Long-Lewis Automotive Group on its extortion site, per Ransomware.live. This is an unverified claim, not a confirmed breach.
Due to cyberattack on Sutherland Packaging more than "200" Gb of company data was stolen. Leakage contains big amount of sensitive data such as company's customers data, bank and financial information documents. About 250 000 files are not secured by Suther…
The company "Storer Transportation" and "Storer Coachways" was attacked, resulting in the theft of more than 50,000 folders (240+ GB) of the company’s confidential information, including more than 1,500 pieces of employee personal data, financial and bankin…
Due to cyberattack on Rocky Mount Recyclers more than 40Gb of company personal data was stolen. Leakage contains big amount of sensitive data such as personal emlpoyes documents, company's customers data, bank and financial information documents. About 12,0…
The leak of more then 250Gb FMC medical data encompasses a wide range of document types, including patient registration forms, lab test results, treatment plans, prescription records, and personal insurance information. In addition, employee personnel files…
AIDark Project claims to have listed manufacturing firm Mayco International on its extortion site, per Ransomware.live. This is an unverified claim.
AIUnverified extortion-site listing claims Dark Project has targeted Brainhunter Companies LLC and Brainhunter Systems Ltd, a professional services firm. The claim is unconfirmed.
AIDark Project claims to have listed Leviton, a manufacturing company, on its extortion site, per Ransomware.live. This is an unverified claim.
AIDark Project claims to have listed The Miller Group (sector: Other) on its extortion site, per Ransomware.live. This is an unverified claim, not a confirmed breach.
AIDark Project claims to have listed TSC Logistics, a transportation-sector firm, on its extortion site. This is an unverified ransomware listing per Ransomware.live.
AIDark Project claims to have listed Reid Electric Service, Inc, an energy & utilities firm, on its extortion site per Ransomware.live. This is an unverified claim.