rift.cysentrix
← Back to actors

Threat actor

Orova

37 observed events

AIOrova is observed exclusively conducting ransomware activity, with reported impacts across manufacturing, professional services, financial services, and an unspecified sector. Listed victim locations include the United States and Hong Kong, based on the supplied observations.

Activity type

Ransomware
37

Verification

Claim
37

Top sectors

Other
6
Professional Services
3
Healthcare
2
Manufacturing
2
Agriculture and Food Production
1

Top countries

US
14
HK
2

Observed events

Claim High Ransomware

First Baptist Church of Belleview

AIOrova claims to have listed First Baptist Church of Belleview on its extortion site, per Ransomware.live. The listing is an unverified claim; no data details are confirmed.

Actor Orova 1 source
Records Undisclosed
Claim High Ransomware

Hilliard's Air Conditioning & Heating Inc

AIOrova claims to have listed Hilliard's Air Conditioning & Heating Inc, a professional services firm, on its extortion site. This is an unverified claim per ransomware.live.

Actor Orova 1 source
Records Undisclosed
Claim High Ransomware

Gemstone UK

AIOrova has listed Gemstone UK on its extortion site per Ransomware.live, claiming a breach. The claim is unverified; no details are provided.

Actor Orova 1 source
Records Undisclosed
Claim High Ransomware

St Theresa Catholic Church

AIOrova has listed St Theresa Catholic Church on Ransomware.live, claiming to have breached the organization. This is an unverified extortion-site claim, not a confirmed incident.

Actor Orova 1 source
Records Undisclosed
Claim High Ransomware

Stoneybrook West Master Association, Inc

AIOrova claims to have listed Stoneybrook West Master Association, Inc on its extortion site, per Ransomware.live. This is an unverified claim.

Actor Orova 1 source
Records Undisclosed
Claim High Ransomware

Stonecrest POA

AIOrova claims to have listed Stonecrest POA (sector: Other) on its extortion site, per Ransomware.live. This is an unverified claim; no breach is confirmed.

Actor Orova 1 source
Records Undisclosed
Claim High Ransomware

Magnolia Dental

AIOrova claims to have listed Magnolia Dental, a healthcare organization, on its extortion site per Ransomware.live; the claim is unverified.

Actor Orova 1 source
Records Undisclosed
Claim High Ransomware

Country Oaks Veterinary Clinic

AIRansomware group Orova has listed Country Oaks Veterinary Clinic, a healthcare organization, on its extortion site, claiming to have breached the clinic. The claim is unverified.

Actor Orova 1 source
Records Undisclosed
Claim High Ransomware

David King Architect

AIRansomware group Orova listed David King Architect, a professional services firm, on its extortion site, claiming a breach. The claim is unverified per Ransomware.live.

Actor Orova 1 source
Records Undisclosed
Claim High Ransomware

Woodside Ranch

AIExtortion site listing claims Orova has data from Woodside Ranch, an agriculture and food production organization. This is an unverified claim.

Actor Orova 1 source
Records Undisclosed
Claim High Ransomware

eSysTech

Software Company URL Open https://www.esystech.com.br/ in a new tab| May 24, 2026 19,321 files| 32.20 GB| Watch Data Open watch data link for eSysTech in a new tab The company offers customized software solutions and develops new modules and platforms to en…

Actor Orova 1 source
Records Undisclosed
Claim High Ransomware

ADG Healthcare

ADG Healthcare is a company that operates in the Medical Specialists industry. It employs 250to499 people and has 10Mto25M of revenue. The company is headquartered in Cairo, Cairo, Egypt.

Actor Orova 1 source
Records Undisclosed
Claim High Ransomware

Ultra Fame

As PCB design continues to evolve in complexity and customization, we believe that outstanding circuit layouts are built on a strong engineering foundation and a deep understanding of our clients’ needs. From simple double-layer boards to advanced multi-lay…

Actor Orova 1 source
Records Undisclosed
Claim High Ransomware

DBM Reflex

DBM Technology Co., Ltd. is a leading brand in electroforming mold cores in Asia, established in 1999. With a team of over 70 professionals, the company specializes in mold core design and high-quality electroformed mold production, having produced more tha…

Actor Orova 1 source
Records Undisclosed
Claim High Ransomware

Agricultural Chemical Solutions

Agricultural Chemical Solutions, Inc. provides high-quality agricultural chemicals and a comprehensive marketplace aimed at enhancing farming operations. They offer a wide range of products including pesticides, herbicides, fungicides, and micro nutrients, …

Actor Orova 1 source
Records Undisclosed
Claim High Ransomware

SBI Manufacturing

SBI Manufacturing is a family-owned company based in Sioux Falls, SD, specializing in metal fabrication and machine welding. They provide services primarily to the agricultural, industrial, and transportation sectors.

Actor Orova 1 source
Records Undisclosed
Claim High Ransomware

Northeastern Communications & ElectricalNortheastern Communications & Electrical

Northeastern Communications & Electrical LLC, based in Middletown, Connecticut, specializes in the installation of voice, data, and video systems for various building types, including small, medium, and large-scale projects. The company prides itself on del…

Actor Orova 1 source
Records Undisclosed
Claim High Ransomware

Apollo Office System

Since our establishment in May 1970 as an office equipment sales company, we have provided one-stop services to propose office rationalization and a more comfortable office environment. View image 1 of 2View image 2 of 2

Actor Orova 1 source
Records Undisclosed
Claim High Ransomware

Texas Medical Screening

Texas Medical has helped organizations deliver health screenings without the overhead. Our self-service kiosks are trusted in workplaces, pharmacies, and community spaces across the country.

Actor Orova 1 source
Records Undisclosed
Claim High Ransomware

EMPYREAN INT’L TECHNO DEVICES

Taiwan-based telecom and electronics accessories company. They specialize in wearable accessories, such as digital watches and related gear.

Actor Orova 1 source
Records Undisclosed
Claim High Ransomware

Sc Regional Housing Authority

Government Company URL Open https://www.scrha.net in a new tab| Jun 29, 2026 20,407 files| 10.90 GB| Watch Data Open watch data link for Sc Regional Housing Authority in a new tab SCRHA3 provides affordable housing solutions across South Carolina, focusing …

Actor Orova 1 source
Records Undisclosed
Claim High Ransomware

FixIT Tek

AIOrova has listed FixIT Tek (Technology sector) on its extortion site, claiming to hold data from the organization. This is an unverified claim per Ransomware.live.

Actor Orova 2 sources
Records Undisclosed
Claim High Ransomware

Bjs Insurance & Financial

BJS Insurance Services, Inc. was established upon two underlying principles that continue to define the company today.... Integrity and Stability. We're all about Service, we just do what we say we're going to do. We listen to our clients and suggest what p…

Actor Orova 1 source
Records Undisclosed
Claim High Ransomware

Wisdom Oral Surgery

Wisdom Oral Surgery, located in Fair Lawn, NJ, specializes in a wide range of oral surgery services including dental implants, wisdom teeth extractions, bone grafting, and facial trauma care. The clinic is dedicated to providing exceptional patient comfort …

Actor Orova 1 source
Records Undisclosed
Claim High Ransomware

SURE TRAVEL COMPANY

SURE TRAVEL COMPANY LIMITED was incorporated on 24-JAN-2000 as a Private company limited by shares registered in Hong Kong.

Actor Orova 1 source
Records Undisclosed
Claim High Ransomware

Cardiology Associates

Serving the community for over 45 years, Cardiology Associates of Port Huron, P.C. offers the latest in cardiac procedures and technology, helping our qualified physicians to detect and provide comprehensive treatment for a wide variety of adult heart and a…

Actor Orova 1 source
Records Undisclosed
Claim High Ransomware

Yost Home Improvements

Yost Home Improvements is a family-owned exterior remodeling and construction company based in Waterford, Connecticut, serving the southeastern CT region for over 50 years. They specialize in installing vinyl siding, windows, doors, gutters, roofing, and su…

Actor Orova 1 source
Records Undisclosed
Claim High Ransomware

KINGSSON

Manufacturing Company URL Open https://www.kingsson.com.tw/ in a new tab| Jul 23, 2026 9,851 files| 12.30 GB| Watch Data Open watch data link for KINGSSON in a new tab KINGSSON primarily operates as an OEM/ODM manufacturer, supplying customized security sea…

Actor Orova 1 source
Records Undisclosed
Claim High Ransomware

SSI HOLDING (FAR EAST) LIMITED

AIMING at streamlining all aspects of business, procuring excellent quality of management and strengthening connexion of our well established affilated companies, S.S.I. Holding (Far East) Limited was found in November of 1995 with association of Simex Spor…

Actor Orova 1 source
Records Undisclosed
Claim High Ransomware

Sanrio Hong Kong Co., Ltd

Retail Company URL Open https://www.sanrio.com.hk/ in a new tab| Jul 29, 2026 19,610 files| 42.00 GB| Watch Data Open watch data link for Sanrio Hong Kong Co., Ltd in a new tab Sanrio is the global lifestyle brand best known for Hello Kitty who was created …

Actor Orova 1 source
Records Undisclosed
Claim High Ransomware

Hong Kong JK Capital Management Limited

JK Capital Management Limited is an asset management company set up in Hong Kong in 1997 and regulated by the Securities and Futures Commission of Hong Kong. We are GIPS and MIFID II compliant. Our mutual funds are all registered with CSSF, the Luxembourg r…

Actor Orova 1 source
Records Undisclosed
Claim High Ransomware

United States Global Friction Products, Inc

GLOBAL FRICTION PRODUCTS, INC is a company that manufactures, repairs, and /or re-arcs brake and clutch bands back to original drum for even wear on friction material. We specialize in the construction, mining, marine and offshore industries, i.e., cranes, …

Actor Orova 1 source
Records Undisclosed
Claim High Ransomware

Tat Fung Textile Co., Ltd.

AIOrova claims to have listed Tat Fung Textile Co., Ltd., a manufacturing firm, on its extortion site. This is an unverified claim per Ransomware.live.

Actor Orova 2 sources
Records Undisclosed
Claim High Ransomware

Integrated Site Management

AIOrova has listed Integrated Site Management, a Professional Services firm, on its extortion site, claiming to have breached the organization. This is an unverified claim per Ransomware.live; no details are confirmed.

Actor Orova 2 sources
Records Undisclosed
Claim High Ransomware

Conceptual Designs, Inc.

AIOrova has listed Conceptual Designs, Inc. on its extortion site, claiming a breach. Per Ransomware.live, this is an unverified claim; the sector is listed as Other.

Actor Orova 2 sources
Records Undisclosed
Claim High Ransomware

JK Capital Management Limited

AIOrova listed JK Capital Management Limited, a financial services firm, on its extortion site, claiming a breach. This is an unverified claim.

Actor Orova 2 sources
Records Undisclosed
Claim High Ransomware

Global Friction Products, Inc

AIOrova claims to have listed Global Friction Products, Inc, a manufacturing firm, on an extortion site. This unverified allegation, tracked via Ransomware.live, names the company as a victim but has not been confirmed.

Actor Orova 2 sources
Records Undisclosed