Ransomware claims
Public listings by ransomware groups naming a Romania-linked organisation. A listing here is aclaim, not proof of compromise, unless independently confirmed.
- Ransomware claimRomania link: high confidence
SC PaderTeG Cabluri Electrice: ransomware group listing (unconfirmed claim)
Qilin listed SC PaderTeG Cabluri Electrice on a data-leak site monitored by public ransomware intelligence sources. Not independently confirmed.
- Ransomware claimRomania link: high confidence
AGROLAND S.A.: ransomware group listing (unconfirmed claim)
Qilin listed AGROLAND S.A. on a data-leak site monitored by public ransomware intelligence sources. Not independently confirmed.
- Ransomware claimRomania link: high confidence
Harplast SRL: ransomware group listing (unconfirmed claim)
Qilin listed Harplast SRL on a data-leak site monitored by public ransomware intelligence sources. Not independently confirmed.
- Ransomware claimRomania link: high confidence
Universitatea De Vest Vasile Goldi Din Arad: ransomware group listing (unconfirmed claim)
Qilin listed Universitatea De Vest Vasile Goldi Din Arad on a data-leak site monitored by public ransomware intelligence sources. Not independently confirmed.
- Ransomware claimRomania link: high confidence
sms-sme.com: ransomware group listing (unconfirmed claim)
Lockbit5 listed sms-sme.com on a data-leak site monitored by public ransomware intelligence sources. Not independently confirmed.
- Ransomware claimRomania link: high confidence
Universitatea de Vest „Vasile Goldiș” din Arad: ransomware group listing (unconfirmed claim)
Qilin listed Universitatea de Vest „Vasile Goldiș” din Arad on a data-leak site monitored by public ransomware intelligence sources. Not independently confirmed.
- Ransomware claimRomania link: high confidence
STEP Oiltools: ransomware group listing (unconfirmed claim)
dragonforce listed STEP Oiltools on a data-leak site monitored by public ransomware intelligence sources. Not independently confirmed.
- Ransomware claimRomania link: high confidence
fineconsulting: ransomware group listing (unconfirmed claim)
incransom listed fineconsulting on a data-leak site monitored by public ransomware intelligence sources. Not independently confirmed.
- Ransomware claimRomania link: high confidence
Distrigaz Vest S.A.: ransomware group listing (unconfirmed claim)
incransom listed Distrigaz Vest S.A. on a data-leak site monitored by public ransomware intelligence sources. Not independently confirmed.
- Ransomware claimRomania link: high confidence
netromsoftware.ro: ransomware group listing (unconfirmed claim)
apt73 listed netromsoftware.ro on a data-leak site monitored by public ransomware intelligence sources. Not independently confirmed.
- Ransomware claimRomania link: high confidence
Biotehnos: ransomware group listing (unconfirmed claim)
lamashtu listed Biotehnos on a data-leak site monitored by public ransomware intelligence sources. Not independently confirmed.
- Ransomware claimRomania link: high confidence
aplast.ro: ransomware group listing (unconfirmed claim)
lockbit5 listed aplast.ro on a data-leak site monitored by public ransomware intelligence sources. Not independently confirmed.
- Ransomware claimRomania link: high confidence
conrepsa.ro: ransomware group listing (unconfirmed claim)
krybit listed conrepsa.ro on a data-leak site monitored by public ransomware intelligence sources. Not independently confirmed.
- Ransomware claimRomania link: high confidence
Siveco: ransomware group listing (unconfirmed claim)
coinbasecartel listed Siveco on a data-leak site monitored by public ransomware intelligence sources. Not independently confirmed.
- Ransomware claimRomania link: high confidence
Comtec 2000: ransomware group listing (unconfirmed claim)
thegentlemen listed Comtec 2000 on a data-leak site monitored by public ransomware intelligence sources. Not independently confirmed.
- Ransomware claimRomania link: high confidence
primaria ungheni: ransomware group listing (unconfirmed claim)
killsec listed primaria ungheni on a data-leak site monitored by public ransomware intelligence sources. Not independently confirmed.
- Ransomware claimRomania link: high confidence
Stera Chemicals: ransomware group listing (unconfirmed claim)
lynx listed Stera Chemicals on a data-leak site monitored by public ransomware intelligence sources. Not independently confirmed.
- Ransomware claimRomania link: high confidence
cmcconstruct.com: ransomware group listing (unconfirmed claim)
lockbit5 listed cmcconstruct.com on a data-leak site monitored by public ransomware intelligence sources. Not independently confirmed.
- Ransomware claimRomania link: high confidence
Conpet S.A. (COTE.RO): ransomware group listing (unconfirmed claim)
qilin listed Conpet S.A. (COTE.RO) on a data-leak site monitored by public ransomware intelligence sources. Not independently confirmed.
- Ransomware claimRomania link: high confidence
MB Distribution: ransomware group listing (unconfirmed claim)
qilin listed MB Distribution on a data-leak site monitored by public ransomware intelligence sources. Not independently confirmed.
- Ransomware claimRomania link: high confidence
Ocean Fish: ransomware group listing (unconfirmed claim)
lynx listed Ocean Fish on a data-leak site monitored by public ransomware intelligence sources. Not independently confirmed.
- Ransomware claimRomania link: high confidence
Trend Import Export: ransomware group listing (unconfirmed claim)
obscura listed Trend Import Export on a data-leak site monitored by public ransomware intelligence sources. Not independently confirmed.
- Ransomware claimRomania link: high confidence
Complexul Energetic Oltenia: ransomware group listing (unconfirmed claim)
thegentlemen listed Complexul Energetic Oltenia on a data-leak site monitored by public ransomware intelligence sources. Not independently confirmed.
- Ransomware claimRomania link: high confidence
suzuki-ploiesti.ro: ransomware group listing (unconfirmed claim)
benzona listed suzuki-ploiesti.ro on a data-leak site monitored by public ransomware intelligence sources. Not independently confirmed.
- Ransomware claimRomania link: high confidence
poliserv.ro: ransomware group listing (unconfirmed claim)
benzona listed poliserv.ro on a data-leak site monitored by public ransomware intelligence sources. Not independently confirmed.
- Ransomware claimRomania link: high confidence
mazda-ploiesti.ro: ransomware group listing (unconfirmed claim)
benzona listed mazda-ploiesti.ro on a data-leak site monitored by public ransomware intelligence sources. Not independently confirmed.
- Ransomware claimRomania link: high confidence
dacia-ploiesti.ro: ransomware group listing (unconfirmed claim)
benzona listed dacia-ploiesti.ro on a data-leak site monitored by public ransomware intelligence sources. Not independently confirmed.
- Ransomware claimRomania link: high confidence
Blue Projects: ransomware group listing (unconfirmed claim)
qilin listed Blue Projects on a data-leak site monitored by public ransomware intelligence sources. Not independently confirmed.
- Ransomware claimRomania link: high confidence
National Institute of Materials Physics: ransomware group listing (unconfirmed claim)
nova listed National Institute of Materials Physics on a data-leak site monitored by public ransomware intelligence sources. Not independently confirmed.
- Ransomware claimRomania link: high confidence
National Institute of Administratio...: ransomware group listing (unconfirmed claim)
killsec listed National Institute of Administratio... on a data-leak site monitored by public ransomware intelligence sources. Not independently confirmed.
- Ransomware claimRomania link: high confidence
*******roup.ro: ransomware group listing (unconfirmed claim)
cloak listed *******roup.ro on a data-leak site monitored by public ransomware intelligence sources. Not independently confirmed.
- Ransomware claimRomania link: high confidence
nod.ro: ransomware group listing (unconfirmed claim)
safepay listed nod.ro on a data-leak site monitored by public ransomware intelligence sources. Not independently confirmed.
- Ransomware claimRomania link: high confidence
Asco Tools: ransomware group listing (unconfirmed claim)
worldleaks listed Asco Tools on a data-leak site monitored by public ransomware intelligence sources. Not independently confirmed.
- Ransomware claimRomania link: high confidence
prais.ro: ransomware group listing (unconfirmed claim)
safepay listed prais.ro on a data-leak site monitored by public ransomware intelligence sources. Not independently confirmed.
- Ransomware claimRomania link: high confidence
AAYLEX ONE S.A.: ransomware group listing (unconfirmed claim)
akira listed AAYLEX ONE S.A. on a data-leak site monitored by public ransomware intelligence sources. Not independently confirmed.
- Ransomware claimRomania link: high confidence
PARTNER.RO: ransomware group listing (unconfirmed claim)
clop listed PARTNER.RO on a data-leak site monitored by public ransomware intelligence sources. Not independently confirmed.
- Ransomware claimRomania link: high confidence
autogedal.ro: ransomware group listing (unconfirmed claim)
apt73 listed autogedal.ro on a data-leak site monitored by public ransomware intelligence sources. Not independently confirmed.
- Ransomware claimRomania link: high confidence
Acqua development: ransomware group listing (unconfirmed claim)
fog listed Acqua development on a data-leak site monitored by public ransomware intelligence sources. Not independently confirmed.
- Ransomware claimRomania link: high confidence
Societatea Energetica Electrica S.A.: ransomware group listing (unconfirmed claim)
lynx listed Societatea Energetica Electrica S.A. on a data-leak site monitored by public ransomware intelligence sources. Not independently confirmed.
- Ransomware claimRomania link: high confidence
Universitatea Politehnica din Bucuresti: ransomware group listing (unconfirmed claim)
fog listed Universitatea Politehnica din Bucuresti on a data-leak site monitored by public ransomware intelligence sources. Not independently confirmed.
- Ransomware claimRomania link: high confidence
autogedal.ro: ransomware group listing (unconfirmed claim)
funksec listed autogedal.ro on a data-leak site monitored by public ransomware intelligence sources. Not independently confirmed.
- Ransomware claimRomania link: high confidence
www.al-shefafarm.ro: ransomware group listing (unconfirmed claim)
babuk2 listed www.al-shefafarm.ro on a data-leak site monitored by public ransomware intelligence sources. Not independently confirmed.
- Ransomware claimRomania link: high confidence
bigotti.ro: ransomware group listing (unconfirmed claim)
safepay listed bigotti.ro on a data-leak site monitored by public ransomware intelligence sources. Not independently confirmed.
- Ransomware claimRomania link: high confidence
www.netromsoftware.ro: ransomware group listing (unconfirmed claim)
apt73 listed www.netromsoftware.ro on a data-leak site monitored by public ransomware intelligence sources. Not independently confirmed.
- Ransomware claimRomania link: high confidence
National Institute of Administration: ransomware group listing (unconfirmed claim)
killsec listed National Institute of Administration on a data-leak site monitored by public ransomware intelligence sources. Not independently confirmed.
- Ransomware claimRomania link: high confidence
sector5.ro: ransomware group listing (unconfirmed claim)
ransomhub listed sector5.ro on a data-leak site monitored by public ransomware intelligence sources. Not independently confirmed.
- Ransomware claimRomania link: high confidence
www.proflex.ro: ransomware group listing (unconfirmed claim)
ransomhub listed www.proflex.ro on a data-leak site monitored by public ransomware intelligence sources. Not independently confirmed.
- Ransomware claimRomania link: high confidence
Unita Turism: ransomware group listing (unconfirmed claim)
meow listed Unita Turism on a data-leak site monitored by public ransomware intelligence sources. Not independently confirmed.
- Ransomware claimRomania link: high confidence
agricola: ransomware group listing (unconfirmed claim)
qilin listed agricola on a data-leak site monitored by public ransomware intelligence sources. Not independently confirmed.
- Ransomware claimRomania link: high confidence
www.primariatm.ro: ransomware group listing (unconfirmed claim)
ransomhub listed www.primariatm.ro on a data-leak site monitored by public ransomware intelligence sources. Not independently confirmed.