Everest
Data-extortion and initial-access broker; energy, utilities and financial targets.
Claimed victims
305
Top region
US
Top sector
Technology
Suspected origin
Unattributed
Latest claimed victims
Victims as claimed by the group on its leak site and tracked in our graph — claims are not independently verified, and listing here is not confirmation a breach occurred.
| Date | Organisation (claimed) | Sector | Country |
|---|---|---|---|
| 2026-09-25 | Securitas Group | Professional Services | SE |
| 2026-09-25 | Morula IVF | Healthcare | ZA |
| 2026-09-25 | Reliance Audit | Professional Services | — |
| 2026-09-25 | UNIRITA | Technology | JP |
| 2026-09-25 | CENELEC | Professional Services | BE |
| 2026-09-25 | ETS | Education | — |
| 2026-09-07 | GGS | Not Found | — |
| 2026-09-07 | KÖRBER | Manufacturing | DE |
| 2026-09-07 | GENESILICO | Technology | IT |
| 2026-09-01 | Rise UP | Technology | — |
Regions targeted
US 21JP 4DE 4IT 3IN 3AE 3BE 2FR 2
Sectors targeted
Technology 17Professional Services 11Financial Services 9Healthcare 7Manufacturing 5Transportation 3
Track it daily
Ransomware moves every day. So does our paper.
The Probably Fine Daily is our morning threat-intelligence briefing — new victims, new groups, what actually matters, in plain English. Free.
Read today's Daily →Browse the archiveDefender-oriented threat intelligence. Nothing here assists an attack. Attribution and lineage reflect open-source reporting.