Close Menu
  • Home
  • News
  • Security
  • Privacy
  • Cybercrime
    • Threat Groups
    • Ransomware
    • Explainers
    • Stealer Logs
  • AI
  • OSINT
  • Tools
    • Ransomtracker
    • Stealercheck
    • FortiBleed Checker
  • About Us
Facebook X (Twitter) Instagram Threads
Ransomnews
  • Home
  • News
  • Security
  • Privacy
  • Cybercrime
    • Threat Groups
    • Ransomware
    • Explainers
    • Stealer Logs
  • AI
  • OSINT
  • Tools
    • Ransomtracker
    • Stealercheck
    • FortiBleed Checker
  • About Us
Facebook X (Twitter) LinkedIn
Ransomnews

3AM · Threat actor profile

// THREAT ACTOR

3AM_

Active

3AM is a ransomware operator tracked through its public data-leak infrastructure. The group operates under the double-extortion model that defines the modern ransomware ecosystem — file encryption combined with the threat of stolen-data publication on a public leak site — and continues to post fresh victim claims as part of an ongoing extortion campaign.

For Ransomnews editorial coverage of 3AM — incident write-ups, attribution notes, and additional context — see the Threat Groups archive or run a site search.

94 Victims tracked
2 / 3 Active mirrors
2023-09-17 First listing
2026-08-05 Most recent

Victims by year

  • 2026 16
  • 2025 24
  • 2024 35
  • 2023 19

Leak site mirrors

3 mirrors tracked, 2 currently reachable. These are criminal-infrastructure URLs — links are deliberately not provided.

  • threeamkelxicjsaf2czjyz2lc4q3ngqkxhhlexyfcp2o6raw4rphyad.onion Verify snapshot · 2026-08-06 21:15
  • ulkvlj5sirgrbnvb4hvbjo2ex2c2ceqe2j4my57fcdozpbq5h5pyu7id.onion 403 Forbidden snapshot · 2025-01-09 21:21
  • threeam7fj33rv5twe5ll7gcrp3kkyyt6ez5stssixnuwh4v3csxdwqd.onion Enter the key snapshot · 2026-08-06 21:39

Recent victims

The 50 most recent victims claimed by 3AM. Total in the index: 94.

Date listed Victim Description
2026-08-05 clubonecasino.com Club One Casino is the premier poker room in Central California, featu…
2026-07-08 tws-tac.net While ownership has changed over the years, the company has remained l…
2026-06-29 guardianbarrierservices.com Guardian Barrier Services provides a wide range of products and servic…
2026-06-27 acemacon.org The Academy for Classical Education is dedicated to fostering knowledg…
2026-06-12 jetmachprod.com Jet Machined Products specializes in high-performance milled and turne…
2026-06-12 jastrebarsko.hr Town of Jastrebarsko, a historic city in Central Croatia located betwe…
2026-06-12 palmero.com Palmero is a company dedicated to the manufacturing and marketing of c…
2026-06-12 insamani.com.ar INSA INDELMA S.A. is a leading agro-industrial company in Argentina sp…
2026-06-12 bsynchro.com BSynchro Holding is an insurtech software provider that specializes in…
2026-06-12 molinoscabodi.com.ar Molinos Cabodi Hnos. S.A. has been providing high-quality flour produc…
2026-06-12 ws.com.br WS Group Brasil is a Brazilian operations and business services provid…
2026-06-12 consultic.be ConsulTIC specializes in IT solutions, offering services such as appli…
2026-06-12 amc.org.au The Australian Medical Council (AMC) is an independent national standa…
2026-06-12 agroexportavocados.com Agro Industrial Exportadora SA de CV (AGRIEXP) is a Mexican holding co…
2026-06-12 hoplongtech.com Công ty Cổ phần Công Nghệ Hợp Long is a leading distributor of automat…
2026-06-12 mgrlaw.com Mogren, Glessner & Ahrens Law Firm is a full-service law firm located …
2025-11-25 aceforwarding.com Ace Forwarding started out in 1994 as a small operation with a single …
2025-11-18 ic-controls.com Industrial Controls SAC, desde 1994 ofrece a nivel nacional, desarroll…
2025-10-16 bun.nl Bun creëert woon-, werk- en leefruimte voor iedereen en van de beste k…
2025-10-02 hsjlawyers.com Founded in 1971, HSJ Lawyers is a prominent law firm located in Prince…
2025-09-04 townofnorwell.net The Town of Norwell MA offers a variety of municipal services includin…
2025-09-04 curedentalbeltontx.com Cure Dental is a company that operates in the Dental Offices industry.…
2025-09-04 austinplasticandreconstructivesurgery.com Austin Plastic Reconstructive Surgery, led by Board-Certified Plastic …
2025-07-19 sequoiadental.com Sequoia Dental Office provides a wide range of dental services includi…
2025-06-28 wyomingcountyny.gov
2025-05-25 vazirilaw.com
2025-04-10 gosvt.com
2025-04-10 neffendorfblockercpa.com
2025-04-10 jastreet.com
2025-04-10 icmtx.com
2025-04-10 dbhcares.com
2025-04-10 icgad.com
2025-04-10 iss-na.com
2025-04-10 kkp.law
2025-02-13 leonardo.com
2025-02-12 sehma.com
2025-02-05 corehandf.com
2025-01-30 soitinlaine.fi
2025-01-15 anwsd.org
2025-01-09 hapsch.de
2024-12-17 kuritaamerica.com
2024-12-04 hobokennj.gov
2024-11-13 midstatesindustrial.com
2024-10-31 anuenterprise.com.au
2024-10-31 inhometexas.com
2024-10-31 caillau.com.br
2024-10-31 sandray.com
2024-10-31 mpspromotions.com
2024-10-31 freedomhomecare.net
2024-10-24 carolinaarthritis.com

← Back to Ransomtracker

Statistics on this page are computed by Ransomnews from a live leak-site monitoring feed. Numbers update every ten minutes. Operator-written victim descriptions are truncated and shown in snippet form only. Source data: RansomLook (CC BY 4.0), aggregated and adapted by Ransomnews.

Facebook X (Twitter) LinkedIn
© 2026 Ransomnews.com

Type above and press Enter to search. Press Esc to cancel.

Cookies on Ransomnews

We use strictly-necessary cookies to run the site and may use first-party analytics to understand which articles are read. Some pages contain affiliate links — when you click one, the affiliate network sets cookies on the merchant's domain to attribute the referral. See the Cookie Policy and Affiliate Disclosure for detail.

RANSOMNEWS.COM

Tracking the criminal infrastructure of the internet.

Independent coverage of ransomware, breach economics, threat actors, privacy, AI security, and the open-source investigation toolkit.

// Topics

  • News
  • Security
  • Privacy
  • Cybercrime
  • AI
  • OSINT
  • Threat Groups
  • Stealer Logs
  • Ransomtracker
  • Stealercheck
  • FortiBleed Checker

// Site

  • About Us
  • Editorial Team
  • Contact
  • Tip Line
  • Editorial

// Legal

  • Privacy Policy
  • Terms of Service
  • Cookie Policy
  • Funding & Independence
  • RSS Feed
© 2026 Ransomnews.com · Tracking the criminal infrastructure of the internet.