Close Menu

ABYSS-DATA · Threat actor profile

// THREAT ACTOR

ABYSS-DATA_

Active

ABYSS-DATA is a ransomware operator tracked through its public data-leak infrastructure. The group operates under the double-extortion model that defines the modern ransomware ecosystem — file encryption combined with the threat of stolen-data publication on a public leak site — and continues to post fresh victim claims as part of an ongoing extortion campaign.

For Ransomnews editorial coverage of ABYSS-DATA — incident write-ups, attribution notes, and additional context — see the Threat Groups archive or run a site search.

91 Victims tracked
16 / 47 Active mirrors
2023-03-20 First listing
2026-06-01 Most recent

Victims by year

  • 2026 5
  • 2025 13
  • 2024 42
  • 2023 31

Leak site mirrors

47 mirrors tracked, 16 currently reachable. These are criminal-infrastructure URLs — links are deliberately not provided.

  • 3ev4metjirohtdpshsqlkrqcmxq6zu3d7obrdhglpy5jpbr7whmlfgqd.onion Abyss-data snapshot · 2026-08-06 21:16
  • ufvi7hpcawesdklmommeeq4iokhq2km4hay3dwh4rirth5xaomle35id.onion Hello snapshot · 2026-08-06 21:33
  • t7ogwvu74a6flssns55yv7zw2xvssqbhrdbxqrwbahumyzwklnvqayid.onion snapshot · 2025-02-19 12:07
  • gmxnejtsg3uiwopmnsooxbi3p2nukwemkvm7bg44tgbbnuuuyofqjfyd.onion snapshot · 2025-02-19 12:04
  • jtjz6utbmabwcatyomwxaeum7ey7nxs7yooqflxhctnksjqsnammonqd.onion snapshot · 2024-10-17 07:00
  • 2mhkqjcw4auxop7auchz2iijcbj63qccwodtokofbb2ul5oejkkt6xyd.onion snapshot · 2024-10-17 06:00
  • wka7ma7rzgmzmtn65dhv5zp5p6e3uv5sydnns7xsf6kpf7noukhchhqd.onion snapshot · 2024-10-17 09:00
  • l3yeoyhnphtymqua5env7qitedmqv5ahe7waxgndwa64z2c2h3cjjhqd.onion snapshot · 2025-02-19 11:05
  • 2j45tydxcvm44jbyr6krhx77rzey3jtif5qdjak2gik4usoljvvhqaid.onion snapshot · 2025-02-19 12:00
  • cuft7z2xlfogrtx4ddqnjqyerye2qtagksow2fip4xbb5iw7dsgtvhqd.onion snapshot · 2024-10-17 06:00
  • wyz32kscr2ythqpyjwqfxcaxn5576fdurr7jag44gggnmi4cvhykhvid.onion snapshot · 2025-02-19 11:08
  • 3pb6cefz6hubgyb2ph7ua7yjzjpxwapbbp5zomz7xmvrjhjfykjwu6id.onion snapshot · 2024-10-17 09:01
  • kn4spxunete4ddz7375i2wpnj4vvkir7wdmcg2pc5yod56lmb54nbayd.onion snapshot · 2025-02-19 11:37
  • 2ikvareyuw2wjnc4vb5yteq7d2tkg6k3gevnixzqtkn3cpvej6ajj4yd.onion snapshot · 2024-10-17 08:00
  • wflff64dxxqvfhd7poarkvkphmibdjyyhv7h4zqo5m52ggsgncmbrbqd.onion snapshot · 2025-02-19 11:35
  • frheu6drsqpehmuyrdxdrfu5bzqwxps4zlmnuxlcnxskwxcwqsyhwxyd.onion snapshot · 2025-02-19 12:10
  • kceqbaoxmx2czutxty3mq35m5mv46dq66hpszrhbhduj7uwhu6ax3qad.onion snapshot · 2025-02-19 12:15
  • 4nsmlpz4qceow7bfrmarxdqaj7chcqobin3mzb27uhscb2yvjs6j4xqd.onion snapshot · 2025-02-19 11:01
  • nka6xgyyu77ksb5xmmovp4en2hrkg53mfq2osql526oe7nybnlggfgid.onion snapshot · 2025-02-19 12:07
  • mflnjnwfinorxxsgkyfel3fqanbtbbrl5k5mqqjwmrf7o3jc6a4hy3id.onion snapshot · 2025-02-19 12:17
  • jtt4lqatjtrj5hxxi33dczkluouf5wivzdmy4v62dnhipk6ixk5mktad.onion snapshot · 2025-02-19 12:16
  • udugclljnfcx34amtpddkjggmkfqci5xnlfef2hqtxstufulo3pvauid.onion snapshot · 2025-02-19 11:31
  • vmmefm7ktazj2bwtmy46o3wxhk42tctasyyqv6ymuzlivszteyhkkyad.onion snapshot · 2025-02-19 11:09
  • cfev2mvlqooohl3af2upkgu3ju4qcgqrrgh6sprfxkgh3qldh2ykxzyd.onion snapshot · 2025-02-19 12:17
  • 2fzahjlleflpcyecd245xe3q6tczjkwzcm4fbhd4q4bsun45y2csyayd.onion snapshot · 2025-02-19 12:10
  • wpefgvpyuszr4vg444qed734big233itylqclte7usszbdbfyqvb2lqd.onion snapshot · 2025-02-19 11:20
  • gvzbeu532wwxqze3v3xcxpsbhpvwusnajzahi55dqklbunzgjp5wchad.onion snapshot · 2025-02-19 12:09
  • ieelfdk3qr6as2u5cx3kfo57pdu6s77lis3lafg5lx5ljqf2izial6ad.onion snapshot · 2025-02-19 11:40
  • yuhflx7yjk52jedcrtb3ne235mmykqfwc6jarby7lxxgv26ep7x4qjqd.onion snapshot · 2025-02-19 12:16
  • zngbsq66uwem4qzyxpqb5rjo2xebnbwdku27nhmquryx6ljnbbedhiad.onion Hello snapshot · 2026-08-06 21:38

Recent victims

The 50 most recent victims claimed by ABYSS-DATA. Total in the index: 91.

Date listed Victim Description
2026-06-01 School Facility Consultants s-f-c.org 1.3Tb uncompressed data
2026-06-01 landkreis-limburg-weilburg.de landkreis-limburg-weilburg.de 132Gb uncompressed data
2026-05-14 technic.com technic.com
2026-02-26 thinlinetech.com thinlinetech.com 29Gb uncompressed data
2026-01-26 sitoy.com sitoy.com 1.7Tb uncompressed data
2025-12-10 dillonyarn.com dillonyarn.com 117Gb uncompressed data
2025-09-22 optimumdesign.com optimumdesign.com 795Gb uncompressed data
2025-09-11 moinian.com moinian.com 4.7Tb uncompressed data
2025-07-26 hptc.org hptc.org 1.8Tb uncompressed data
2025-04-02 crownlaboratories.com crownlaboratories.com 8Tb uncompressed data
2025-03-28 entandallergy.com entandallergy.com 139Gb uncompressed data
2025-03-15 mdm-insurance.com mdm-insurance.com 2Tb uncompressed data
2025-03-03 ceratec.com ceratec.com 700Gb uncompressed data
2025-02-15 halex.com halex.com 39Gb uncompressed data
2025-02-02 Four Eye Clinics 313Gb uncompressed data
2025-02-02 jpcgroupinc.com jpcgroupinc.com 178Gb uncompressed data
2025-01-25 envirosep.com envirosep.com 304Gb uncompressed data
2025-01-08 kingpower.com kingpower.com 1.2Tb uncompressed data
2024-12-21 berkotfoods.com berkotfoods.comt 968Gb uncompressed data
2024-12-19 bataviacontainer.com bataviacontainer.com 506Gb uncompressed data
2024-12-06 pez.com pez.com 1.1Tb uncompressed data
2024-11-25 glts.net glts.net 1.1Tb uncompressed data
2024-10-29 projektalp.ch projektalp.ch 120Gb uncompressed data
2024-10-29 anhf.org.auh anhf.org.au 1.5Tb uncompressed data
2024-10-15 In the depths of software development. Unlocking the secrets of Promise Technology, Inc. Today we publish the first part from a major leak at Promise Technolog…
2024-10-11 promise.com promise.com 1.8Tb uncompressed data
2024-10-09 victrongroup.com victrongroup.com 2.3Tb uncompressed data
2024-09-26 tolsa.com tolsa.com 5.1Tb uncompressed data
2024-09-23 f-t.com f-t.com 8.4Tb uncompressed data
2024-09-19 tims.com tims.com 680Gb uncompressed data
2024-09-14 ecbawm.com ecbawm.com 246Gb uncompressed data
2024-08-30 pfsbrands.com pfsbrands.com 1.3Tb uncompressed data
2024-08-28 comtruck.ca comtruck.ca 1Tb uncompressed data
2024-08-23 idahopacific.com idahopacific.com 3.5Tb uncompressed data
2024-08-21 spvmhc.org spvmhc.org 15Gb uncompressed data
2024-08-11 robertshvac.com robertshvac.com 240Gb uncompressed data
2024-08-02 q-cells.de q-cells.de 5.4Tb uncompressed data
2024-07-28 zoppo.com zoppo.com 233Gb uncompressed data
2024-07-25 crimsonwinegroup.com crimsonwinegroup.com.com 1.6Tb uncompressed data
2024-07-15 greenlightbiosciences.com greenlightbiosciences.com 726Gb uncompressed data
2024-06-27 landmarklife.com landmarklife.com 2.4Tb uncompressed data
2024-06-27 conferenceusa.com conferenceusa.com 1Tb uncompressed data
2024-06-25 tpocc.org tpocc.org 570Gb uncompressed data
2024-06-18 malca-amit.com malca-amit.com 30Gb + VMware images CHKC-NGSQL.MAFE.COM HKG-TSPLS.MAF…
2024-05-07 woldae.com woldae.com 9.7Tb uncompressed data
2024-04-23 rangam.com rangam.com 1.1Tb uncompressed data
2024-03-29 rameywine.com rameywine.com 61Gb uncompressed data
2024-03-27 lindquistinsurance.com lindquistinsurance.com 12Gb uncompressed data
2024-03-14 iamdesign.com iamdesign.com 78Gb uncompressed data
2024-03-14 yarco.com yarco.com 1.9Tb uncompressed data

← Back to Ransomtracker

Statistics on this page are computed by Ransomnews from a live leak-site monitoring feed. Numbers update every ten minutes. Operator-written victim descriptions are truncated and shown in snippet form only. Source data: RansomLook (CC BY 4.0), aggregated and adapted by Ransomnews.