// THREAT ACTOR
ALPHV_
ActiveALPHV — also known as BlackCat — was a Rust-based ransomware-as-a-service operation that emerged in late 2021 and quickly established itself as one of the most technically sophisticated families on the scene. Its affiliates targeted MGM Resorts, Caesars, and Change Healthcare. The group “exit-scammed” in early 2024 after seizing the ransom paid by Change Healthcare.
For Ransomnews editorial coverage of ALPHV — incident write-ups, attribution notes, and additional context — see the Threat Groups archive or run a site search.
773
Victims tracked
1 / 275
Active mirrors
2021-12-18
First listing
2024-03-03
Most recent
Victims by year
- 2024 60
- 2023 454
- 2022 244
- 2021 15
Leak site mirrors
275 mirrors tracked, 1 currently reachable. These are criminal-infrastructure URLs — links are deliberately not provided.
-
alphvmmm27o3abo3r2mlmjrpdmzle3rykajqc5xsj7j7ejksbpsa36ad.onionTHIS WEBSITE HAS BEEN SEIZED snapshot · 2024-06-25 20:07 -
2cuqgeerjdba2rhdiviezodpu3lc4qz2sjf4qin6f7std2evleqlzjid.onionStart-maximized.com snapshot · 2022-04-09 21:12 -
alphvmmm27o3abo3r2mlmjrpdmzle3rykajqc5xsj7j7ejksbpsa36ad.onion404 Not Found snapshot · 2024-06-25 20:07 -
vqifktlreqpudvulhbzmc5gocbeawl67uvs2pttswemdorbnhaddohyd.onionTHIS WEBSITE HAS BEEN SEIZED snapshot · 2024-06-25 20:02 -
alphvuzxyxv6ylumd2ngp46xzq3pw6zflomrghvxeuks6kklberrbmyd.onionTHIS WEBSITE HAS BEEN SEIZED snapshot · 2024-03-09 16:04 -
d75itpgjjfe2ys2qivqplbvmw3yyx7o5e4ppt2esit2lluhngulz4hqd.onionsnapshot · 2024-12-09 17:35 -
sty5r4hhb5oihbq2mwevrofdiqbgesi66rvxr5sr573xgvtuvr4cs5yd.onionsnapshot · 2024-12-09 17:36 -
xnsbsjciylsg23zfmrv6ocuyh7ha5zexeouchlr3zsi5suda4arpeyqd.onionsnapshot · 2024-12-09 17:36 -
24y6h7fwi2fvlv2kuzudyiumjqz4rgqcml2wr7te6ugcgt6qatqe64yd.onionsnapshot · 2024-12-11 13:57 -
2plv344u23ebuayurqcfbjbnxpqzqknja3ca7ulbnnwtgb6tpmqqsvid.onionsnapshot · 2024-12-11 13:57 -
2udgodqyt6jn7s7cb7n66kaisg7i6gxo5n64tnvlk7dee4d4rguojbid.onionsnapshot · 2024-12-11 13:57 -
3bkgnqvrdlzib4t62oyo22eqljdrjaxtwcsvgwystog6yiyx7j7b7nad.onionsnapshot · 2024-12-11 13:57 -
3fgntkytua2jb7rarvuchns6ka7tfh3uc6ypub3ffepjq3jekb3eypyd.onionsnapshot · 2024-12-11 13:57 -
3g7cqn66j3uwes7jah744u6fzuzymvnlubn67624jwvswoollqkjtzqd.onionsnapshot · 2024-12-11 13:57 -
3id2g6u3dwvg7nsarfkgsdf3odp5hb7owvnoqbipbisekudptetuxtad.onionsnapshot · 2024-12-11 13:57 -
3kqfll43jsj7boglorh5xntudnynlk6howi6ks543cctlrnid4dzwdad.onionsnapshot · 2024-12-11 13:57 -
3md3it5uxkebudflmlratms66jvwkrdphzoo4nzsvwh63niqpz42aeyd.onionsnapshot · 2024-12-11 13:57 -
3oz6naflgy7gbtc4psqumk4dd7meq37tjxw7qxhytuiysyq3632xgsqd.onionsnapshot · 2024-12-11 13:57 -
3s5pzwlqllrzz4xlluholmqgueje7lutlugbdnwa3ehbedrxaq5wjbad.onionsnapshot · 2024-12-11 13:57 -
3xa42kwkeiwzhjybddfeifad7vn2kvsslybquledvib5xsfkylwtwyid.onionsnapshot · 2024-12-11 13:57 -
425yxsnocj47lwgueymn7y4y4vrphccooa3diabzoqdl6cslxriqxrqd.onionsnapshot · 2024-12-11 13:57 -
4kfzqzfci7uqpgngrosuukgj2dr745cyqgenbaojycdykgxipabnyqyd.onionsnapshot · 2024-12-11 13:57 -
4mncnm5bl3jfotcgrn7zv2uznfzs2oo4sahwrlqvwcd265x6jdudkcid.onionsnapshot · 2024-12-11 13:57 -
4qmsi7vcdrrutxapxbc7eofjjzfsvam3fehgmk6xyivwcroqkqjij5qd.onionsnapshot · 2024-12-11 13:57 -
5e2q3uzczl3bur23dxfxxu5unlukuqrlseesmxc7v7dmo4qgbr3kaxqd.onionsnapshot · 2024-12-11 13:57 -
5ety7tpkim5me6eszuwcje7bmy25pbtrjtue7zkqqgziljwqy3rrikqd.onionOshi - Anonymous file storage snapshot · 2025-05-23 09:03 -
5hhrba7et452bt3ttwqewumlua5t3vyyr27iomrv2o3ae6of3l7hghad.onionsnapshot · 2024-12-11 13:57 -
5igait2ocdf7kfktyemdgdl6cot43ryecr5ycqid6drydhpuzibu54qd.onionsnapshot · 2024-12-11 13:57 -
5rosrz5d53usc6p7s7qjvvcqv4bbedvpjsv3dzls7kuend2i65s7peqd.onionsnapshot · 2024-12-11 13:57 -
6lbwfgybggslvhkbsfqo427sqnfhutb65wmhvj5qlko32farj6w45qid.onionsnapshot · 2024-12-11 13:58
Recent victims
The 50 most recent victims claimed by ALPHV. Total in the index: 773.
| Date listed | Victim | Description |
|---|---|---|
| 2024-03-03 | ipmaltamira | Infraestructura Portuaria Mexicana S.A. de C.V. (IPM), subsidiary of P… |
| 2024-03-03 | Ewig Usa | Ewig Group is a one stop solution provider in electronic manufacturing… |
| 2024-03-02 | SBM & Co [You have 48 hours. Check your e-mail] | Established in 1993, we have many years of experience in assisting cli… |
| 2024-03-01 | SBM & Co | Established in 1993, we have many years of experience in assisting cli… |
| 2024-03-01 | Petrus Resources Ltd. | Petrus Resources Ltd. is a Canadian energy company active in property … |
| 2024-03-01 | Kumagai Gumi Group | Kumagai Gumi Co., Ltd. is a Japanese construction company founded in F… |
| 2024-02-29 | Allan Berger & Associates | Over the past four decades, Allan Berger has established himself as on… |
| 2024-02-28 | Change Healthcare - Optum - UnitedHealth | Two lies in one sentence - UnitedHealth has announced that the attack… |
| 2024-02-28 | verbraucherzentrale hessen | sample leaked data before official publication |
| 2024-02-27 | Electro Marteix | EMTEK is the trade name of the company ELECTRO MARTEIX, SL. We have a… |
| 2024-02-26 | Angeles Medical Centers | Angeles Medical Centers, a space dedicated to emotional and psychologi… |
| 2024-02-26 | S+C Partners | Refused to pay |
| 2024-02-24 | ANDFLA SRL | "ANDFLA's main activity is the commercialization of a variety of agric… |
| 2024-02-24 | Family Health center | Since Moses L. Walker and his colleagues opened the doors for the firs… |
| 2024-02-24 | Worthen Industries [FULL DATA] | Chemical manufacturing. |
| 2024-02-22 | Hardeman County Community Health Center | Hardeman County Community Health Center (HCCHC) is a Non-Profit Federa… |
| 2024-02-22 | Worthen Industries [We're giving you one last chance to save your business] | Worthen Industries - a company with 150 years of history specializing … |
| 2024-02-21 | KHSS (You have 3 days) | KHS&S is transforming construction from a field-based industry to an i… |
| 2024-02-21 | Austen Consultants | IT Consultings Cloud Phone Anti-Ransomware Encrypted network |
| 2024-02-18 | VSP Dental | Top Cosmetic & Implant Dentist in South-Central Virginia Dr. Patel is … |
| 2024-02-17 | LoanDepot | LoanDepot, is an Irvine, California-based nonbank holding company whic… |
| 2024-02-16 | Prudential Financial | Prudential Financial, Inc. is an American Fortune Global 500 and Fortu… |
| 2024-02-15 | Rush Energy Services Inc [Time's up] | Rush Energy Services Inc. develops a network of crude oil custom treat… |
| 2024-02-15 | ASA Electronics [2.7 TB] | ASA Electronics® has been designing and manufacturing mobile electroni… |
| 2024-02-13 | ArcisGolf | Arcis Golf is the premier operator of nearly 70 private, resort, and p… |
| 2024-02-13 | Trans-Northern Pipelines | Trans-Northern Pipelines Inc. (TNPI) operates regulated pipelines in c… |
| 2024-02-13 | The Source | The Source Electronics Inc., doing business as The Source, is a Canadi… |
| 2024-02-13 | Herrs | Herr's is an American brand of potato chips and other snack foods prod… |
| 2024-02-13 | Procopio | At Procopio, we strive to provide the highest level of client service.… |
| 2024-02-13 | New Indy Containerboard | A joint venture between The Kraft Group and Schwarz Partners LP was fo… |
| 2024-02-12 | Rush Energy Services Inc [You have 48 hours] | Rush Energy Services Inc. develops a network of crude oil custom treat… |
| 2024-02-12 | SERCIDE | CIDE has representation in around 600 municipalities distributed throu… |
| 2024-02-12 | Lower Valley Energy, Inc. | Full data dump available. USA phones: AFTON (307) 885-3175 JACKSON (30… |
| 2024-02-10 | maddockhenson | OUR MISSION It is our mission to help businesses and individuals prosp… |
| 2024-02-09 | Grace Lutheran Foundation | Grace Lutheran Foundation Inc. is an organization who offers many area… |
| 2024-02-08 | Jewish Home Lifecare | Phone Number (212) 870-5000 Headquarters 120 W 106th St, New York City… |
| 2024-02-05 | Vail-Summit Orthopaedics & Neurosurgery (VSON) | At Vail-Summit Orthopaedics & Neurosurgery, we are dedicated to provid… |
| 2024-01-31 | SportsMEDIA Technology | SportsMEDIA Technology (SMT) is a developer and provider of sports tec… |
| 2024-01-31 | LeClair Group | 6701 Upper Afton Rd, Saint Paul, Minnesota, 551... Phone Number(877) 5… |
| 2024-01-31 | Hydraflow | 1881 W Malvern Ave, Fullerton, California, 9283... Phone Number (714) … |
| 2024-01-30 | TECHNICA - HACKED AND MORE THEN 300 GB DATA LEAKED! | Technica Dulles, VA (HQ) 22970 Indian Creek Drive, Suite 500 Dulles, V… |
| 2024-01-29 | Dutton Brock | Founded in 1982, Dutton Brock is an insurance litigation firm. Its pra… |
| 2024-01-26 | Draneas Huglin Dooley LLC | Draneas Huglin Dooley LLC is an experienced law firm that has an excep… |
| 2024-01-25 | Brightstar Care | BrightStar Care was founded over 20 years ago on the belief that the b… |
| 2024-01-24 | FULL LEAK! Busse & Busee, PC Attorneys at Law | LEAKED! |
| 2024-01-24 | MBC Law Professional Corporation | MBC Law Professional Corp is a company that operates in the Legal Serv… |
| 2024-01-23 | Herrs (You have 72 hours) | Herr's is an American brand of potato chips and other snack foods prod… |
| 2024-01-23 | Total Air Solutions | Total Air Solutions provides residential and commercial HVAC services … |
| 2024-01-22 | ANS COMPUTER [72hrs] | Since 2001, A.N.S. computer has become a company active in the marketi… |
| 2024-01-20 | Worthen Industries [You have three days] | Worthen Industries Chemicals & Related Products · New Hampshire, Uni… |