THREAT ACTOR

AVADDON_

Dormant

AVADDON is a ransomware operator tracked through its public data-leak infrastructure. The group operates under the double-extortion model that defines the modern ransomware ecosystem: file encryption combined with the threat of stolen-data publication on a public leak site. It continues to post fresh victim claims as part of an ongoing extortion campaign.

For Ransomnews editorial coverage of AVADDON, including incident write-ups, attribution notes and additional context, see the Threat Groups archive or run a site search.

142 Victims tracked

0 / 2 Active mirrors

2021-09-09 First listing

2021-09-09 Most recent

Victims by year

2021 142

Leak site mirrors

2 mirrors tracked, 0 currently reachable. These are criminal-infrastructure URLs; links are deliberately not provided.

avaddongun7rngel.onion snapshot · 2021-09-08 00:04
avaddonbotrxmuyl.onion snapshot · 2024-12-09 17:47

Recent victims

The 50 most recent victims claimed by AVADDON. Total in the index: 142.

Date listed	Victim	Description
2021-09-09	EFCO forms
2021-09-09	Sky Leasing, LLC
2021-09-09	Golden Aluminum
2021-09-09	J.C. Cannistraro
2021-09-09	Lonrho
2021-09-09	American Bank Systems INC
2021-09-09	Brown Robert LLP
2021-09-09	National AIDS Control Council
2021-09-09	Monterey Bay Air Resources District
2021-09-09	Dade City Florida
2021-09-09	KOE
2021-09-09	AHT Global
2021-09-09	Garvin Promotion Group, LLC
2021-09-09	NetVigour Inc
2021-09-09	Intensive Care On-Line Network , Inc
2021-09-09	Payzant Building Products Ltd
2021-09-09	International Longshore & Warehouse Union
2021-09-09	Marolles-en-Brie
2021-09-09	Finalyse
2021-09-09	BIOREP TECHNOLOGIES, INC.
2021-09-09	MK-Technik
2021-09-09	Allanasons Ltd
2021-09-09	American Heart of Poland Inc
2021-09-09	PT Asuransi Bintang Tbk
2021-09-09	VAUGHN CONCRETE PRODUCTS, INC
2021-09-09	Groupe Qualinet Inc.
2021-09-09	Somerset ISD
2021-09-09	FBL Advogados
2021-09-09	Hardy Buoys Smoked Fish Inc.
2021-09-09	KEITH MACHINERY CORP.
2021-09-09	BEE LINE LOGISTICS, INC
2021-09-09	Elite Software Inc
2021-09-09	MundoFertil
2021-09-09	SVI ASSURANCES
2021-09-09	UNIVERSAL ACCOUNTING SERVICES INC
2021-09-09	The Capital Medical Center
2021-09-09	Mullins Food Products Inc
2021-09-09	JFC International (Europe)
2021-09-09	Carnegie Wave Energy
2021-09-09	Grand Power Systems
2021-09-09	VERIHA TRUCKING INC
2021-09-09	Party Rental LTD
2021-09-09	Prefeitura Municipal de Saquarema
2021-09-09	CELL Foods Inc.
2021-09-09	CASHMAG
2021-09-09	Doré Law Group P.C
2021-09-09	Omni Manufacturing, Inc.
2021-09-09	FUTURIMPLANTS
2021-09-09	ANLEC R&D
2021-09-09	La compagnie du SAV

CONFIRMED ATTACKS

Avaddon confirmed attacks: 64 verified incidents

Ransomnews has verified 64 Avaddon incidents against named organisations, each corroborated by a public source such as a breach notification, regulatory filing or press report. The confirmed record runs from August 2020 to June 2021. United States accounts for 23 of them (36%), with victims recorded in 23 countries in total. The most affected sector is government, at 12 confirmed victims. A ransom payment was publicly confirmed in 0 cases and publicly refused in 13; the outcome is unrecorded in the remaining 51. Where a figure was disclosed (10 cases), these incidents account for 278,921 exposed records.

64Verified incidents

23Countries

2020–2021Active range

0%Paid, where outcome known

Confirmed victims by year

202012
202152

Most affected sectors

Government12
Healthcare9
Finance9
Service5
Other4
Technology4
Construction3
Manufacturing3

Most affected countries

United States23
France10
Australia5
Kuwait2
Italy2
United Kingdom2
Mexico2
Czechia2

Verified Avaddon incidents

Date	Organisation	Sector	Location	Records	Ransom paid	Source
June 2021	Valley National Bank (Oritani Bank)	Finance	New Jersey, United States	1,335	Unknown	Source
June 2021	Town of Freeport	Government	Maine, United States	0	No	Source
June 2021	Talma Servicios Aeroportuarios	Transportation	Ciudad de México, Mexico	—	No	Source
May 2021	Vistex	Technology	Illinois, United States	—	Unknown	Source
May 2021	Spine & Disc Medical Center	Healthcare	Arizona, United States	—	Unknown	Source
May 2021	Schepisi Communications	Utilities	Melbourne, Australia	—	Unknown	Source
May 2021	PT Angkasa Pura I	Government	Jakarta, Indonesia	—	Unknown	Source
May 2021	Officine Piccini S.p.A	Manufacturing	Perugia, Italy	—	Unknown	Source
May 2021	NSW Labor	Government	Sydney, Australia	—	Unknown	Source
May 2021	Medland Engineering	Construction	Sydney, Australia	—	Unknown	Source
May 2021	Henry Oil & Gas	Utilities	Texas, United States	—	Unknown	Source
May 2021	Lotería Nacional (Pronosticos Deportivo)	Government	Mexico City, Mexico	—	Unknown	Source
May 2021	Greatwide Truckload Management	Transportation	Pennsylvania, United States	—	Unknown	Source
May 2021	Le Volcan	Other	Le Havre, France	—	Unknown	Source
May 2021	EVGA	Technology	California, United States	—	Unknown	Source
May 2021	Grupo Prilux	Retail	Toledo, Spain	—	Unknown	Source
May 2021	Forbes Hare	Legal	Tortola, British Virgin Islands	—	No	Source
May 2021	DOCTUM PHARMACEUTICAL K. GIOKARIS & CO. S.A.	Healthcare	Peania, Greece	—	Unknown	Source
May 2021	Carlos Federspiel & Co	Retail	San José, Costa Rica	—	Unknown	Source
May 2021	Letton Percival	Finance	Liverpool, United Kingdom	—	Unknown	Source
May 2021	Al-Arfaj Group	Service	Kuwait Free Trade Zone, Kuwait	—	Unknown	Source
May 2021	AXA Asia	Finance	Bangkok, Thailand	—	Unknown	Source
May 2021	Al Imtiaz Investment Company (K.S.C.P)	Finance	Kuwait City, Kuwait	—	Unknown	Source
May 2021	Acer Finance	Finance	Paris, France	—	Unknown	Source
May 2021	360 InStore	Retail	Kentucky, United States	—	Unknown	Source
April 2021	Presque Isle Police Department	Government	Maine, United States	—	No	Source
April 2021	Unione di Comuni Colli del Monferrato	Government	Scurzolengo, Italy	—	No	Source
April 2021	Protectim	Service	Paris, France	—	Unknown	Source
April 2021	Partit Nazzjonalista (Nationalist Party of Malta)	Government	Malta, Malta	—	No	Source
April 2021	Magistrát města Olomouce	Government	Olomouc, Czechia	—	No	Source
April 2021	Newcomb Secondary College	Education	Newcomb, Australia	—	Unknown	Source
April 2021	Fédération Cinov	Other	Paris, France	—	No	Source
April 2021	Coindu (Componentes para a Indústria Automóvel, S.A.)	Manufacturing	Joane, Portugal	—	Unknown	Source
April 2021	CNE	Transportation	Reims, France	—	Unknown	Source
April 2021	Asbis CZ	Technology	Čestlice, Czechia	—	No	Source
April 2021	Coughlin & Gerhart, LLP	Legal	New York, United States	12,739	Unknown	Source
March 2021	Targetcom	Service	Asnières-sur-Seine, France	—	Unknown	Source
March 2021	Mevion Medical Systems	Healthcare	Massachusetts, United States	730	Unknown	Source
March 2021	Internal Medicine Associates of Jasper, PC, dba Prestige Medical Group	Healthcare	Georgia, United States	34,203	Unknown	Source
March 2021	La Compagnie du SAV	Service	Lisses, France	—	Unknown	Source
March 2021	Cashmag	Technology	Cuers, France	—	Unknown	Source
March 2021	Bridgeway Senior Healthcare	Healthcare	New Jersey, United States	—	Unknown	Source
February 2021	Somerset Independent School District	Education	Texas, United States	—	Unknown	Source
February 2021	Osborn Cancer Care	Healthcare	Washington, United States	4,614	Unknown	Source
February 2021	Prefeitura Municipal de Saquarema	Government	Saquarema, Brazil	—	Unknown	Source
February 2021	Meddi Laboratório	Healthcare	Feira de Santo, Brazil	—	Unknown	Source
February 2021	JFC International (Europe)	Food and Beverage	Dusseldorf, Germany	—	Unknown	Source
February 2021	SVI Assurances	Finance	Villepinte, France	—	Unknown	Source
February 2021	Carnegie Clean Energy	Utilities	Fremantle, Australia	—	No	Source
January 2021	Qualinet	Service	Quebec, Canada	—	Unknown	Source
January 2021	American Heart of Poland	Healthcare	Ustroń, Poland	—	Unknown	Source
January 2021	Finalyse	Finance	Brussels, Belgium	—	No	Source
December 2020	National AIDS Control Council	Other	Nairobi, Kenya	—	Unknown	Source
December 2020	Intensive Care Online Network (ICON)	Healthcare	Maryland, United States	—	Unknown	Source
December 2020	Marolles-en-Brie (Val-de-Marne)	Government	Marolles-en-Brie, France	—	No	Source
November 2020	Monterey Bay Air Resources District	Government	California, United States	2,000	No	Source
November 2020	City of Dade	Government	Florida, United States	934	Unknown	Source
October 2020	American Bank Systems (ABS)	Finance	Oklahoma, United States	220,706	Unknown	Source
October 2020	J.C. Cannistraro, LLC	Construction	Massachusetts, United States	1,660	Unknown	Source
October 2020	Lonrho	Other	London, United Kingdom	—	Unknown	Source
October 2020	EFCO Formwork Solutions (EFCO Forms)	Construction	Iowa, United States	—	Unknown	Source
September 2020	SKY Leasing, LLC	Finance	California, United States	—	Unknown	Source
August 2020	Prokes & Co.SK	Manufacturing	Oravská Jasenica, Slovakia	—	Unknown	Source
August 2020	Greenville Technical College	Education	South Carolina, United States	—	Unknown	Source

Claimed vs confirmed. The figures above the fold on this page come from Avaddon's own leak-site postings and reflect what the operation claims. The table here is a separate evidence class: incidents Ransomnews verified against a public source. Confirmed counts are lower than claimed counts by design: most victims never disclose, and some leak-site listings are recycled, exaggerated or fabricated. Records and ransom figures are shown only where a named source disclosed them. See the full ransomware statistics or the Ransomtracker dataset.

← Back to Ransomtracker

Statistics on this page are computed by Ransomnews from a live leak-site monitoring feed. Numbers update every ten minutes. Operator-written victim descriptions are truncated and shown in snippet form only. Source data: RansomLook (CC BY 4.0), aggregated and adapted by Ransomnews.