Close Menu
  • Home
  • News
  • Security
  • Privacy
  • Cybercrime
    • Threat Groups
    • Ransomware
    • Explainers
    • Stealer Logs
  • AI
  • OSINT
  • Tools
    • Ransomtracker
    • Stealercheck
    • FortiBleed Checker
    • Site Check
  • Data
    • Ransomware statistics
    • Ransom payment rate
    • Breach verification
  • Newsletter
  • About Us
Facebook X (Twitter) Instagram Threads
Ransomnews
  • Home
  • News
  • Security
  • Privacy
  • Cybercrime
    • Threat Groups
    • Ransomware
    • Explainers
    • Stealer Logs
  • AI
  • OSINT
  • Tools
    • Ransomtracker
    • Stealercheck
    • FortiBleed Checker
    • Site Check
  • Data
    • Ransomware statistics
    • Ransom payment rate
    • Breach verification
  • Newsletter
  • About Us
Facebook X (Twitter) LinkedIn
Ransomnews

BIANLIAN · Threat actor profile

THREAT ACTOR

BIANLIAN_

Active

BianLian was originally a Go-based file-encrypting ransomware that pivoted in mid-2023 toward a pure data-extortion model after Avast released a free decryptor. The group is now best known for stealing data and threatening publication, without encrypting victim networks.

For Ransomnews editorial coverage of BIANLIAN, including incident write-ups, attribution notes and additional context, see the Threat Groups archive or run a site search.

521 Victims tracked
1 / 4 Active mirrors
2022-08-18 First listing
2025-03-31 Most recent

Victims by year

  • 2025 32
  • 2024 169
  • 2023 246
  • 2022 74

Leak site mirrors

4 mirrors tracked, 1 currently reachable. These are criminal-infrastructure URLs; links are deliberately not provided.

  • bianlianlbc5an4kgnay3opdemgcryg2kpfcbgczopmm3dnbz3uaunad.onion BianLian | Home snapshot · 2025-04-02 10:01
  • bianlivemqbawcco4cx4a672k2fip3guyxudzurfqvdszafam3ofqgqd.onion BianLian | Home snapshot · 2025-04-03 09:11
  • bianliaoxoeriowgqohcly4a6sbkpc3se2yvxgidxomxlpuhx5ehrpad.onion snapshot · 2025-02-10 00:18
  • bianlianvjr9vhy72f782342yvygfciusgfisgiygfs1bredw.i2p. I2Pd HTTP proxy snapshot · 2026-09-23 05:20

Recent victims

The 50 most recent victims claimed by BIANLIAN. Total in the index: 521.

Date listed Victim Description
2025-03-31 CMC Technology Group CMC Technology Group is a business technology services company with th…
2025-03-31 Meridian Senior Meridian Senior Living, founded in 210 and headquartered in Bethesda, …
2025-03-31 Saunders and Saunders Saunders and Saunders, LLP is a law firm based in New Bedford, Massach…
2025-03-31 Sonrisas Dental Health Sonrisas Dental Health offers a range of pediatric services that focus…
2025-03-22 Goshen Medical Center Goshen Medical Center is a Federally qualified healthcare organization…
2025-03-07 Allworx Headquartered in Rochester, N.Y., Allworx is an award-winning maker of…
2025-03-07 Island Realty Founded in 1950 and headquartered in Isle of Palms, South Carolina, Is…
2025-03-07 Minnesota Orthodontics Minnesota Orthodontics is North America's leading Invisalign® provider…
2025-03-04 Keystone Pacific Property Management LLC Keystone Pacific Property Management specializes in the management of …
2025-03-04 Mosley Glick O’Brien, Inc. Mosley Glick O'Brien Inc is a top, certified public accounting firm ba…
2025-03-04 Legal Aid Society of Salt Lake Legal Aid Society of Salt Lake is a non-profit law firm in Salt Lake C…
2025-03-04 Ewald Consulting Fenton Ewald & Associates P.C. in Needham Heights, MA is an Accountant…
2025-02-19 Alabama Ophthalmology Associates Alabama Ophthalmology Associates is a six physician subspecialty ophth…
2025-02-13 Aspire Rural Health System Aspire Rural Health System is a collaboration of three hospitals and a…
2025-02-13 Nash Brothers Construction Nash Brothers' focus is underground utility construction across the el…
2025-02-13 Nippon Steel USA Nippon Steel, USA division.
2025-02-13 Financial Services of America, Inc. Financial Services of America (also known as FSA) is one of the larges…
2025-02-13 Layfield & Borel CPA's L.L.C Layfield & Borel CPA's L.L.C. is a verified accounting firm, offering …
2025-02-13 Dain, Torpy, Le Ray, Wiest & Garner, P.C. Brennan, Dain, Le Ray, Wiest, Torpy & Garner, P.C. offers developers, …
2025-02-10 D-7 Roofing D-7 Roofing is a roofing company that provides various roofing service…
2025-02-10 Recievership Specialists As Court Receivers, Superior Court Receivers, Court Referees, Superior…
2025-02-05 Dash Business Dash Business helps with bookkeeping, for support in expanding your bu…
2025-02-05 Hall Chadwick Hall Chadwick, headquartered in Sydney, New South Wales, is an account…
2025-02-05 NESCTC Security Services NESCTC is a privately held, limited liability company headquartered in…
2025-02-04 C & R Molds Inc C&R Molds Inc. is a professional organization specializing in plastic …
2025-02-04 Commercial Solutions Commercial Solutions Inc. is a national company specializing in the re…
2025-02-02 Civic Committee The Civic Committee collaborates with business leaders, public officia…
2025-02-02 Ayres Law Firm Having specialized in Utah DUIdefense for more than 10 years, Tyler Ay…
2025-02-02 Growth Acceleration Partners Growth Acceleration Partners is a consulting and technology services c…
2025-01-23 Cyrious Software Cyrious Software, Inc. offers a range of products and services includi…
2025-01-23 Medical Associates of Brevard Medical Associates of Brevard (MAB) was first founded in 1996 to provi…
2025-01-18 MassDevelopment MassDevelopment, the state’s development finance agency and land bank,…
2024-12-26 Caframo Limited. Caframo was founded in 1955 to manufacture innovative fans and heaters…
2024-12-18 Cottrell Fletcher & Cottrell P.C. Cottrell Fletcher & Cottrell P.C. is a full-service law firm located i…
2024-12-18 Giordano, DelCollo, Werb & Gagne, LLC. Giordano, DelCollo, Werb & Gagne, LLC is a full-service law firm locat…
2024-12-14 American Computer Estimating Inc American Computer Estimating is a company that offers desk review and …
2024-12-14 MedRevenu Inc MedRevenu is a Physician Revenue Cycle Management Company that utilize…
2024-12-14 Mid Florida Primary Care Mid-Florida Primary Care is a specialized private Internal Medicine pr…
2024-12-10 Global Insurance Agency LLC Global Insurance Agency is a full service brokerage firm offering pers…
2024-12-10 Physicians' Primary Care of Southwest Florida Physicians' Primary Care is a healthcare organization pursuing to beco…
2024-12-06 LTI Trucking Services LTI Trucking Services, established in 1975, reformed in 2005 and based…
2024-12-05 Star Shuttle Inc. Star Shuttle & Charter, based in San Antonio, Texas, is a privately ow…
2024-12-01 Alpine Ear Nose & Throat Alpine ENT is committed to providing comprehensive, high-quality ear, …
2024-11-26 TWRU CPAs & Financial Advisors TWRU CPAs & Financial Advisors specializes in helping small to medium …
2024-11-22 Trinity Petroleum Management, LLC Trinity Petroleum Management provides full-service outsourcing for the…
2024-11-21 Kellerhals Ferguson Kroblin PLLC Kellerhals Ferguson Kroblin PLLC (KFK) a full service law firm with of…
2024-11-21 Silverback Exploration Silverback Exploration is a San Antonio-based, independent oil and gas…
2024-11-20 Amherstburg Family Health The Amherstburg Family Health Team provides comprehensive patient cent…
2024-11-10 Immuno Laboratories, Inc Immuno is a federally licensed medical laboratory. Immuno provides pro…
2024-11-09 ATSG, Inc ATSG, Inc. was founded in 1994 as an IT solution provider with an init…

CONFIRMED ATTACKS

BianLian confirmed attacks: 95 verified incidents

Ransomnews has verified 95 BianLian incidents against named organisations, each corroborated by a public source such as a breach notification, regulatory filing or press report. The confirmed record runs from May 2022 to February 2026. United States accounts for 74 of them (78%), with victims recorded in 13 countries in total. The most affected sector is healthcare, at 41 confirmed victims. A ransom payment was publicly confirmed in 1 case and publicly refused in 8; the outcome is unrecorded in the remaining 86. Where a figure was disclosed (61 cases), these incidents account for 6,169,710 exposed records.

95Verified incidents
13Countries
2022–2026Active range
11%Paid, where outcome known

Confirmed victims by year

  • 20227
  • 202330
  • 202450
  • 20257
  • 20261

Most affected sectors

  • Healthcare41
  • Finance13
  • Legal7
  • Manufacturing6
  • Technology5
  • Education5
  • Other5
  • Service4

Most affected countries

  • United States74
  • Australia5
  • Canada3
  • United Kingdom3
  • Germany2
  • India1
  • Spain1
  • Switzerland1

Verified BianLian incidents

DateOrganisationSector LocationRecordsRansom paidSource
February 2026 Mosley Glick O'Brien, Inc. Finance Ohio, United States — Unknown Source
March 2025 Sonrisas Dental Health Healthcare California, United States 15,644 Unknown Source
February 2025 Goshen Medical Center Healthcare North Carolina, United States 456,385 Unknown Source
February 2025 Minnesota Orthodontics Healthcare Minnesota, United States 501 Unknown Source
February 2025 Hall Chadwick Finance Sydney, Australia — Unknown Source
January 2025 Medical Associates of Brevard, LLC Healthcare Florida, United States 246,711 Unknown Source
January 2025 Ewald Consulting Service Minnesota, United States 14,366 Unknown Source
January 2025 Alabama Ophthalmology Associates Healthcare Alabama, United States 131,576 Unknown Source
December 2024 MedRevenu, LLC Healthcare California, United States — Unknown Source
November 2024 Power of Heart, Inc. d/b/a Dashbusiness Finance California, United States — Unknown Source
November 2024 Alpine Ear, Nose & Throat, P.L.L.C. Healthcare Colorado, United States 65,648 Unknown Source
November 2024 Aspire Rural Health System Healthcare Michigan, United States 138,386 Unknown Source
November 2024 Mid-Florida Primary Care Healthcare Florida, United States 16,435 Unknown Source
November 2024 St. Clair Orthopaedics and Sports Medicine Healthcare Michigan, United States 340,000 Unknown Source
October 2024 CLAS Information Services Legal California, United States 307 Unknown Source
October 2024 Trinity Petroleum Management, LLC Finance Colorado, United States 46,659 Unknown Source
September 2024 Civic Committee of the Commercial Club of Chicago Other Illinois, United States 396 Unknown Source
September 2024 River Region Cardiology Associates P.C. Healthcare Alabama, United States 500,000 Unknown Source
September 2024 Falco Sult & Company, PS Finance Washington, United States 2,088 Unknown Source
September 2024 Physicians' Primary Care of Southwest Florida Healthcare Florida, United States 500 Unknown Source
September 2024 ATSG, Inc. Technology New York, United States 909,469 Unknown Source
September 2024 Pearl Cohen Legal Tel-Aviv, Israel — No Source
September 2024 Boston Children’s Health Physicians (BCHP) Healthcare New York, United States — Unknown Source
August 2024 Mizuno USA Inc. Manufacturing Georgia, United States 1,329 Unknown Source
August 2024 Mohawk Valley Cardiology PC Healthcare New York, United States 4,973 Unknown Source
August 2024 Studio Legale Associato Isolabella Legal Milan, Italy — Unknown Source
August 2024 Benson, Kearley & Associates Insurance Brokers Ltd Finance Newmarket, Canada — Unknown Source
July 2024 The Alcohol & Drug Testing Service, Inc. Service Texas, United States 748,763 Unknown Source
July 2024 Texas Centers for Infectious Disease Associates (TCIDA) Healthcare Texas, United States 19,776 Unknown Source
July 2024 South West Family Medicine Associates Healthcare Texas, United States 36,959 Unknown Source
July 2024 The Insurance Company Of The West Indies Limited ICWI Finance Kingston, Jamaica — Unknown Source
July 2024 Sable International Finance London, United Kingdom — Unknown Source
June 2024 U.S. Dermatology Partners Healthcare Texas, United States — Unknown Source
June 2024 Bunkhouse Management, LLC Other Texas, United States 2,932 Unknown Source
June 2024 Insula Group Pty Ltd Technology Oakleigh, Australia — No Source
May 2024 Better Business Bureau Serving the Pacific Southwest, Central & Inland California Other Arizona, United States 8,565 Unknown Source
April 2024 Gastroenterology Associates of Central Florida, P.A. dba Center for Digestive Health Healthcare Florida, United States 122,437 Unknown Source
April 2024 Dordt University Education Iowa, United States 34,251 Unknown Source
April 2024 NPS Media Group (National Publisher Services, LLC) Service Connecticut, United States — Unknown Source
April 2024 Texas Retina Associates Healthcare Texas, United States 312,867 No Source
April 2024 defi SOLUTIONS Finance Texas, United States — Unknown Source
March 2024 Dr. Daniel J. Leeman Healthcare Texas, United States 34,743 Unknown Source
March 2024 Neurobehavioral Medicine Consultants Healthcare Ohio, United States 18,182 Unknown Source
March 2024 Central Carolina Insurance Agency Finance North Carolina, United States 5,013 Unknown Source
March 2024 D'Amico & Pettinicchi, LLC Legal Connecticut, United States 1,899 Unknown Source
March 2024 Clinica de Salud del Valle de Salinas (CSVS) Healthcare California, United States — Unknown Source
March 2024 Northern Minerals Other West Perth, Australia — Unknown Source
March 2024 Affiliated Dermatologists & Dermatologic Surgeons P.A. Healthcare New Jersey, United States 373,680 Unknown Source
March 2024 Lindsay Municipal Hospital Healthcare Oklahoma, United States 500 Unknown Source
March 2024 1996 LLC dba Chambers Construction Co. Construction Oregon, United States 489 Unknown Source
March 2024 Optometric Physicians of Middle Tennessee Healthcare Tennessee, United States 29,000 Unknown Source
February 2024 Consolidated Benefits Resources Finance Oklahoma, United States — Unknown Source
February 2024 Delta Pipeline, Inc. Construction California, United States — Unknown Source
February 2024 On Q Financial, LLC Finance Arizona, United States 211,650 Unknown Source
January 2024 NorthEast Spine & Sports Medicine (NESSM) Healthcare New Jersey, United States 6,500 Unknown Source
January 2024 Advantage Orthopedic & Sports Medicine Clinic Healthcare Oregon, United States 1,914 Unknown Source
January 2024 Hypertension-Nephrology Associates Healthcare Pennsylvania, United States 39,491 Unknown Source
January 2024 B&B Electric Inc. Service Wisconsin, United States — Unknown Source
December 2023 BBS Financial Services, LLC Finance Massachusetts, United States 70,168 Yes Source
December 2023 Drost Kivlahan McMahon & O’Connor LLC Legal Illinois, United States 6,730 Unknown Source
December 2023 Southeast Vermont Transit Transportation Vermont, United States 3,815 Unknown Source
November 2023 Akumin, Inc. Healthcare Florida, United States — Unknown Source
September 2023 Auswide Corporate/Auswide Services Technology Richmond, Australia — Unknown Source
September 2023 Growers Express, LLC Food and Beverage Texas, United States 1,775 Unknown Source
September 2023 Air Canada Transportation Saint-Laurent, Canada — Unknown Source
September 2023 Save the Children Other London, United Kingdom — Unknown Source
August 2023 Instron Manufacturing Massachusetts, United States 1,059 Unknown Source
June 2023 Hiberus Tecnología Technology Zaragoza, Spain — Unknown Source
June 2023 Handok, Inc. Healthcare Seoul, South Korea — Unknown Source
June 2023 Spinal and Sports Care Clinic Healthcare Washington, United States 1,136 Unknown Source
June 2023 CHU de Rennes Healthcare Rennes, France — Unknown Source
May 2023 The Sullivan Group Of Court Reporters Legal California, United States — Unknown Source
April 2023 Levales Solicitors, LLP Legal Aldershot, United Kingdom 8,345 Unknown Source
April 2023 TY, Inc. Manufacturing Illinois, United States 2,430 Unknown Source
April 2023 Murfreesboro Medical Clinic Healthcare Tennessee, United States 559,000 No Source
April 2023 Bilstein Group Manufacturing Ennepetal, Germany — Unknown Source
March 2023 Flensburger Schiffbau-Gesellschaft mbh & Co. and Nobiskrug Yachts GmbH Manufacturing Flensburg, Germany — No Source
March 2023 Carvin Software, LLC Technology Arizona, United States 356,871 Unknown Source
February 2023 Deer Lakes School District Education Pennsylvania, United States — Unknown Source
February 2023 FAPS, Inc. Manufacturing New Jersey, United States — Unknown Source
February 2023 Vascular Center of Intervention, Inc. Healthcare California, United States 3,833 Unknown Source
February 2023 Retina & Vitreous of Texas, PLLC Healthcare Texas, United States 35,766 Unknown Source
February 2023 Southeastern Louisiana University Education Louisiana, United States 0 Unknown Source
February 2023 Tennessee State University Education Tennessee, United States — Unknown Source
January 2023 Kanton Basel-Stadt Erziehungsdepartement (Department of Education of the Canton of Basel-Stadt) Government Basel, Switzerland 761 No Source
January 2023 Meriton Apartments Construction Sydney, Australia 1,889 Unknown Source
January 2023 City of Waynesboro Government Virginia, United States 4,639 Unknown Source
January 2023 Northeast Surgical Group Healthcare Michigan, United States 15,298 Unknown Source
December 2022 North Shore Medical Labs Healthcare New York, United States 500 Unknown Source
November 2022 Hayward Sisters Hospital d/b/a St. Rose Hospital Healthcare California, United States 501 No Source
October 2022 Harry Rosen Retail Toronto, Canada 160,000 Unknown Source
September 2022 Aarti Drugs Ltd. Healthcare Mumbai, India — Unknown Source
September 2022 Alegria Family Services (AFS) Healthcare New Mexico, United States — No Source
August 2022 Aesthetic Dermatology Associates, PC Healthcare Pennsylvania, United States 33,793 Unknown Source
May 2022 Mooresville Consolidated School Corp. Education Indiana, United States 417 Unknown Source

Claimed vs confirmed. The figures above the fold on this page come from BianLian's own leak-site postings and reflect what the operation claims. The table here is a separate evidence class: incidents Ransomnews verified against a public source. Confirmed counts are lower than claimed counts by design: most victims never disclose, and some leak-site listings are recycled, exaggerated or fabricated. Records and ransom figures are shown only where a named source disclosed them. See the full ransomware statistics or the Ransomtracker dataset.

← Back to Ransomtracker

Statistics on this page are computed by Ransomnews from a live leak-site monitoring feed. Numbers update every ten minutes. Operator-written victim descriptions are truncated and shown in snippet form only. Source data: RansomLook (CC BY 4.0), aggregated and adapted by Ransomnews.

The Ransomnews Monthly

What leaked, what held up

One email a month: the datasets we verified, and the ones that fell apart under scrutiny.

Double opt-in. We store your email, signup time, and IP for consent records (GDPR Art. 7). See our privacy policy.

Free tool

How does your own site score?

Forty passive checks on TLS, security headers, email spoofing and privacy. A grade out of 100 in about fifteen seconds.

No signup. Nothing installed. We only request what your site already serves publicly.

Free tool

Were you in a leak?

Check whether an email address has surfaced in infostealer logs. No signup, no data stored.

Run StealerCheck

Live data

Ransomtracker

Victims as they are posted to ransomware leak sites, tracked continuously and checked against the claims.

Open the tracker

9,613 confirmed attacks tracked

Facebook X (Twitter) LinkedIn
© 2026 Ransomnews.com

Type above and press Enter to search. Press Esc to cancel.

Cookies on Ransomnews

We use strictly-necessary cookies to run the site and may use first-party analytics to understand which articles are read. Some pages contain affiliate links; when you click one, the affiliate network sets cookies on the merchant's domain to attribute the referral. See the Cookie Policy and Affiliate Disclosure for detail.

RANSOMNEWS.COM

Tracking the criminal infrastructure of the internet.

Independent coverage of ransomware, breach economics, threat actors, privacy, AI security, and the open-source investigation toolkit.

Topics

  • News
  • Security
  • Privacy
  • Cybercrime
  • AI
  • OSINT
  • Threat Groups
  • Stealer Logs
  • Ransomtracker
  • Stealercheck
  • FortiBleed Checker
  • Site Check

Site

  • About Us
  • Editorial Team
  • Contact
  • Tip Line
  • Editorial

Legal

  • Privacy Policy
  • Terms of Service
  • Cookie Policy
  • Funding & Independence
  • RSS Feed
© 2026 Ransomnews.com · Tracking the criminal infrastructure of the internet.