THREAT ACTOR
BLACK-SUIT_
DormantBLACK-SUIT is a ransomware operator tracked through its public data-leak infrastructure. The group operates under the double-extortion model that defines the modern ransomware ecosystem: file encryption combined with the threat of stolen-data publication on a public leak site. It continues to post fresh victim claims as part of an ongoing extortion campaign.
For Ransomnews editorial coverage of BLACK-SUIT, including incident write-ups, attribution notes and additional context, see the Threat Groups archive or run a site search.
191
Victims tracked
0 / 18
Active mirrors
2023-06-18
First listing
2025-06-02
Most recent
Victims by year
- 2025 9
- 2024 162
- 2023 20
Leak site mirrors
18 mirrors tracked, 0 currently reachable. These are criminal-infrastructure URLs; links are deliberately not provided.
-
weg7sdx54bevnvulapqu6bpzwztryeflq3s23tegbmnhkbpqz637f2yd.onionThis Site Has Been Seized snapshot · 2026-06-23 22:03 -
c7jpc6h2ccrdwmhofuij7kz6sr2fg2ndtbvvqy4fse23cf7m2e5hvqid.onionThis Site Has Been Seized snapshot · 2026-06-23 22:30 -
nz2ihtemh2zli2wc3bovzps55clanspsqx5htu2plolby45a7pk4d3qd.onion403 Forbidden snapshot · 2025-07-24 12:01 -
qjdremetxo2zpli32exwb5uct6cjljyj7v52d5thn7usmj5mlyxdojqd.onion403 Forbidden snapshot · 2025-07-24 11:11 -
yef4xoqj2jq554rqetf2ikmpdtewdlbnx5xrtjtjqaotvfw77ipb6pad.onionsnapshot · 2024-10-03 01:50 -
ptsfbwx5j7kyk5r6n6uz4faic43jtb55sbls7py5wztwbxkyvsikguid.onion403 Forbidden snapshot · 2025-07-24 12:00 -
ro4h37fieb6oyfrwoi5u5wpvaalnegsxzxnwzwzw43anxqmv6hjcsfyd.onionsnapshot · 2024-10-16 13:00 -
cyfafnmijhiqxxfhtofmn5lgk3w5ana6xzpc6gk5uvdfadqflvznpjyd.onion403 Forbidden snapshot · 2025-07-24 12:00 -
betrvom4agzebo27bt7o3hk35tvr7ppw3hrx5xx4ecvijwfsb4iufoyd.onion403 Forbidden snapshot · 2025-07-24 11:07 -
ybo3xr25btxs47nmwykoudoe23nyv6ftkcpjdo4gilfzww4djpurtgid.onion403 Forbidden snapshot · 2025-07-24 12:02 -
k6wtpxwq72gpeil5hqofae7yhbtxphbkyoe2g7rwmpx5sadc4sgsfvid.onionIndex of / snapshot · 2025-07-02 04:06 -
vm2rbvfkcqsx2xusltbxziwbsrunjegk6qeywf3bxpjlznq622s3iead.onion403 Forbidden snapshot · 2025-07-24 12:04 -
ng2gzceugc2df6hp6s7wtg7hpupw37vqkvamaydhagv2qbrswdqlq6ad.onionsnapshot · 2025-05-09 03:19 -
2yxf2ald2c67twt4663piypum2fu6yt4su453naxsdiilpd4m7pgu6qd.onionIndex of / snapshot · 2025-07-02 04:06 -
wjdnuogx3mrnnutshrx7nbvjuwqfxnrb32rifaozygwdvs325s75keqd.onionIndex of / snapshot · 2025-07-02 04:05 -
wxqhwn52dnzbrtqeywg35jfvzbpwkw7edlxxoil7ag44plraezw5z5id.onion403 Forbidden snapshot · 2025-09-01 00:09 -
5bol522hpd3yknxfct2o35ilimxyo46licxxitjvajtvcedltfrj53qd.onion403 Forbidden snapshot · 2025-08-31 23:20 -
weg7sdx54bevnvuLapqu6bpzwztryeflq3s23trgbmnhkbpqz637f2yd.onionsnapshot · 2025-07-26 20:43
Recent victims
The 50 most recent victims claimed by BLACK-SUIT. Total in the index: 191.
| Date listed | Victim | Description |
|---|---|---|
| 2025-06-02 | Kansas City Aviation Center | Founded in 1968, the Kansas City Aviation Center offers a range of avi… |
| 2025-05-29 | metromont.com | Commercial & Residential Construction.Revenue $636.5 MillionFounded in… |
| 2025-05-29 | Inns of Aurora | Inns of AuroraHospitalityRevenue$33.9 Millioninns of aurora is a refin… |
| 2025-05-15 | Gloucester County Virginia | The Committee is comprised of residents of Gloucester County who are a… |
| 2025-04-24 | Pacific Metallurgical | |
| 2025-04-24 | The Fortune Society | |
| 2025-04-04 | Massachusetts Municipal Wholesale Electric | In the early 1970s, MMWEC worked to gather and focus the collective st… |
| 2025-03-21 | Town of Orangeville | |
| 2025-02-17 | dapope.com | |
| 2024-12-11 | midwest.com | |
| 2024-12-09 | copresi.es | |
| 2024-11-28 | JTEKT NORTH AMERICA | 893.63GB of DataIncluding data from companies such as BMW, Caterpillar… |
| 2024-11-27 | Grandview School District | The Grandview School District, with families and the community, will p… |
| 2024-11-23 | co.cullman.al.us | |
| 2024-11-18 | eastgateauto.com | |
| 2024-11-18 | kciaviation.com | KCI Aviation's headquarters is in Taylor County at 1211 AFG Road, Brid… |
| 2024-11-17 | hetrhedens.nl | hetrhedens.nl Industry Education Revenue $21.2 Million H… |
| 2024-11-16 | kapurinc.com | kapurinc.com Industry Construction Revenue $56 Million H… |
| 2024-11-16 | brandywinecoachworks.com | brandywinecoachworks.com Industry Automotive Service Revenue … |
| 2024-11-16 | klarenbeek-transport.nl | klarenbeek-transport.nlIndustry ManufacturingRevenue $5.3 Millio… |
| 2024-11-16 | surgicalassociates.com | surgicalassociates.com Industry Healthcare Revenue $5 Mi… |
| 2024-11-16 | billyheromans.com | billyheromans.com Industry Retail Revenue $19.6 Million … |
| 2024-11-16 | kenmore.com | kenmore.comIndustry ManufacturingRevenue $5 MillionHeadquarters … |
| 2024-11-15 | marysville.k12.oh.us | marysville.k12.oh.us 121 GB Industry Education Employees … |
| 2024-11-13 | stalyhill-inf.tameside.sch.uk | Stalyhill Infants is a very special school and we hope that you soon f… |
| 2024-11-12 | steppingstonesd.org | steppingstonesd.org Industry Healthcare Revenue $9 Million… |
| 2024-11-12 | jst.es | J.S.T. España, S.A., founded in 1981, belongs to the Japanese multinat… |
| 2024-11-12 | jarrellimc.com | jarrellimc.com 144 GB Industry Real Estate Employees … |
| 2024-11-11 | Supply Technologies | Supply Technologies, a subsidiary of ParkOhio(NASDAQ:PKOH), specialize… |
| 2024-11-11 | Maxxis International | Founded in Taiwan, Maxxis got its start by making bicycle tires, and s… |
| 2024-11-11 | dezinecorp.com | DezineCorp has been a trusted supplier of decorated promotional produc… |
| 2024-11-02 | SVP Worldwide | SVP Worldwide, founded in 2004 and headquartered in Lavergne, Tennesse… |
| 2024-10-29 | nathcompanies.com | |
| 2024-10-28 | AEROTECNIC | Who is AEROTECNIC? AEROTECNIC is a dynamic, flexible and highly qualif… |
| 2024-10-26 | wescan-services.com 760 GB | Industry Construction Employees 500 Revenue $22.4 Milli… |
| 2024-10-26 | wescan-services.com | |
| 2024-10-25 | lolaliza.com | At LolaLiza, we believe that outer appearance reflects the inner soul,… |
| 2024-10-25 | zyloware.com | About: Website www.zyloware.com Headquarters 8 Slater St, Port Chester… |
| 2024-10-25 | omara-ag.com | About: Website www.omara-ag.com Headquarters 1626 Delaware Ave, Des Mo… |
| 2024-10-25 | nrcs.net | About: Website www.nrcs.net Nicole Roth Current Workplace Company Nort… |
| 2024-10-25 | deschampsimp.com | About: Website www.deschampsimp.com Headquarters 9660 Boul Du Golf, An… |
| 2024-10-25 | unitedsprinkler.com | Headquarters 80 Potomac Creek Dr, Fredericksburg, Virginia, 22405, Uni… |
| 2024-10-22 | Aerotecnic | EROTECNIC is a dynamic, flexible and highly qualified company whose MI… |
| 2024-10-21 | Teddy SpA | Gruppo Teddy offers clothing and accessories for men, women, and child… |
| 2024-10-19 | rcschools.net | rcschools.net https://www.zoominfo.com/c/rutherford-county-schools/212… |
| 2024-10-19 | mopsohio.com | |
| 2024-10-19 | Kansas City Hospice | |
| 2024-10-18 | Neighbors Credit Union | Neighbors Credit Union is a not-for-profit, full service financial ins… |
| 2024-10-12 | Volta River Authority | The Volta River Authority generates, transmits and distributes electri… |
| 2024-10-04 | GenPro Inc. | "Genpro, Inc. is an integrated 3PL with over 30 years of experience an… |
CONFIRMED ATTACKS
BlackSuit confirmed attacks: 73 verified incidents
Ransomnews has verified 73 BlackSuit incidents against named organisations, each corroborated by a public source such as a breach notification, regulatory filing or press report. The confirmed record runs from May 2023 to April 2025. United States accounts for 61 of them (84%), with victims recorded in 12 countries in total. The most affected sector is government, at 15 confirmed victims. A ransom payment was publicly confirmed in 2 cases and publicly refused in 5; the outcome is unrecorded in the remaining 66. Where a figure was disclosed (44 cases), these incidents account for 2,911,747 exposed records.
73Verified incidents
12Countries
2023–2025Active range
29%Paid, where outcome known
Confirmed victims by year
Most affected sectors
Most affected countries
Verified BlackSuit incidents
| Date | Organisation | Sector | Location | Records | Ransom paid | Source |
|---|---|---|---|---|---|---|
| April 2025 | Rafael Viñoly Architects | Service | New York, United States | — | Unknown | Source |
| April 2025 | Gloucester County | Government | Virginia, United States | 3,527 | Unknown | Source |
| February 2025 | Town of Orangeville | Government | Orangeville, Canada | — | Unknown | Source |
| January 2025 | Massachusetts Municipal Wholesale Electric Company (MMWEC) | Government | Massachusetts, United States | 515 | Unknown | Source |
| November 2024 | Cullman County Commission | Government | Alabama, United States | — | Unknown | Source |
| October 2024 | Eastgate Auto, Inc. | Retail | Indiana, United States | 13,806 | Unknown | Source |
| October 2024 | Maxxis International | Manufacturing | Georgia, United States | 145 | Unknown | Source |
| October 2024 | Mid-Ohio Psychological Services, Inc. | Healthcare | Ohio, United States | 40,345 | Unknown | Source |
| October 2024 | Kanagawa Prefectural Sewerage Public Corporation | Government | Shinomiya, Japan | — | Unknown | Source |
| October 2024 | JTEKT North America Corporation | Manufacturing | South Carolina, United States | — | Unknown | Source |
| October 2024 | Marysville Schools | Education | Ohio, United States | — | Unknown | Source |
| October 2024 | Kansas City Hospice & Palliative Care | Healthcare | Missouri, United States | 3,621 | Unknown | Source |
| October 2024 | Gruppo Teddy | Retail | Gatteo, Italy | — | No | Source |
| September 2024 | Grandview School District | Education | Washington, United States | 9,414 | Unknown | Source |
| September 2024 | Branhaven Motors Inc. | Retail | Connecticut, United States | 11,774 | Unknown | Source |
| September 2024 | Neighbors Credit Union | Finance | Missouri, United States | 4,321 | Unknown | Source |
| September 2024 | Genpro, Inc. | Transportation | New Jersey, United States | 1,378 | Unknown | Source |
| September 2024 | LolaLiza | Retail | Wavre, Belgium | — | Unknown | Source |
| September 2024 | Charles Darwin School | Education | Westerham, United Kingdom | — | Unknown | Source |
| August 2024 | Hollywood Burbank Airport | Government | California, United States | — | Unknown | Source |
| August 2024 | City of Killeen | Government | Texas, United States | — | No | Source |
| July 2024 | Effortless Office Enterprises, LLC | Technology | Nevada, United States | 3,112 | Unknown | Source |
| July 2024 | Association of Christian Schools International (ACSI) | Education | Colorado, United States | 4,745 | Unknown | Source |
| July 2024 | Northwestern Community Services Board | Healthcare | Virginia, United States | 21,856 | Unknown | Source |
| July 2024 | WS Audiology (Widex) | Healthcare | Lynge, Denmark | 148,000 | Unknown | Source |
| July 2024 | Siegfried's Basement LLC (SBI) | Construction | New Jersey, United States | — | Unknown | Source |
| July 2024 | Hanover Hill Health Care Center | Healthcare | New Hampshire, United States | — | Unknown | Source |
| July 2024 | Monroe County | Government | Indiana, United States | — | Unknown | Source |
| June 2024 | Community High School District 117 | Education | Illinois, United States | 18,830 | Unknown | Source |
| June 2024 | Aiken Housing Authority | Government | South Carolina, United States | 3,177 | Unknown | Source |
| June 2024 | Greater Birmingham Humane Society (GBHS) | Other | Alabama, United States | 2,503 | Unknown | Source |
| June 2024 | City of Cedar Falls | Government | Iowa, United States | 3,534 | Unknown | Source |
| June 2024 | National Health Laboratory Service (NHLS) | Healthcare | Johannesburg, South Africa | — | No | Source |
| June 2024 | CDK Global | Technology | Texas, United States | 36 | Yes | Source |
| June 2024 | KADOKAWA Corporation | Other | Tokyo, Japan | 254,241 | Yes | Source |
| June 2024 | Special Health Resources of Texas, Inc. | Healthcare | Texas, United States | 4,007 | Unknown | Source |
| May 2024 | Peregrine Group, LLC | Service | Texas, United States | 2,143 | Unknown | Source |
| May 2024 | Kansas City, Kansas Police Department | Government | Missouri, United States | — | Unknown | Source |
| April 2024 | Christopher L. Mewborn, Attorney, P.A. d/b/a Mewborn & DeSelms, Attorneys at Law | Legal | North Carolina, United States | 12,941 | Unknown | Source |
| April 2024 | Pier Foundry & Pattern Shop, Inc. | Manufacturing | Minnesota, United States | — | Unknown | Source |
| April 2024 | Hiawatha Homes, Inc. | Healthcare | Minnesota, United States | 3,344 | Unknown | Source |
| April 2024 | Young Consulting LLC | Technology | Georgia, United States | 1,071,336 | Unknown | Source |
| April 2024 | Octapharma Plasma, Inc. | Healthcare | North Carolina, United States | 271,665 | Unknown | Source |
| April 2024 | Jackson County | Government | Missouri, United States | — | No | Source |
| April 2024 | Herron Todd White | Finance | Chermside, Australia | — | Unknown | Source |
| March 2024 | Ellsworth Cooperative Creamery | Food and Beverage | Wisconsin, United States | 1,991 | Unknown | Source |
| March 2024 | Evening Post Publishing Inc. | Other | South Carolina, United States | 15,065 | Unknown | Source |
| March 2024 | Local 1 of the International Brotherhood of Electrical Workers | Other | Missouri, United States | 16,060 | Unknown | Source |
| March 2024 | TRC Staffing Services, Inc. d/b/a TRC Talent Solutions | Service | Georgia, United States | 158,593 | Unknown | Source |
| March 2024 | Biggs Cardosa and Associates, Inc. | Service | California, United States | — | Unknown | Source |
| March 2024 | South St. Paul Public Schools | Education | Minnesota, United States | 1,852 | Unknown | Source |
| February 2024 | Judge Rotenberg Center | Education | Massachusetts, United States | 3,511 | Unknown | Source |
| February 2024 | Partridge Venture Engineering, LLC (PVE, LLC) | Service | Pennsylvania, United States | — | Unknown | Source |
| February 2024 | Montgomery County Board of Developmental Disabilities (MCBDDS) | Government | Ohio, United States | 11,447 | Unknown | Source |
| February 2024 | East Central University | Education | Oklahoma, United States | — | Unknown | Source |
| February 2024 | Southwest Binding & Laminating | Retail | Missouri, United States | 341 | Unknown | Source |
| January 2024 | Group Health Cooperative of South Central Wisconsin | Healthcare | Wisconsin, United States | 533,809 | Unknown | Source |
| December 2023 | North Hill | Healthcare | Massachusetts, United States | 4,798 | Unknown | Source |
| December 2023 | Farren International, LLC | Transportation | New Jersey, United States | 235 | Unknown | Source |
| December 2023 | Communauté de Communes du Pays Fouesnantais (Ville de Fouesnant) | Government | Fouesnant, France | — | No | Source |
| December 2023 | Groveport Madison Schools | Education | Ohio, United States | — | Unknown | Source |
| November 2023 | Blaine County School District | Education | Idaho, United States | — | Unknown | Source |
| November 2023 | Select Education Group | Education | California, United States | 67,097 | Unknown | Source |
| November 2023 | Kershaw County School District | Education | South Carolina, United States | 8,802 | Unknown | Source |
| November 2023 | Henry County Schools | Education | Georgia, United States | — | Unknown | Source |
| November 2023 | Golfzon | Technology | Seoul, South Korea | — | Unknown | Source |
| November 2023 | City of Huber Heights | Government | Ohio, United States | 5,738 | Unknown | Source |
| October 2023 | DePauw University | Education | Indiana, United States | 28,981 | Unknown | Source |
| October 2023 | Akumin, Inc. | Healthcare | Florida, United States | 121,815 | Unknown | Source |
| September 2023 | Financial Services Commission | Finance | Kingston, Jamaica | — | Unknown | Source |
| July 2023 | ZooTampa at Lowry Park | Other | Florida, United States | — | Unknown | Source |
| May 2023 | Marjam Supply Company (bought by Foundation Building Materials, LLC) | Retail | New York, United States | 7,957 | Unknown | Source |
| May 2023 | Venture Transportation Partners, LLC | Transportation | Indiana, United States | 9,339 | Unknown | Source |
Claimed vs confirmed. The figures above the fold on this page come from BlackSuit's own leak-site postings and reflect what the operation claims. The table here is a separate evidence class: incidents Ransomnews verified against a public source. Confirmed counts are lower than claimed counts by design: most victims never disclose, and some leak-site listings are recycled, exaggerated or fabricated. Records and ransom figures are shown only where a named source disclosed them. See the full ransomware statistics or the Ransomtracker dataset.