Close Menu
  • Home
  • News
  • Security
  • Privacy
  • Cybercrime
    • Threat Groups
    • Ransomware
    • Explainers
    • Stealer Logs
  • AI
  • OSINT
  • Tools
    • Ransomtracker
    • Stealercheck
    • FortiBleed Checker
  • About Us
Facebook X (Twitter) Instagram Threads
Ransomnews
  • Home
  • News
  • Security
  • Privacy
  • Cybercrime
    • Threat Groups
    • Ransomware
    • Explainers
    • Stealer Logs
  • AI
  • OSINT
  • Tools
    • Ransomtracker
    • Stealercheck
    • FortiBleed Checker
  • About Us
Facebook X (Twitter) LinkedIn
Ransomnews

BLACKOUT · Threat actor profile

// THREAT ACTOR

BLACKOUT_

Active

BLACKOUT is a ransomware operator tracked through its public data-leak infrastructure. The group operates under the double-extortion model that defines the modern ransomware ecosystem — file encryption combined with the threat of stolen-data publication on a public leak site — and continues to post fresh victim claims as part of an ongoing extortion campaign.

For Ransomnews editorial coverage of BLACKOUT — incident write-ups, attribution notes, and additional context — see the Threat Groups archive or run a site search.

13 Victims tracked
9 / 9 Active mirrors
2024-02-27 First listing
2026-07-18 Most recent

Victims by year

  • 2026 2
  • 2025 2
  • 2024 9

Leak site mirrors

9 mirrors tracked, 9 currently reachable. These are criminal-infrastructure URLs — links are deliberately not provided.

  • black3gnkizshuynieigw6ejgpblb53mpasftzd6pydqpmq2vn2xf6yd.onion snapshot · 2026-08-06 21:37
  • 4qyjonpyksc52bc3fsgfgedssqgo4a6vlfsjknqnkncbyl4layqkqjid.onion Index of / snapshot · 2026-08-06 21:02
  • ao5oo2luy6avdfomyw7hcegmfl4let2g5bzjqjzch6b5rpdshmuvccad.onion Index of / snapshot · 2026-08-06 21:00
  • urey23jtg6z7xx3tiybmc4sgcim7dawiz2abl6crpup2lfobf7yb5wyd.onion Index of / snapshot · 2026-08-06 21:08
  • mu6se7h7qfwuqclr4cc6zy7qevod6gyk37aq5vwnayrtbx3qqycx2fyd.onion Index of / snapshot · 2026-08-06 21:04
  • eleav2eq3ioyiuevbyvqaz3vruwvpislphszo4cm7n56itbpnupxngyd.onion Index of / snapshot · 2026-08-06 21:34
  • 2cyxmof76rxeqze5snxxooqmhzjtcploqswxoxmenfayphumdhrtrzqd.onion Index of / snapshot · 2026-08-06 21:04
  • rqqn25k3hgmfkh7ykjbmakjgidwweomr7cbpy6pfecpxs57r5iwzwtyd.onion Index of / snapshot · 2026-08-06 21:18
  • idep6vd7ywl7uruhsutqjdnjawe33hct35523rrmf73kb46xrhfb5sid.onion Index of / snapshot · 2026-08-06 21:24

Recent victims

The 50 most recent victims claimed by BLACKOUT. Total in the index: 13.

Date listed Victim Description
2026-07-18 bluebellgroup.com Bluebell Group is a Hong Kong-based, family-owned omnichannel brand cu…
2026-02-26 en.yofc.com Yangtze Optical Fibre and Cable (YOFC) is a leading global supplier of…
2025-07-09 www.miatech.net Miatech is a US-based company that provides passenger travel services …
2025-03-20 yano.tokyo Yano Electronics Ltd. is a company in the field of microelectronics, w…
2024-12-09 nedamaritime.gr Neda Maritime is an independent shipping company that manages and oper…
2024-09-29 cdc-biodiversite.fr CDC Biodiversité is a French environmental protection company making t…
2024-08-22 antaeustravel.com Antaeus Travel is a travel agency specializing in corporate and sea tr…
2024-07-14 luzan5.com luzan5.com is a small company in the healthcare consulting field, perh…
2024-07-03 badel1862.hr Badel 1862 is an alcoholic beverage manufacturer from Croatia and at t…
2024-05-29 mcmtelecom.com We carried out an attack on mcmtelecom.com, a b2b telecommunications p…
2024-04-18 ht-hospitaltechnik.de Why don't medical companies pay us? As usual we got into the network h…
2024-02-27 ch-armentieres.fr First post on our new blog ! We encrypted 100+ servers and workstation…
2024-02-27 metal7.com This time we dug into the network of metal7.com, a company that manufa…

← Back to Ransomtracker

Statistics on this page are computed by Ransomnews from a live leak-site monitoring feed. Numbers update every ten minutes. Operator-written victim descriptions are truncated and shown in snippet form only. Source data: RansomLook (CC BY 4.0), aggregated and adapted by Ransomnews.

Facebook X (Twitter) LinkedIn
© 2026 Ransomnews.com

Type above and press Enter to search. Press Esc to cancel.

Cookies on Ransomnews

We use strictly-necessary cookies to run the site and may use first-party analytics to understand which articles are read. Some pages contain affiliate links — when you click one, the affiliate network sets cookies on the merchant's domain to attribute the referral. See the Cookie Policy and Affiliate Disclosure for detail.

RANSOMNEWS.COM

Tracking the criminal infrastructure of the internet.

Independent coverage of ransomware, breach economics, threat actors, privacy, AI security, and the open-source investigation toolkit.

// Topics

  • News
  • Security
  • Privacy
  • Cybercrime
  • AI
  • OSINT
  • Threat Groups
  • Stealer Logs
  • Ransomtracker
  • Stealercheck
  • FortiBleed Checker

// Site

  • About Us
  • Editorial Team
  • Contact
  • Tip Line
  • Editorial

// Legal

  • Privacy Policy
  • Terms of Service
  • Cookie Policy
  • Funding & Independence
  • RSS Feed
© 2026 Ransomnews.com · Tracking the criminal infrastructure of the internet.