THREAT ACTOR
CLOP_
DormantCl0p is a long-running ransomware operation associated with the FIN11 / TA505 threat cluster. It is best known for its mass exploitation of file-transfer software vulnerabilities — including Accellion FTA, GoAnywhere MFT, and MOVEit Transfer in 2023 — to compromise hundreds of organisations in single campaigns.
For Ransomnews editorial coverage of CLOP, including incident write-ups, attribution notes and additional context, see the Threat Groups archive or run a site search.
2,315
Victims tracked
0 / 11
Active mirrors
2021-09-09
First listing
2026-09-10
Most recent
Victims by year
- 2026 223
- 2025 549
- 2024 28
- 2023 399
- 2022 577
- 2021 539
Leak site mirrors
11 mirrors tracked, 0 currently reachable. These are criminal-infrastructure URLs; links are deliberately not provided.
-
ekbgzchl6x2ias37.onionHOME | CL0P^_- LEAKS snapshot · 2022-08-19 02:13 -
santat7kpllt6iyvqbr7q4amdv6dzrh6paatvyrzl7ry3zm72zigf4ad.onionsnapshot · 2026-09-23 03:36 -
3ws3t4uo7fehnn4qpmadk3zjrxta5xlt3gsc5mx4sztrsy7ficuz5ayd.onionsnapshot · 2024-12-15 13:29 -
amnwxasjtjc6e42siac6t45mhbkgtycrx5krv7sf5festvqxmnchuayd.onionsnapshot · 2024-12-15 13:00 -
qahjimrublt35jlv4teesicrw6zhpwhkb6nhtonwxuqafmjhr7hax2id.onion403 Forbidden snapshot · 2024-12-15 13:15 -
npkoxkuygikbkpuf5yxte66um727wmdo2jtpg2djhb2e224i4r25v7ad.onion404 Not Found snapshot · 2025-01-22 11:15 -
6v4q5w7di74grj2vtmikzgx2tnq5eagyg2cubpcnqrvvee2ijpmprzqd.onionsnapshot · 2025-01-22 12:03 -
l4rdimrqyonulqjttebry4t6wuzgjv5m62rnpjho3q22a6maf6d5evyd.onion403 Forbidden snapshot · 2025-11-09 04:03 -
frgp3f3u2ddafv4ny7tqn6tc674m6fyymyywoaxot7xskbjmiyhhsyqd.onionsnapshot · 2026-02-20 12:24 -
htmxyptur5wfjrd7uvg23snupub2pbtlfelk45n37b3augl2w4eearid.onionsnapshot · 2026-09-22 23:30 -
2vi357dgf4246nvrcsavrt5jsrm7pfqim4t2n3ykzedjim5bzqezmlyd.onion403 Forbidden snapshot · 2025-10-09 10:02
Recent victims
The 50 most recent victims claimed by CLOP. Total in the index: 2,315.
| Date listed | Victim | Description |
|---|---|---|
| 2026-09-10 | HENRYPRATT.COM | |
| 2026-09-10 | HARLEY-DAVIDSON.COM | |
| 2026-08-13 | ZEBRA.COM | Data exfiltrated included the following: Database, Project - files, CA… |
| 2026-08-12 | NETPOWER.COM | Data exfiltrated included the following: Projects, Cad-files, Backup f… |
| 2026-08-12 | SHELL.COM (August 2026) | Data exfiltrated included the following: Engineering drawings, photos … |
| 2026-08-12 | GE.COM | Data exfiltrated included the following: Software backups, system file… |
| 2026-08-12 | FISERV.COM | Data exfiltrated included the following: Projects, Cad-files, files Wi… |
| 2026-08-12 | PHILIPS.COM | Data exfiltrated included the following: PDF drawings, diagrams, bluep… |
| 2026-08-12 | ALDOGROUP.COM (ALDOSHOES.COM) | Data exfiltrated included the following: TSV files, soft, Projects, Ca… |
| 2026-08-12 | IRCO.COM | Data exfiltrated included the following: Cad-files, PDF drawings, diag… |
| 2026-08-12 | TOASTTAB.COM | Data exfiltrated included the following: project, backup database, log… |
| 2026-08-12 | LARGAN.COM.TW | Data exfiltrated included the following: Project, Soft Total size: 56… |
| 2026-08-12 | STARKEY.COM | Data exfiltrated included the following: Database, Project Total size… |
| 2026-08-12 | PARTECH.COM | Data exfiltrated included the following: Database, Project, Cad-files,… |
| 2026-08-12 | MAMMUT.COM | Data exfiltrated included the following: .png files, files Windchil T… |
| 2026-08-12 | CORNELIUS.COM | Data exfiltrated included the following: Database, Project, PDF, TXT, … |
| 2026-08-12 | MAMASANDPAPAS.COM | Data exfiltrated included the following: Database, Project - files To… |
| 2026-08-12 | TRISTAR.COM | Data exfiltrated included the following: Database, Project - files To… |
| 2026-08-12 | SMAPCENTER.UAH.EDU | Data exfiltrated included the following: Database, Project - files To… |
| 2026-08-12 | SUUNTO.CN (SUUNTO.COM) | Data exfiltrated included the following: Database, Project - files To… |
| 2026-08-12 | BRILLONCONSUMER.COM (BRILLONCONSUMER.COM) | Data exfiltrated included the following: Database, Project - files To… |
| 2026-08-12 | JPMGROUP.CO.IN | Data exfiltrated included the following: Database, Project - files To… |
| 2026-08-12 | CLOVER.COM | Data exfiltrated included the following: Database, Project - files To… |
| 2026-08-12 | ATOMBERG.COM | Data exfiltrated included the following: Database, Project - files To… |
| 2026-08-12 | HONGHE-TECH.COM | Data exfiltrated included the following: Database, Project - files To… |
| 2026-08-12 | INTELLIGENTGROWTHSOLUTIONS.COM | Data exfiltrated included the following: Database, Project, PDF, XLSX,… |
| 2026-08-12 | INTELLIHOT.COM | Data exfiltrated included the following: Database, Projects, Backups, … |
| 2026-08-12 | 9ALTITUDES.COM | Data exfiltrated included the following: Database, Projects, Project B… |
| 2026-08-12 | WATERLANDPE.COM | Data exfiltrated included the following: Database, Projects, Project B… |
| 2026-08-12 | THERMOS.COM | Data exfiltrated included the following: Database, Projects, Soft inst… |
| 2026-08-12 | NUOVACMM.COM | Data exfiltrated included the following: Database, Projects, Soft inst… |
| 2026-08-12 | IVALUESYS.COM | Data exfiltrated included the following: Database, Projects, Backups … |
| 2026-08-12 | SPKAA.COM | Data exfiltrated included the following: Database, Projects Total siz… |
| 2026-08-12 | LIFESTRAW.COM | Data exfiltrated included the following: Database, Projects, Backups, … |
| 2026-08-12 | OMNITANKER.COM | Data exfiltrated included the following: Database, Projects, SQL Backu… |
| 2026-08-12 | ARCHERGREY.COM | Data exfiltrated included the following: Database, Projects Total siz… |
| 2026-08-12 | G3AEROSPACE.COM | Data exfiltrated included the following: Database, Projects Total siz… |
| 2026-08-12 | ITKHOLDING.HU | Data exfiltrated included the following: Database, Projects Total siz… |
| 2026-08-12 | MIDLANDIND.COM.AU | Data exfiltrated included the following: Database, Project Total size… |
| 2026-08-12 | FLUIDLOGIC.COM | Data exfiltrated included the following: Database, Project,Cad-files … |
| 2026-08-12 | QCPL.IN | Data exfiltrated included the following: Database, Project Total size… |
| 2026-08-12 | STNET.IT | Data exfiltrated included the following: Database, Project Total size… |
| 2026-08-12 | ECCELLENT.COM | Data exfiltrated included the following: DBF files, Cad-files, Project… |
| 2026-08-12 | IPMSOLUTIONS.SK | Data exfiltrated included the following: PDF files, Cad-files, Soft T… |
| 2026-08-12 | NUVITIA.COM | Data exfiltrated included the following: Project, Soft Total size: 89… |
| 2026-08-07 | CONTINENTAL.AERO | |
| 2026-08-07 | MINDRAY.COM | |
| 2026-08-05 | nuv******* | Data exfiltrated included the following: Project, Soft Total size: 89… |
| 2026-08-05 | ipm******* | Data exfiltrated included the following: PDF files, Cad-files, Soft T… |
| 2026-08-05 | ecc******* | Data exfiltrated included the following: DBF files, Cad-files, Project… |
CONFIRMED ATTACKS
Cl0p confirmed attacks: 133 verified incidents
Ransomnews has verified 133 Cl0p incidents against named organisations, each corroborated by a public source such as a breach notification, regulatory filing or press report. The confirmed record runs from October 2019 to August 2026. United States accounts for 78 of them (59%), with victims recorded in 19 countries in total. The most affected sector is manufacturing, at 29 confirmed victims. A ransom payment was publicly confirmed in 1 case and publicly refused in 8; the outcome is unrecorded in the remaining 124. Where a figure was disclosed (65 cases), these incidents account for 118,661,730 exposed records.
133Verified incidents
19Countries
2019–2026Active range
11%Paid, where outcome known
Confirmed victims by year
Most affected sectors
Most affected countries
Verified Cl0p incidents (100 most recent of 133)
| Date | Organisation | Sector | Location | Records | Ransom paid | Source |
|---|---|---|---|---|---|---|
| August 2026 | Philips | Manufacturing | Amsterdam, Netherlands | — | Unknown | Source |
| August 2026 | Shell | Other | London, United Kingdom | — | Unknown | Source |
| February 2026 | CFDT | Other | Paris, France | — | Unknown | Source |
| December 2025 | Wheelock Street Capital, LLC | Other | Connecticut, United States | — | Unknown | Source |
| December 2025 | GiaSpace | Technology | Florida, United States | — | Unknown | Source |
| December 2025 | Gia Care, Inc. | Healthcare | Florida, United States | — | Unknown | Source |
| November 2025 | Ocelot Ventures, LLC dba Excelas, LLC | Healthcare | Ohio, United States | 2,309 | Unknown | Source |
| November 2025 | Korean Air Catering & Duty Free (KC&D) | Food and Beverage | Seoul, South Korea | 30,000 | Unknown | Source |
| November 2025 | Mazda Motor Corporation | Manufacturing | Fuchu-cho, Japan | — | Unknown | Source |
| November 2025 | Canon, U.S.A., Inc. | Manufacturing | New York, United States | — | Unknown | Source |
| October 2025 | Hampton Roads Sanitation District | Government | Virginia, United States | 3,824 | Unknown | Source |
| October 2025 | Ansell Limited | Manufacturing | Richmond, Australia | — | Unknown | Source |
| October 2025 | Envoy Air Inc. | Transportation | Texas, United States | — | Unknown | Source |
| October 2025 | University of the Witwatersrand (Wits University) | Education | Johannesburg, South Africa | — | Unknown | Source |
| October 2025 | Harvard University | Education | Massachusetts, United States | 45 | Unknown | Source |
| September 2025 | Mutti USA, Inc. | Food and Beverage | Connecticut, United States | — | Unknown | Source |
| August 2025 | Grupo Bimbo | Food and Beverage | Mexico City, Mexico | 46,064 | Unknown | Source |
| August 2025 | Corporation Service Company (CSC) | Service | Delaware, United States | 2,565 | Unknown | Source |
| August 2025 | Estée Lauder | Manufacturing | New York, United States | 2,374 | Unknown | Source |
| August 2025 | MasTec, Inc. | Service | Florida, United States | 25,220 | Unknown | Source |
| August 2025 | Fluke Corporation | Manufacturing | Washington, United States | 18,517 | Unknown | Source |
| August 2025 | Tulane University | Education | Louisiana, United States | 80,867 | Unknown | Source |
| August 2025 | Humana | Healthcare | Kentucky, United States | 1,000 | Unknown | Source |
| August 2025 | Hypertherm, Inc. | Manufacturing | New Hampshire, United States | 4,228 | Unknown | Source |
| August 2025 | Michelin | Manufacturing | Clermont-Ferrand, France | — | Unknown | Source |
| August 2025 | Maritz Holdings Inc. | Service | Missouri, United States | 3,193 | Unknown | Source |
| August 2025 | Madison Square Garden Family of Companies (Madison Square Garden Sports Corp., Madison Square Garden Entertainment Corp., Sphere Entertainment Co.) | Other | New York, United States | 38,393 | Unknown | Source |
| August 2025 | Anywhere Real Estate Inc. | Service | New Jersey, United States | 17,429 | Unknown | Source |
| August 2025 | EMC Water LLC (Elkay Wood Products Company) | Manufacturing | Illinois, United States | 6,464 | Unknown | Source |
| August 2025 | Informa | Other | New York, United States | 7,202 | Unknown | Source |
| August 2025 | Parexel International, LLC | Healthcare | North Carolina, United States | 6,869 | Unknown | Source |
| August 2025 | LKQ Corporation | Retail | Tennessee, United States | 9,070 | Unknown | Source |
| August 2025 | Garden of Life | Manufacturing | Florida, United States | 2,285 | Unknown | Source |
| August 2025 | University of Phoenix | Education | Arizona, United States | 3,489,274 | Unknown | Source |
| August 2025 | NCH Corporation | Manufacturing | Texas, United States | 3,912 | Unknown | Source |
| August 2025 | Barts Health NHS Trust | Healthcare | London, United Kingdom | — | Unknown | Source |
| August 2025 | The University of Pennsylvania | Education | Pennsylvania, United States | 46,491 | Unknown | Source |
| August 2025 | Dartmouth College | Education | New Hampshire, United States | 99,596 | Unknown | Source |
| August 2025 | Oracle | Technology | Texas, United States | — | Unknown | — |
| August 2025 | Cox Enterprises, Inc. | Other | Georgia, United States | 9,479 | Unknown | Source |
| August 2025 | Logitech International S.A. | Manufacturing | Lausanne, Switzerland | — | Unknown | Source |
| August 2025 | SATO Corporation | Manufacturing | Minato-ku, Japan | — | Unknown | Source |
| August 2025 | David Yurman Enterprises LLC | Manufacturing | New York, United States | — | Unknown | Source |
| July 2025 | Southern Illinois University | Education | Illinois, United States | 1,754 | Unknown | Source |
| July 2025 | GlobalLogic | Technology | California, United States | 10,471 | Unknown | Source |
| July 2025 | The Washington Post | Other | District of Columbia, United States | 9,822 | Unknown | Source |
| March 2025 | Check City Partnership, LLC | Finance | Utah, United States | 322,687 | Unknown | Source |
| March 2025 | Calton & Associates, Inc. | Finance | Florida, United States | 926 | Unknown | Source |
| January 2025 | Uniek, Inc. | Manufacturing | Wisconsin, United States | 1,160 | Unknown | Source |
| December 2024 | César Castillo, LLC | Transportation | Guaynabo, Puerto Rico | — | Unknown | Source |
| December 2024 | Cierant Corporation | Technology | Connecticut, United States | 232,506 | Unknown | Source |
| December 2024 | Tesisquare S.p.A. | Technology | Roreto di Cherasco, Italy | — | Unknown | Source |
| December 2024 | WK Kellogg Co. | Food and Beverage | Michigan, United States | 4,093 | Unknown | Source |
| December 2024 | Champion Home Builders | Construction | Michigan, United States | — | Unknown | Source |
| December 2024 | Chicago Public Schools | Education | Illinois, United States | 700,000 | Unknown | Source |
| November 2024 | Cleo | Technology | Illinois, United States | — | Unknown | Source |
| October 2024 | The Hertz Corporation | Service | Florida, United States | 1,000,175 | Unknown | Source |
| October 2024 | Western Alliance Bank | Finance | Arizona, United States | 21,899 | Unknown | Source |
| October 2024 | Hubbard-Hall | Manufacturing | Connecticut, United States | 327 | Unknown | Source |
| July 2024 | Bishop Lifting | Manufacturing | Texas, United States | — | Unknown | Source |
| June 2024 | Hartson-Kennedy Inc. | Manufacturing | Indiana, United States | 3,600 | Unknown | Source |
| April 2024 | New Jersey Oral & Maxillofacial Surgery | Healthcare | New Jersey, United States | 74,413 | Unknown | Source |
| April 2024 | Compex Legal Services | Legal | California, United States | 28,751 | Unknown | Source |
| March 2024 | Pilot Corporation of America | Manufacturing | Florida, United States | — | Unknown | Source |
| February 2024 | Bronstein & Carmona, P.A. | Legal | Florida, United States | 10,792 | Unknown | Source |
| December 2023 | St. Joseph’s College of Maine | Education | Maine, United States | 126,580 | Unknown | Source |
| December 2023 | The Peddie School | Education | New Jersey, United States | 7,812 | Unknown | Source |
| October 2023 | Delphinus Engineering | Service | Pennsylvania, United States | 2,232 | Unknown | Source |
| October 2023 | Texas Wesleyan University | Education | Texas, United States | 2,900 | Unknown | Source |
| May 2023 | Fortescue Metals Group | Manufacturing | Adelaide, Australia | — | Unknown | Source |
| May 2023 | MOVEit (Ipswitch) | Technology | Massachusetts, United States | 95,788,491 | Unknown | Source |
| May 2023 | The Michener Institute | Education | Ontario, Canada | — | Unknown | Source |
| May 2023 | 360 Equipment Finance | Finance | Texas, United States | — | Unknown | Source |
| March 2023 | Vumacam | Technology | Johannesburg, South Africa | — | No | Source |
| February 2023 | Durr AG/Homag Group | Manufacturing | Bietigheim-bissingen, Germany | — | Unknown | Source |
| February 2023 | MedMinder Systems, Inc. | Healthcare | Massachusetts, United States | 12,146 | Unknown | Source |
| January 2023 | Fortra, LLC (GoAnywhere) | Technology | Minnesota, United States | 6,036,466 | Unknown | Source |
| December 2022 | New York City Bar Association | Other | New York, United States | 27,226 | Unknown | Source |
| August 2022 | South Staffordshire Plc (South Staffordshire Water and Cambridge Water) | Utilities | Walsall, United Kingdom | 633,887 | Unknown | Source |
| July 2022 | Order Express, Inc. | Finance | Illinois, United States | 63,220 | Unknown | Source |
| July 2022 | Spinneys | Food and Beverage | Dubai, United Arab Emirates | — | Unknown | Source |
| May 2022 | Fort Sumner Municipal Schools | Education | New Mexico, United States | — | Unknown | Source |
| April 2022 | Perbit | Technology | Altenberge, Germany | — | No | Source |
| April 2022 | American Technologies, LLC d/b/a 888VoIP | Retail | New York, United States | — | Unknown | Source |
| February 2022 | Fair-Rite Products Corporation | Manufacturing | New York, United States | 1,543 | Unknown | Source |
| December 2021 | Ferran Services | Service | Florida, United States | 2,248 | Unknown | Source |
| November 2021 | Muschert + Gierse | Manufacturing | Neuenrade, Germany | — | Unknown | Source |
| November 2021 | Swire Pacific Offshore | Service | Singapore, Singapore | — | Unknown | Source |
| October 2021 | MCH Group | Other | Basel, Switzerland | — | Unknown | Source |
| October 2021 | Absolute Results Productions Ltd | Service | Surrey, Canada | — | Unknown | Source |
| October 2021 | Dacoll Ltd | Technology | Bathgate, United Kingdom | — | No | Source |
| September 2021 | Stratis Visuals, LLC | Other | Connecticut, United States | 233 | Unknown | Source |
| August 2021 | Valley Truck & Tractor | Retail | California, United States | — | Unknown | Source |
| August 2021 | Quantum Group | Service | Illinois, United States | 67,147 | Unknown | Source |
| June 2021 | KSS Architects LLP | Service | New Jersey, United States | — | Unknown | Source |
| May 2021 | Groupe Boutin Inc | Transportation | Quebec, Canada | — | Unknown | Source |
| May 2021 | Aurobindo Pharma USA, Inc. | Healthcare | New Jersey, United States | — | Unknown | Source |
| April 2021 | Utility Trailer Manufacturing | Manufacturing | California, United States | 28,703 | Unknown | Source |
| April 2021 | Sullivan Family of Companies (Foodland Supermarket, Coffee Pacific, Food Pantry) | Food and Beverage | Hawaii, United States | 39,630 | Unknown | Source |
| March 2021 | Transport for NSW | Government | Haymarket, Australia | — | Unknown | Source |
Claimed vs confirmed. The figures above the fold on this page come from Cl0p's own leak-site postings and reflect what the operation claims. The table here is a separate evidence class: incidents Ransomnews verified against a public source. Confirmed counts are lower than claimed counts by design: most victims never disclose, and some leak-site listings are recycled, exaggerated or fabricated. Records and ransom figures are shown only where a named source disclosed them. See the full ransomware statistics or the Ransomtracker dataset.