THREAT ACTOR
CMD-ORGANIZATION_
ActiveCMD-ORGANIZATION is a ransomware operator tracked through its public data-leak infrastructure. The group operates under the double-extortion model that defines the modern ransomware ecosystem: file encryption combined with the threat of stolen-data publication on a public leak site. It continues to post fresh victim claims as part of an ongoing extortion campaign.
For Ransomnews editorial coverage of CMD-ORGANIZATION, including incident write-ups, attribution notes and additional context, see the Threat Groups archive or run a site search.
Victims by year
- 2026 43
Leak site mirrors
2 mirrors tracked, 2 currently reachable. These are criminal-infrastructure URLs; links are deliberately not provided.
-
cmdnkiqjije2tllr3biee2sjgj3i4robg2cbtilbnytdhh2wy3syrlyd.onionCMD // home snapshot · 2026-09-23 05:36 -
cmdofficial.comSuspected Phishing | Cloudflare snapshot · 2026-09-23 05:16
Recent victims
The 50 most recent victims claimed by CMD-ORGANIZATION. Total in the index: 43.
| Date listed | Victim | Description |
|---|---|---|
| 2026-07-31 | Stewart Belland & Associates Inc. | Stewart Belland & Associates Inc. (SBA) is a Civil Enforcement Agency … |
| 2026-07-30 | Contact Group | Contact Group is a proudly Tasmanian company specializing in building … |
| 2026-07-30 | Rondout Electric | Rondout Electric Inc. is a leading electrical contracting company with… |
| 2026-07-30 | Collge Mont Notre-Dame de Sherbrooke | Le Mont Notre-Dame is a private secondary school for girls located in … |
| 2026-07-28 | B-K Tool & Design | Founded in 1981, B-K Tool & Design has transformed from a small machin… |
| 2026-07-23 | T Simon Jewelers | T. Simon Jewelers is Door County's premier jeweler, known for its exte… |
| 2026-07-16 | Saint George's School | Saint George's School: a bilingual school in Bogotá with a Cambridge c… |
| 2026-07-14 | Target Energy Solutions | TARGET is a rapidly growing digital oilfield services and solutions co… |
| 2026-07-12 | Els for Autism | Els for Autism Foundation, founded by Liezl and Ernie Els, offers prog… |
| 2026-07-11 | Golden Star Resources | Wassa is located in south-western Ghana. Golden Star commenced product… |
| 2026-07-09 | Finance Yorkshire | Finance Yorkshire provides funding solutions for small and medium-size… |
| 2026-07-07 | Mount Royal University | The university was established in 1910. Mount Royal University is a pu… |
| 2026-06-30 | Medlink Georgia | We have proudly been serving northeast Georgia since 1976. As a federa… |
| 2026-06-30 | Port Angeles Composite | Port Angeles Composite LLC (PAC) is a leading supplier of advanced str… |
| 2026-06-29 | Lørenskog kommune | Lørenskog kommune offers a range of services including education, heal… |
| 2026-06-29 | METCO Services, Metco Southeast | Metco Services is a multi-disciplined consulting firm specializing in … |
| 2026-06-28 | Fidelity Security Group | Excellence in service delivery and implementation are fundamental to o… |
| 2026-06-26 | Kohinoor Mills | Kohinoor Mills Limited is a leading textile manufacturer in Pakistan, … |
| 2026-06-23 | Coldstat Refrigeration | Coldstat Refrigeration offers a full range of industry-proven refriger… |
| 2026-06-22 | EON Meditech Pvt | EON Meditech specializes in innovative medical technology solutions ai… |
| 2026-06-22 | Union Tractor | Union Tractor Ltd. is an independent business selling aftermarket part… |
| 2026-06-21 | Wall ISD | Wall ISD is an educational institution that serves students in the Wal… |
| 2026-06-20 | Pinnacle Re-Tec | Pinnacle Re-Tec Ltd is a UK-based company specializing in the service,… |
| 2026-06-20 | Southern design RV | Southern Design RV is an award-winning caravan dealer located in Balla… |
| 2026-06-11 | New FACOM Co., Ltd. | Shin FACOM Co., Ltd. supports the efficiency of manufacturing and logi… |
| 2026-06-03 | SeeWriteHear | SeeWriteHear specializes in providing print and digital accessibility … |
| 2026-05-31 | Lake Washington School District | Founded in 1914, Lake Washington School District is the administrative… |
| 2026-05-30 | Lee Law Offices | Lee Law Offices is a well-established law firm serving clients in Nort… |
| 2026-05-29 | Capital Family Physicians | Capital Family Physicians provides quality healthcare services for fam… |
| 2026-05-28 | Hospice Savannah | Hospice Savannah provides comprehensive hospice and palliative care se… |
| 2026-05-25 | North Dallas Shared Ministries | Now-Forward is a non-profit organization based in Dallas that provides… |
| 2026-05-18 | Stonehenge Therapeutic Community | Stonehenge Therapeutic Community is dedicated to providing expert serv… |
| 2026-05-17 | Holy Name of Jesus | The Holy Name of Jesus Catholic Community is a Roman Catholic parish l… |
| 2026-05-15 | Raise the Bottom | Raise The Bottom is an opioid treatment center in Idaho, offering outp… |
| 2026-05-15 | WholeHealth Chicago | WholeHealth Chicago is a leading healthcare practice specializing in i… |
| 2026-05-14 | Houston Eye Associates | Houston Eye Associates is a team of board-certified ophthalmologists a… |
| 2026-05-14 | Goodstone Group | Goldberg Coins & Collectibles Inc. is a family-owned business speciali… |
| 2026-05-14 | Ira & Larry Goldberg Coins & Collectibles | Goldberg Coins & Collectibles Inc. is a family-owned business speciali… |
| 2026-05-12 | Advanced Software Products Group | ASPG Inc. specializes in enterprise and mainframe software solutions t… |
| 2026-05-07 | PennEastern Architects | The principals of PennEastern Engineers, LLC are Paul Pasonick, Andrew… |
| 2026-05-04 | Cytek Biosciences | A biotechnology firm that develops and supplies advanced, cost-effecti… |
| 2026-05-04 | JG Stewart Construction | JG Stewart Construction specializes in providing expert services for t… |
| 2026-05-04 | Zampell | Zampell Ltd is a leading provider of refractory services, offering com… |
CONFIRMED ATTACKS
CMD Organization confirmed attacks: 4 verified incidents
Ransomnews has verified 4 CMD Organization incidents against named organisations, each corroborated by a public source such as a breach notification, regulatory filing or press report. The confirmed record runs from April 2026 to June 2026. Japan accounts for 1 of them (25%), with victims recorded in 4 countries in total. The most affected sector is manufacturing, at 1 confirmed victim.
Confirmed victims by year
Most affected sectors
Most affected countries
Verified CMD Organization incidents
| Date | Organisation | Sector | Location | Records | Ransom paid | Source |
|---|---|---|---|---|---|---|
| June 2026 | Mount Royal University | Education | Calgary, Canada | — | Unknown | Source |
| April 2026 | Lørenskog kommune | Government | Lørenskog, Norway | — | Unknown | Source |
| April 2026 | Goodstone Group | Other | Ulverstone, Australia | — | Unknown | Source |
| April 2026 | Shin FA-COM Co., Ltd. | Manufacturing | Oyama, Japan | — | Unknown | Source |
Claimed vs confirmed. The figures above the fold on this page come from CMD Organization's own leak-site postings and reflect what the operation claims. The table here is a separate evidence class: incidents Ransomnews verified against a public source. Confirmed counts are lower than claimed counts by design: most victims never disclose, and some leak-site listings are recycled, exaggerated or fabricated. Records and ransom figures are shown only where a named source disclosed them. See the full ransomware statistics or the Ransomtracker dataset.