Close Menu
  • Home
  • News
  • Security
  • Privacy
  • Cybercrime
    • Threat Groups
    • Ransomware
    • Explainers
    • Stealer Logs
  • AI
  • OSINT
  • Tools
    • Ransomtracker
    • Stealercheck
    • FortiBleed Checker
  • About Us
Facebook X (Twitter) Instagram Threads
Ransomnews
  • Home
  • News
  • Security
  • Privacy
  • Cybercrime
    • Threat Groups
    • Ransomware
    • Explainers
    • Stealer Logs
  • AI
  • OSINT
  • Tools
    • Ransomtracker
    • Stealercheck
    • FortiBleed Checker
  • About Us
Facebook X (Twitter) LinkedIn
Ransomnews

COINBASE-CARTEL · Threat actor profile

// THREAT ACTOR

COINBASE-CARTEL_

Dormant

Coinbase Cartel is a ransomware operation tracked through its public data-leak site, active from 2024 onward. The group operates under the double-extortion playbook common across the modern ransomware ecosystem.

For Ransomnews editorial coverage of COINBASE-CARTEL — incident write-ups, attribution notes, and additional context — see the Threat Groups archive or run a site search.

196 Victims tracked
0 / 12 Active mirrors
2025-09-15 First listing
2026-08-02 Most recent

Victims by year

  • 2026 132
  • 2025 64

Leak site mirrors

12 mirrors tracked, 0 currently reachable. These are criminal-infrastructure URLs — links are deliberately not provided.

  • fjg4zi4opkxkvdz7mvwp7h6goe4tcby3hhkrz43pht4j3vakhy75znyd.onion System Breach • Coinbasecartel snapshot · 2026-08-06 18:06
  • vkhztfqsjbh2in6425uvomeutn3oc4eos4264oexk57zdmntt2hoidid.onion snapshot · 2025-10-02 20:31
  • c7izex5h5shupbutwzsj73yputkqudfm7pvurawov7ciig6nkwssclad.onion snapshot · 2025-10-02 20:33
  • c5oxtg26apmuh3omkhuto22jy37rsgfifbvblvog7ur6d2rbhx7emxqd.onion snapshot · 2025-10-02 20:34
  • pa4wtlap543g2gx34nphm5lcsrwwl3wwj6nb7omwqlrj3pruf4zuufyd.onion snapshot · 2025-10-02 20:34
  • rfqsuxf2c3epm7tcxtqrsfaol3kpqe2omxfdls4lbg54ntsaazidgqid.onion snapshot · 2025-10-02 20:36
  • won2bghjatxaavvf7eoepuwj74pej764mys575xan2h2uoctxnuojyyd.onion 404 Not Found snapshot · 2026-01-07 15:22
  • 5uvjhrqzsyyg4cku6uofsu7swmkqwit3na6plsaath4g3mgikievdead.onion snapshot · 2025-12-15 21:46
  • otlnqz4lzee2xpnyy7vx6mwj6nonwgdloxeykwxulvgjwc5wzfacrzid.onion snapshot · 2025-12-15 21:48
  • uzzgphpytgr7zpb6sudyf7ryds5g3cibrhwabwpf3sd7yjkv45b7uuad.onion snapshot · 2025-12-16 16:01
  • chk4gwd4yku5jmhrqvqv4t52dwhccmi5e4ssomqreirl5wbosqdnb3qd.onion snapshot · 2025-12-16 16:02
  • iu6t4jcin7iexrdcgyspal6rsafyu4mw4tkdvugx4nmioxs7mbifdzad.onion snapshot · 2026-07-02 09:04

Recent victims

The 50 most recent victims claimed by COINBASE-CARTEL. Total in the index: 196.

Date listed Victim Description
2026-08-02 CEN and Cenelec NEW Membership Organizations - $21.9 Million
2026-08-02 MIM Fertility NEW Healthcare Software - $10.5 Million
2026-08-02 M. B. Kahn Construction Co. NEW Construction - $500 Million
2026-08-02 Xs Cad NEW Architecture - $26.9 Million
2026-07-28 Accesso NEW Financial Software - $152.3 Million
2026-07-27 Colliers Real Estate Real Estate - $5.7 Billion
2026-07-22 Axiom Global Business Services - $19.2 Million
2026-07-20 Colliers Real Estate NEW Real Estate - $5.7 Billion
2026-07-20 Caterpillar Manufacturing - $67 Billion
2026-07-15 PanasonicAero Aerospace - $2.71 Billion
2026-07-14 Axiom Global NEW Business Services - $19.2 Million
2026-06-13 Demand.io Advertising - $10.5
2026-06-13 Cambridge Mobile Telematics Telematics - $200 Million
2026-06-05 Demand.io NEW Advertising - $10.5
2026-06-05 Cambridge Mobile Telematic NEW Telematics - $200 Million
2026-06-02 Cambridge Mobile Telematics NEW Telematics - $200 Million
2026-06-02 Panasonic.Aero Afve-Papppppppppppppl, ,
2026-05-29 - Cognizant Tech - $21.1 Billion
2026-05-22 Siveco - Tech - $123.7 Million
2026-05-22 - Cognizant NEW Tech - $21.1 Billion
2026-05-22 Openmind networks NEW Software - $20.1 Million
2026-05-22 Pragmatic Solutions NEW Casino Erp - Undisclosed
2026-05-21 Openmind networks Software - $20.1 Million
2026-05-21 Pragmatic Solutions Casino Erp - Undisclosed
2026-05-21 Panasonic Aero Aero - $2.7 Billion
2026-05-15 Zywave
2026-05-15 Grafana
2026-05-13 Buenos Aires Software
2026-05-12 Jozef Stefan Institute (IJS)
2026-05-12 Alpinion
2026-05-12 Tab Service
2026-05-12 Cass information Systems
2026-04-23 Sanna Web
2026-04-23 Peru LNG (Hunt LNG Operating Company)
2026-04-23 Aptim
2026-04-23 Kementerian Pertanian
2026-04-23 Sea Telecom Br
2026-04-23 Precision Coating
2026-04-23 Integer Holdings
2026-04-20 SIG.biz
2026-04-20 Commscope
2026-04-20 Playmates Toys
2026-04-20 Engie
2026-04-19 ASTM Group
2026-04-18 Securitevolfeu
2026-04-18 Altpro
2026-04-18 McCuaig and associates Engineering
2026-04-18 Evict them for me
2026-04-15 The Epoch Times
2026-04-15 Canada Goose - Updated with proof

← Back to Ransomtracker

Statistics on this page are computed by Ransomnews from a live leak-site monitoring feed. Numbers update every ten minutes. Operator-written victim descriptions are truncated and shown in snippet form only. Source data: RansomLook (CC BY 4.0), aggregated and adapted by Ransomnews.

Facebook X (Twitter) LinkedIn
© 2026 Ransomnews.com

Type above and press Enter to search. Press Esc to cancel.

Cookies on Ransomnews

We use strictly-necessary cookies to run the site and may use first-party analytics to understand which articles are read. Some pages contain affiliate links — when you click one, the affiliate network sets cookies on the merchant's domain to attribute the referral. See the Cookie Policy and Affiliate Disclosure for detail.

RANSOMNEWS.COM

Tracking the criminal infrastructure of the internet.

Independent coverage of ransomware, breach economics, threat actors, privacy, AI security, and the open-source investigation toolkit.

// Topics

  • News
  • Security
  • Privacy
  • Cybercrime
  • AI
  • OSINT
  • Threat Groups
  • Stealer Logs
  • Ransomtracker
  • Stealercheck
  • FortiBleed Checker

// Site

  • About Us
  • Editorial Team
  • Contact
  • Tip Line
  • Editorial

// Legal

  • Privacy Policy
  • Terms of Service
  • Cookie Policy
  • Funding & Independence
  • RSS Feed
© 2026 Ransomnews.com · Tracking the criminal infrastructure of the internet.