Close Menu
  • Home
  • News
  • Security
  • Privacy
  • Cybercrime
    • Threat Groups
    • Ransomware
    • Explainers
    • Stealer Logs
  • AI
  • OSINT
  • Tools
    • Ransomtracker
    • Stealercheck
    • FortiBleed Checker
    • Site Check
  • Data
    • Ransomware statistics
    • Ransom payment rate
    • Breach verification
  • Newsletter
  • About Us
Facebook X (Twitter) Instagram Threads
Ransomnews
  • Home
  • News
  • Security
  • Privacy
  • Cybercrime
    • Threat Groups
    • Ransomware
    • Explainers
    • Stealer Logs
  • AI
  • OSINT
  • Tools
    • Ransomtracker
    • Stealercheck
    • FortiBleed Checker
    • Site Check
  • Data
    • Ransomware statistics
    • Ransom payment rate
    • Breach verification
  • Newsletter
  • About Us
Facebook X (Twitter) LinkedIn
Ransomnews

CONTI · Threat actor profile

THREAT ACTOR

CONTI_

Dormant

Conti was a Russian-speaking ransomware cartel that ran one of the most aggressive double-extortion operations between 2020 and 2022, targeting hospitals, government agencies, and critical infrastructure. The group disbanded publicly after the “Conti Leaks” exposed its internal chats and source code in early 2022, though many of its operators are believed to have rebranded into successor groups including Black Basta, Royal, and Karakurt.

For Ransomnews editorial coverage of CONTI, including incident write-ups, attribution notes and additional context, see the Threat Groups archive or run a site search.

293 Victims tracked
0 / 9 Active mirrors
2021-09-09 First listing
2022-06-07 Most recent

Victims by year

  • 2022 123
  • 2021 170

Leak site mirrors

9 mirrors tracked, 0 currently reachable. These are criminal-infrastructure URLs; links are deliberately not provided.

  • continewsnv5otx5kaoje7krkto2qbu3gtqef22mnr7eaxw3y6ncz3ad.onion CONTI.News snapshot · 2022-06-21 19:12
  • continews.click continews.click | 522: Connection timed out snapshot · 2026-09-02 17:17
  • m232fdxbfmbrcehbrj5iayknxnggf6niqfj6x4iedrgtab4qupzjlaid.onion snapshot · 2024-12-06 21:45
  • contirec7nchr45rx6ympez5rjldibnqzh7lsa56lvjvaeywhvoj3wad.onion snapshot · 2024-12-06 21:46
  • contirecj4hbzmyzuydyzrvm2c65blmvhoj2cvf25zqj2dwrrqcq5oad.onion snapshot · 2024-12-06 21:46
  • contirecj4hbzmyzuydyzrvm2c65blmvhoj2cvf25zqj2dwrrqcq5oad.onion snapshot · 2024-12-12 16:26
  • contirecovery.best snapshot · 2024-12-12 16:27
  • contirecovery.top snapshot · 2024-12-12 16:30
  • htcltkjqoitnez5slo7fvhiou5lbno5bwczu7il2hmfpkowwdpj3q2yd.onion snapshot · 2025-07-08 17:46

Recent victims

The 50 most recent victims claimed by CONTI. Total in the index: 293.

Date listed Victim Description
2022-06-07 Alliance Steel
2022-06-02 Elevate Services
2022-05-26 Azimut Benetti Group
2022-05-25 LCRD
2022-05-25 MJH Life Sciences
2022-05-25 PFC USA
2022-05-25 The Contact Company
2022-05-24 Central Restaurant Products
2022-05-24 Schaumburg Park District
2022-05-24 RateGain
2022-05-23 Pianca
2022-05-23 Midea Carrier
2022-05-23 Imenco AS
2022-05-23 Royal Brunei Airlines Sdn Bhd
2022-05-23 Critical Content
2022-05-23 Automobil Holding AS
2022-05-23 Concepts in Millwork
2022-05-23 Eurofred
2022-05-23 Agile Sourcing Partners
2022-05-23 Alimentos y Frutos S.A.
2022-05-23 Worksoft
2022-05-23 Allcat Claims Service
2022-05-23 Omicron Consulting S.r.L
2022-05-17 FOR BlackCat and LockBit advert
2022-05-14 For Costa Rica and US terrorists (Biden and his administration)
2022-05-12 Cjk Group, Inc.
2022-05-04 EYP
2022-04-28 LARON an otp industrial solutions company
2022-04-27 Attica Holdings S.A.
2022-04-27 For Peru
2022-04-25 Elgin_Ca
2022-04-23 Jasec
2022-04-21 Managed Business Solutions
2022-04-20 Attica Group
2022-04-20 Instituto Meteorológico Nacional and racsa.go.cr
2022-04-19 GIBSON HomeWares
2022-04-19 Del Sol
2022-04-19 panasonic
2022-04-19 Milan Institute
2022-04-19 For Costa Rica
2022-04-18 Centris
2022-04-18 Barwick Bathroom Distribution LLP
2022-04-18 Nordex SE
2022-04-17 Lowell
2022-04-16 Tucker Door & Trim
2022-04-16 Ministerio de Hacienda - República de Costa Rica
2022-04-16 Parker Appliance Company
2022-04-15 Wocklum Group
2022-04-15 [IMPORTANT ANNOUNCEMENT!]
2022-04-15 Eminox

CONFIRMED ATTACKS

Conti confirmed attacks: 269 verified incidents

Ransomnews has verified 269 Conti incidents against named organisations, each corroborated by a public source such as a breach notification, regulatory filing or press report. The confirmed record runs from December 2019 to January 2023. United States accounts for 136 of them (51%), with victims recorded in 23 countries in total. The most affected sector is manufacturing, at 45 confirmed victims. A ransom payment was publicly confirmed in 7 cases and publicly refused in 40; the outcome is unrecorded in the remaining 222. Where a figure was disclosed (62 cases), these incidents account for 4,763,449 exposed records.

269Verified incidents
23Countries
2019–2023Active range
15%Paid, where outcome known

Confirmed victims by year

  • 20191
  • 202096
  • 2021126
  • 202245
  • 20231

Most affected sectors

  • Manufacturing45
  • Retail29
  • Government29
  • Healthcare27
  • Service25
  • Technology19
  • Finance17
  • Food and Beverage15

Most affected countries

  • United States136
  • France31
  • Canada20
  • United Kingdom15
  • Germany11
  • Costa Rica11
  • Spain7
  • Italy6

Verified Conti incidents (100 most recent of 269)

DateOrganisationSector LocationRecordsRansom paidSource
January 2023 Ministerio de Obras Publicas y Transportes (MOPT) Government San José, Costa Rica — Unknown Source
April 2022 Dirección General de Inteligencia (DIGMIN) Government Lima, Peru — Unknown Source
April 2022 Sede Interuniversitaria de Alajuela (SIUA) Education San José, Costa Rica — Unknown Source
April 2022 Instituto de Desarrollo Rural (INDER) Government San José, Costa Rica — No Source
April 2022 Radiográfica Costarricense (RACSA) Government San José, Costa Rica — No Source
April 2022 Caja Costarricense de Seguro Social (CCSS) Government San José, Costa Rica — No Source
April 2022 Instituto Meteorológico Nacional (IMN) Government San José, Costa Rica — No Source
April 2022 Panasonic Canada Manufacturing Mississauga, Canada — Unknown Source
April 2022 TrustFord Retail Colchester, United Kingdom — Unknown Source
April 2022 Ministerio de Ciencia, Tecnología y Telecomunicaciones (MICITT) Government San José, Costa Rica — No Source
April 2022 Fondo de Desarrollo Social y Asignaciones Familiares (FODESAF) Government San José, Costa Rica — No Source
April 2022 Ministerio de Trabajo y Seguridad Social (MTSS) Government San José, Costa Rica — No Source
April 2022 Junta Administrativa del Servicio Eléctrico de Cartago (JASEC) Government Cartago, Costa Rica — No Source
April 2022 Ministerio de Hacienda de Costa Rica Government San José, Costa Rica — No Source
April 2022 Elgin County Government Elgin County, Canada 330 No Source
April 2022 Central Products, LLC dba Central Restaurant Products Retail Indiana, United States — Unknown Source
March 2022 Prima Power Manufacturing Turin, Italy — Unknown Source
March 2022 Elevate, Inc. Service Arizona, United States 425 Unknown Source
March 2022 TIC International Finance Indiana, United States 187,341 Unknown Source
March 2022 BAUKING Manufacturing Dortmund, Germany — Unknown Source
March 2022 The Sourcing Company Technology Woerden, Netherlands — Unknown Source
March 2022 Nordex Manufacturing Rostock, Germany — Unknown Source
March 2022 Snap-On Manufacturing Wisconsin, United States 41,052 Unknown Source
March 2022 Toei Animation Other Tokyo, Japan — Unknown Source
March 2022 Parker Hannifin Manufacturing Ohio, United States 119,513 Unknown Source
March 2022 Gibson Overseas, Inc. Manufacturing California, United States — Unknown Source
March 2022 Elevate Services, Inc. Legal California, United States 3,950 Unknown Source
February 2022 Aluminerie Alouette, Inc. Manufacturing Quebec, Canada — Unknown Source
February 2022 United McGill Corporation Manufacturing Ohio, United States 525 Unknown Source
February 2022 Aareon Technology Emmen, Netherlands — Unknown Source
February 2022 Support-IT Network Technology Ballerup, Denmark — No Source
February 2022 Lifa Construction Odense, Denmark — No Source
February 2022 Spine Diagnostic & Pain Treatment Healthcare Louisiana, United States — Unknown Source
February 2022 Shapiro & Duncan Service Maryland, United States — Unknown Source
February 2022 Rawle & Henderson, LLP Legal Pennsylvania, United States 794 Unknown Source
February 2022 University of Neuchâtel Education Neuchâtel, Switzerland — Unknown Source
February 2022 HelmsBriscoe Service Arizona, United States 710 Unknown Source
February 2022 GEE Group, Inc. Service Florida, United States 1,398 Unknown Source
February 2022 Friedrich Air Conditioning, LLC Manufacturing Texas, United States 6,048 Unknown Source
February 2022 Cytometry Specialists, Inc. d/b/a CSI Laboratories Healthcare Georgia, United States 312,000 Unknown Source
February 2022 BMS CAT, Inc. Construction Texas, United States 2,271 Yes Source
January 2022 NZ Uniforms Retail Wellington, New Zealand — No Source
January 2022 Linn County Government Oregon, United States — No Source
January 2022 New Zealand Uniforms Retail Wellington, New Zealand — Unknown Source
January 2022 KP Snacks Food and Beverage Hayes, United Kingdom — Unknown Source
January 2022 Delta Electronics Manufacturing Taipei, Taiwan — Unknown Source
December 2021 Mount Franklin Foods, LLC Food and Beverage Texas, United States 956 Unknown Source
December 2021 The Briad Group Other New Jersey, United States 10,072 Unknown Source
December 2021 Shutterfly Technology California, United States 52,777 Unknown Source
December 2021 Robbins, Kelly, Patterson & Tucker Legal Ohio, United States 3,274 Unknown Source
December 2021 SVP Groupe Service Saint-Ouen, France — Unknown Source
December 2021 McMenamins Food and Beverage Oregon, United States 20,504 No Source
December 2021 Nordic Choice Hotels Other Oslo, Norway — Unknown Source
December 2021 DBS Group Service Lausanne, Switzerland — No Source
December 2021 Clementoni Manufacturing Fontenoce, Italy — Unknown Source
December 2021 Chantelle Retail Cachan, France — Unknown Source
December 2021 Bank Indonesia Finance Central Jakarta, Indonesia — Unknown Source
December 2021 Acuity Brands, Inc. Manufacturing Georgia, United States 37,137 Unknown Source
November 2021 Gloucester City Council Government Gloucester, United Kingdom — Unknown Source
November 2021 RR Donnelly (RRD) Service Illinois, United States 81,642 Unknown Source
November 2021 Origin Design Service Iowa, United States 285 No Source
November 2021 Kisters AG Technology Aachen, Germany — Unknown Source
November 2021 Jean Floc'h Food and Beverage Moréac, France — Unknown Source
November 2021 Graff Diamonds Retail London, United Kingdom — Yes Source
November 2021 Dalloyau Food and Beverage Paris, France — Unknown Source
November 2021 CS Energy Government Brisbane, Australia — Unknown Source
November 2021 Bay & Bay Transportation Transportation Minnesota, United States 6,740 No Source
October 2021 Illum Retail Copenhagen, Denmark — Unknown Source
October 2021 Registro Nacional de las Personas (RENAPER) Government Buenos Aires, Argentina — Unknown Source
October 2021 Sandhills Global Service Nebraska, United States — Unknown Source
October 2021 Meyer Corporation Manufacturing California, United States 2,747 Unknown Source
October 2021 San Carlo Gruppo Alimentare Food and Beverage Milan, Italy — Unknown Source
October 2021 Medical Healthcare Solutions Healthcare Massachusetts, United States 133,997 Unknown Source
October 2021 Portalp Manufacturing Domont, France — Unknown Source
October 2021 Finite Recruitment Service Sydney, Australia — Unknown Source
October 2021 Della Toffola Manufacturing Signoressa, Italy — Unknown Source
October 2021 Communauté de Communes Pays d'Apt Luberon Government Apt, France — Unknown Source
October 2021 Align Technology, Inc. Healthcare Arizona, United States — Unknown Source
October 2021 Acorn Stairlifts Retail Florida, United States — Unknown Source
September 2021 Stride Credit Union Limited Finance Portage la Prairie, Canada 19,000 Unknown Source
September 2021 Gershman Investment Corporation Finance Missouri, United States 52,737 Unknown Source
September 2021 Bochane Autogroep Retail Utrecht, Netherlands — Unknown Source
September 2021 IJmond Werkt! Government Beverwijk, Netherlands 9,000 No Source
September 2021 Vivea Service Paris, France — Unknown Source
September 2021 Marquez Brothers International, Inc. Food and Beverage California, United States 2,191 Unknown Source
September 2021 Law Enforcement Health Benefits (LEHB) Healthcare Pennsylvania, United States 85,282 Unknown Source
September 2021 JVCKenwood Technology Kanagawa, Japan — Unknown Source
September 2021 GSS Service Madrid, Spain — Unknown Source
August 2021 Marshall & Melhorn, LLC Legal Ohio, United States 27,271 Unknown Source
August 2021 Solware Group Technology Dardilly, France — Unknown Source
August 2021 Morley Companies Inc. Service Michigan, United States 694,679 Unknown Source
August 2021 Duke Manufacturing Co. Manufacturing Missouri, United States 1,348 Unknown Source
July 2021 Cabico & Co Manufacturing Quebec, Canada 89 Unknown Source
July 2021 Vera Wang Group, LLC Retail New York, United States — Unknown Source
July 2021 Three Rivers Regional Commission Government Georgia, United States 17,560 Unknown Source
July 2021 supplyForce Service Pennsylvania, United States — Unknown Source
July 2021 ITxx Technology Antwerp, Belgium — Yes Source
July 2021 Habasit Manufacturing Reinach, Switzerland — Unknown Source
July 2021 Aris-Services Construction Epouville, France — Unknown Source
July 2021 Haftpflichtkasse Darmstadt Finance Darmstadt, Germany — Unknown Source

Ransomnews coverage of Conti

  • Conti was hiring: the ransomware crew's entrance exam
  • Black Basta: Conti's most successful successor and its healthcare specialism
  • Conti: anatomy of a ransomware corporation, and how it imploded

Claimed vs confirmed. The figures above the fold on this page come from Conti's own leak-site postings and reflect what the operation claims. The table here is a separate evidence class: incidents Ransomnews verified against a public source. Confirmed counts are lower than claimed counts by design: most victims never disclose, and some leak-site listings are recycled, exaggerated or fabricated. Records and ransom figures are shown only where a named source disclosed them. See the full ransomware statistics or the Ransomtracker dataset.

← Back to Ransomtracker

Statistics on this page are computed by Ransomnews from a live leak-site monitoring feed. Numbers update every ten minutes. Operator-written victim descriptions are truncated and shown in snippet form only. Source data: RansomLook (CC BY 4.0), aggregated and adapted by Ransomnews.

The Ransomnews Monthly

What leaked, what held up

One email a month: the datasets we verified, and the ones that fell apart under scrutiny.

Double opt-in. We store your email, signup time, and IP for consent records (GDPR Art. 7). See our privacy policy.

Free tool

How does your own site score?

Forty passive checks on TLS, security headers, email spoofing and privacy. A grade out of 100 in about fifteen seconds.

No signup. Nothing installed. We only request what your site already serves publicly.

Free tool

Were you in a leak?

Check whether an email address has surfaced in infostealer logs. No signup, no data stored.

Run StealerCheck

Live data

Ransomtracker

Victims as they are posted to ransomware leak sites, tracked continuously and checked against the claims.

Open the tracker

9,613 confirmed attacks tracked

Facebook X (Twitter) LinkedIn
© 2026 Ransomnews.com

Type above and press Enter to search. Press Esc to cancel.

Cookies on Ransomnews

We use strictly-necessary cookies to run the site and may use first-party analytics to understand which articles are read. Some pages contain affiliate links; when you click one, the affiliate network sets cookies on the merchant's domain to attribute the referral. See the Cookie Policy and Affiliate Disclosure for detail.

RANSOMNEWS.COM

Tracking the criminal infrastructure of the internet.

Independent coverage of ransomware, breach economics, threat actors, privacy, AI security, and the open-source investigation toolkit.

Topics

  • News
  • Security
  • Privacy
  • Cybercrime
  • AI
  • OSINT
  • Threat Groups
  • Stealer Logs
  • Ransomtracker
  • Stealercheck
  • FortiBleed Checker
  • Site Check

Site

  • About Us
  • Editorial Team
  • Contact
  • Tip Line
  • Editorial

Legal

  • Privacy Policy
  • Terms of Service
  • Cookie Policy
  • Funding & Independence
  • RSS Feed
© 2026 Ransomnews.com · Tracking the criminal infrastructure of the internet.