THREAT ACTOR
CRPX0_
ActiveCRPX0 is a ransomware operator tracked through its public data-leak infrastructure. The group operates under the double-extortion model that defines the modern ransomware ecosystem: file encryption combined with the threat of stolen-data publication on a public leak site. It continues to post fresh victim claims as part of an ongoing extortion campaign.
For Ransomnews editorial coverage of CRPX0, including incident write-ups, attribution notes and additional context, see the Threat Groups archive or run a site search.
Victims by year
- 2026 47
Leak site mirrors
2 mirrors tracked, 1 currently reachable. These are criminal-infrastructure URLs; links are deliberately not provided.
-
tlxoddx4odmc2qvsmtsbgwwsv5j45osb5sox7mz6izxliuju5mkulzad.onionCRPxO – Data Leak Blog - We publish what they hide snapshot · 2026-08-26 09:14 -
crpx0.susnapshot · 2026-09-23 05:22
Recent victims
The 50 most recent victims claimed by CRPX0. Total in the index: 47.
| Date listed | Victim | Description |
|---|---|---|
| 2026-08-12 | DOĞAN HOLDİNG | Status: Leaked Location: Istanbul, Turkey Sector: Media / Energy Congl… |
| 2026-08-12 | ANADOLU SİGORTA | Status: Leaked Location: Istanbul, Turkey Sector: Insurance Volume: 1.… |
| 2026-08-12 | HYUNDAI | Status: Leaked Location: Istanbul, Turkey Sector: Automotive Volume: 1… |
| 2026-08-12 | ASELSAN | Status: Leaked Location: Ankara, Turkey Sector: Defense / Electronics … |
| 2026-08-12 | A101 | Status: Leaked Location: Istanbul, Turkey Sector: Grocery / Retail Vol… |
| 2026-08-12 | ShadeTechExpo | Status: Leaked Location: , USA Sector: Tech Expo / Events Volume: 217.… |
| 2026-08-12 | Boelte LLC | Status: Leaked Location: Missouri, USA Sector: Professional Services /… |
| 2026-08-12 | Gold Peak Wealth Management | Status: Leaked Location: , USA Sector: Wealth Management Volume: 0.2 G… |
| 2026-08-12 | Global Capital Consultants | Status: Leaked Location: , USA Sector: Financial Advisory Volume: 2.0 … |
| 2026-08-12 | Oklahoma Nursing Times | Status: Leaked Location: Oklahoma, USA Sector: Media / Healthcare Publ… |
| 2026-08-12 | Towne Machine Tool | Status: Leaked Location: New Hampshire, USA Sector: Manufacturing / Ma… |
| 2026-08-12 | Leer Corp | Status: Leaked Location: California, USA Sector: Real Estate / Develop… |
| 2026-08-12 | SF Bay Data Entry | Status: Leaked Location: California, USA Sector: Business Process Outs… |
| 2026-08-12 | DinaTec | Status: Leaked Location: California, USA Sector: Agriculture / Technol… |
| 2026-08-12 | IPTV Platform | Status: Leaked Location: , USA Sector: Technology / Video Streaming Vo… |
| 2026-08-12 | Marketech | Status: Leaked Location: , USA Sector: Marketing / SEO Volume: 6.7 GB … |
| 2026-08-12 | American Hospice & Home Health Services (Ahhh Care) | Status: Leaked Location: Pleasanton, California, USA Sector: Healthcar… |
| 2026-08-12 | Bright Star Partners Insurance | Status: Leaked Location: , USA Sector: Insurance / Financial Services … |
| 2026-08-12 | eCare Platform | Status: Leaked Location: , USA Sector: Healthcare / Technology Volume:… |
| 2026-08-12 | Dignity Phoenix | Status: Leaked Location: , USA Sector: Non-Profit / Social Services Vo… |
| 2026-08-12 | Prei Capital | Status: Leaked Location: , USA Sector: Financial / Capital Volume: 18.… |
| 2026-08-12 | FLP Law Group LLP | Status: Leaked Location: Los Angeles, California, USA Sector: Legal / … |
| 2026-08-12 | Summit Hill Insurance | Status: Leaked Location: , USA Sector: Insurance Volume: 34.5 GB Deadl… |
| 2026-08-12 | MRO Aerospace | Status: Leaked Location: Largo, Florida, USA Sector: Aerospace / Defen… |
| 2026-08-12 | Schorr Law | Status: Leaked Location: Los Angeles, California, USA Sector: Legal / … |
| 2026-08-12 | Simpkins Law Firm | Status: Leaked Location: Missouri / Kansas, USA Sector: Legal / Family… |
| 2026-08-12 | Leah Walker Orthodontics | Status: Leaked Location: Carlsbad, California, USA Sector: Healthcare … |
| 2026-08-12 | Elko Dental Specialists | Status: Leaked Location: Elko, Nevada, USA Sector: Healthcare / Dental… |
| 2026-08-12 | ProSmile Family Dental Care | Status: Leaked Location: Modesto, California, USA Sector: Healthcare /… |
| 2026-08-12 | Qube Aviation Catering | Status: Leaked Location: , USA Sector: Aviation / Catering Volume: 22.… |
| 2026-08-12 | Performance Data Solutions | Status: Leaked Location: , USA Sector: Motorsport / Data Acquisition V… |
| 2026-08-12 | Host & Protect (RedBlink) | Status: Leaked Location: , USA Sector: Web Hosting / Security Volume: … |
| 2026-08-12 | RnnR Cloud | Status: Leaked Location: , USA Sector: Technology / Cloud Services Vol… |
| 2026-08-12 | CodeConductor.ai | Status: Leaked Location: , USA Sector: Technology / AI / SaaS Volume: … |
| 2026-08-12 | Encore Enterprises, Inc. | Status: Leaked Location: Dallas, Texas, USA Sector: Commercial Real Es… |
| 2026-08-12 | TOGG | Status: Leaked Location: Gebze, Turkey Sector: Automotive Volume: 1.1 … |
| 2026-08-12 | KUVEYT TURK | Status: Leaked Location: Istanbul, Turkey Sector: Banking Volume: 0.8 … |
| 2026-08-12 | FINANSBANK | Status: Leaked Location: Istanbul, Turkey Sector: Banking Volume: 2.3 … |
| 2026-08-12 | ANADOLUBANK | Status: Leaked Location: Istanbul, Turkey Sector: Banking Volume: 0.4 … |
| 2026-08-12 | THY | Status: Leaked Location: Istanbul, Turkey Sector: Aviation Volume: 4.2… |
| 2026-08-12 | JOHNSON & JOHNSON | Status: Leaked Location: Istanbul, Turkey Sector: Healthcare / Pharmac… |
| 2026-07-08 | Creative Smiles Pediatric Dentistry | |
| 2026-07-08 | AMHWA Biopharm Co., Ltd. | |
| 2026-07-08 | SF Smile Doctor | SF Smile Doctor |
| 2026-07-08 | Bishop Arts Dental PLLC | |
| 2026-07-08 | Top Notch Dentistry of Dallas | |
| 2026-07-08 | Benjamin H. Wang DDS Inc. |
CONFIRMED ATTACKS
Crpx0 confirmed attacks: 1 verified incident
Ransomnews has verified 1 Crpx0 incident against named organisations, each corroborated by a public source such as a breach notification, regulatory filing or press report. All of them fall in August 2026. Turkey accounts for 1 of them (100%). The most affected sector is manufacturing, at 1 confirmed victim. Where a figure was disclosed (1 case), these incidents account for 422 exposed records.
Confirmed victims by year
Most affected sectors
Most affected countries
Verified Crpx0 incidents
| Date | Organisation | Sector | Location | Records | Ransom paid | Source |
|---|---|---|---|---|---|---|
| August 2026 | Hyundai Motor Türkiye Otomotiv AŞ | Manufacturing | Istanbul, Turkey | 422 | Unknown | Source |
Claimed vs confirmed. The figures above the fold on this page come from Crpx0's own leak-site postings and reflect what the operation claims. The table here is a separate evidence class: incidents Ransomnews verified against a public source. Confirmed counts are lower than claimed counts by design: most victims never disclose, and some leak-site listings are recycled, exaggerated or fabricated. Records and ransom figures are shown only where a named source disclosed them. See the full ransomware statistics or the Ransomtracker dataset.