Close Menu
  • Home
  • News
  • Security
  • Privacy
  • Cybercrime
    • Threat Groups
    • Ransomware
    • Explainers
    • Stealer Logs
  • AI
  • OSINT
  • Tools
    • Ransomtracker
    • Stealercheck
    • FortiBleed Checker
  • About Us
Facebook X (Twitter) Instagram Threads
Ransomnews
  • Home
  • News
  • Security
  • Privacy
  • Cybercrime
    • Threat Groups
    • Ransomware
    • Explainers
    • Stealer Logs
  • AI
  • OSINT
  • Tools
    • Ransomtracker
    • Stealercheck
    • FortiBleed Checker
  • About Us
Facebook X (Twitter) LinkedIn
Ransomnews

DAIXIN · Threat actor profile

// THREAT ACTOR

DAIXIN_

Active

DAIXIN is a ransomware operator tracked through its public data-leak infrastructure. The group operates under the double-extortion model that defines the modern ransomware ecosystem — file encryption combined with the threat of stolen-data publication on a public leak site — and continues to post fresh victim claims as part of an ongoing extortion campaign.

For Ransomnews editorial coverage of DAIXIN — incident write-ups, attribution notes, and additional context — see the Threat Groups archive or run a site search.

22 Victims tracked
2 / 11 Active mirrors
2022-08-18 First listing
2025-09-10 Most recent

Victims by year

  • 2025 3
  • 2024 6
  • 2023 7
  • 2022 6

Leak site mirrors

11 mirrors tracked, 2 currently reachable. These are criminal-infrastructure URLs — links are deliberately not provided.

  • 7ukmkdtyxdkdivtjad57klqnd3kdsmq6tp45rrsxqnu76zzv3jvitlqd.onion Data Leak snapshot · 2026-08-06 21:10
  • 232fwh5cea3ub6qguz3pynijxfzl2uj3c73nbrayipf3gq25vtq2r4qd.onion snapshot · 2024-12-11 12:03
  • 7ukmkdtyxdkdivtjad57klqnd3kdsmq6tp45rrsxqnu76zzv3jvitlqd.onion Data Leak snapshot · 2026-08-06 21:32
  • htz6biyazjyzzxllx4knuvux26xa2ixyjshjtwtgq4cm3vczylikm3id.onion snapshot · 2025-05-23 07:20
  • kolbh6putvp6aw3vpmsppor4kyzs7ctxfbp2donetycftz5jru73ytid.onion snapshot · 2024-12-11 12:04
  • kyk6lixosktvbtf3g6zte7kdzid2lwrprfod55mhwunafx6jzeoui7yd.onion snapshot · 2024-12-11 12:04
  • pkx3r7xe42z7fgkjjbocf7okdh77bsvngwvp6arykksob7gleyswicyd.onion snapshot · 2024-12-11 12:04
  • qlfnwdg2fyvmzmqkk33iwku32ynsbbk6hysorsvvadr4o7gfzs4t46yd.onion snapshot · 2024-12-11 12:04
  • r3h2balq6aa7plwe5p5bhxzwzxusrtldbfaamfseg33a5hk77bohzxyd.onion snapshot · 2024-12-11 12:04
  • v66nzl27xxmrulq6c2plrzr7tryv2idflhclpoyxrrn3kfw5gkkpveid.onion snapshot · 2024-12-11 12:05
  • htz6biyazjyzzxllx4knuvux26xa2ixyjshjtwtgq4cm3vczylikm3id.onion Index of /data/gift1/ snapshot · 2025-05-23 07:05

Recent victims

The 50 most recent victims claimed by DAIXIN. Total in the index: 22.

Date listed Victim Description
2025-09-10 Gagosian(US, UK) Established by Larry Gagosian in Los Angeles in 1980, Gagosian is a gl…
2025-07-02 Insurance Office of America (US) Insurance Office of America (IOA) is a premier, full-service insurance…
2025-04-02 A little gift of exclusive data for everyone
2024-12-03 SGS Co (US) Brand design and packaging solutions agency.
2024-12-03 Communicare Inc.(US) Communicare, Inc. has been a premier provider of behavioral health ser…
2024-07-22 Acadian Ambulance (US) Acadian Ambulance is an employee-owner private ambulance service that …
2024-06-05 Dubai Municipality (UAE) Dubai Municipality is the Government of Dubai municipal body with juri…
2024-05-21 Regional Cancer Center (RCC) in Thiruvananthapuram ( fabrication !!)
2024-04-14 Omni Hotels & Resorts (US) Omni Hotels & Resorts is an American privately held, international lux…
2023-12-09 Graphic Solutions Group Inc (US) GSG digital printing technologies with a half a century of knowledge a…
2023-11-28 North Texas Municipal Water District (US) The North Texas Municipal Water District (NTMWD) provides vital wholes…
2023-11-02 Bluewater Health (CA) and others Bluewater Health is a hospital in Sarnia, Ontario. The hospita…
2023-06-09 Columbus Regional Healthcare System (US) Columbus Regional Healthcare System has one of the highest volume …
2023-03-29 Hit Promotional Products (US) Hit Promotional Products has been a leader in the promotional product …
2023-02-11 B&G Foods (CA, US) B&G Foods, Inc. manufactures, sells, and distributes a portfolio of sh…
2023-01-20 Guardian Analytics (US) Guardian Analytics is now a part of NICE Actimize, a business of NICE …
2022-11-24 Astra Daihatsu Motor (ID) PT Astra Daihatsu Motor is an automobile manufacturing company based i…
2022-11-20 AirAsia Group (MY, ID, TH) AirAsia is a Malaysian multinational low-cost airline headquartered ne…
2022-09-13 OakBend Medical (USA) OakBend Medical is passionately focused on patient-centered medicine. …
2022-08-18 Fitzgibbon Hospital (USA) Fitzgibbon Hospital is a leader in central Missouri in providing quali…
2022-08-18 Trib Total Media (USA) Trib Total Media delivers news, information and advertising to portion…
2022-08-18 ISTA International GmbH ista International GmbH provides submetering and billing of water and …

← Back to Ransomtracker

Statistics on this page are computed by Ransomnews from a live leak-site monitoring feed. Numbers update every ten minutes. Operator-written victim descriptions are truncated and shown in snippet form only. Source data: RansomLook (CC BY 4.0), aggregated and adapted by Ransomnews.

Facebook X (Twitter) LinkedIn
© 2026 Ransomnews.com

Type above and press Enter to search. Press Esc to cancel.

Cookies on Ransomnews

We use strictly-necessary cookies to run the site and may use first-party analytics to understand which articles are read. Some pages contain affiliate links — when you click one, the affiliate network sets cookies on the merchant's domain to attribute the referral. See the Cookie Policy and Affiliate Disclosure for detail.

RANSOMNEWS.COM

Tracking the criminal infrastructure of the internet.

Independent coverage of ransomware, breach economics, threat actors, privacy, AI security, and the open-source investigation toolkit.

// Topics

  • News
  • Security
  • Privacy
  • Cybercrime
  • AI
  • OSINT
  • Threat Groups
  • Stealer Logs
  • Ransomtracker
  • Stealercheck
  • FortiBleed Checker

// Site

  • About Us
  • Editorial Team
  • Contact
  • Tip Line
  • Editorial

// Legal

  • Privacy Policy
  • Terms of Service
  • Cookie Policy
  • Funding & Independence
  • RSS Feed
© 2026 Ransomnews.com · Tracking the criminal infrastructure of the internet.