Close Menu
  • Home
  • News
  • Security
  • Privacy
  • Cybercrime
    • Threat Groups
    • Ransomware
    • Explainers
    • Stealer Logs
  • AI
  • OSINT
  • Tools
    • Ransomtracker
    • Stealercheck
    • FortiBleed Checker
  • Newsletter
  • About Us
Facebook X (Twitter) Instagram Threads
Ransomnews
  • Home
  • News
  • Security
  • Privacy
  • Cybercrime
    • Threat Groups
    • Ransomware
    • Explainers
    • Stealer Logs
  • AI
  • OSINT
  • Tools
    • Ransomtracker
    • Stealercheck
    • FortiBleed Checker
  • Newsletter
  • About Us
Facebook X (Twitter) LinkedIn
Ransomnews

DARKSIDE · Threat actor profile

// THREAT ACTOR

DARKSIDE_

Dormant

DarkSide was a ransomware-as-a-service operation that briefly dominated headlines in 2021 after one of its affiliates carried out the Colonial Pipeline attack. Faced with US government attention, the operators announced a shutdown and rebranded — successor activity attributed to BlackMatter and ALPHV/BlackCat is widely traced back to the same operators.

For Ransomnews editorial coverage of DARKSIDE — incident write-ups, attribution notes, and additional context — see the Threat Groups archive or run a site search.

0 Victims tracked
0 / 3 Active mirrors
— First listing
— Most recent

Leak site mirrors

3 mirrors tracked, 0 currently reachable. These are criminal-infrastructure URLs — links are deliberately not provided.

  • darksidc3iux462n6yunevoag52ntvwp6wulaz3zirkmh4cnz6hhj7id.onion snapshot · 2021-09-08 00:04
  • dark24zz36xm4y2phwe7yvnkkkkhxionhfrwp67awpb3r3bdcneivoqd.onion snapshot · 2024-12-09 20:35
  • darksidedxcftmqa.onion snapshot · 2025-07-08 17:44

// CONFIRMED ATTACKS

DarkSide confirmed attacks: 96 verified incidents

Ransomnews has verified 96 DarkSide incidents against named organisations, each corroborated by a public source such as a breach notification, regulatory filing or press report. The confirmed record runs from August 2020 to May 2021. United States accounts for 59 of them (61%), with victims recorded in 15 countries in total. The most affected sector is manufacturing, at 18 confirmed victims. A ransom payment was publicly confirmed in 3 cases and publicly refused in 5; the outcome is unrecorded in the remaining 88. Where a figure was disclosed (22 cases), these incidents account for 3,334,138 exposed records.

96Verified incidents
15Countries
2020–2021Active range
38%Paid, where outcome known

Confirmed victims by year

  • 202022
  • 202174

Most affected sectors

  • Manufacturing18
  • Retail14
  • Legal13
  • Finance8
  • Construction8
  • Utilities7
  • Transportation7
  • Technology7

Most affected countries

  • United States59
  • Germany9
  • France5
  • United Kingdom4
  • Canada4
  • Italy3
  • Netherlands2
  • Brazil2

Verified DarkSide incidents

DateOrganisationSector LocationRecordsRansom paidSource
May 2021 Valvitalia Utilities Rivanazzano Terme, Italy — Unknown Source
May 2021 Paslin Co. Manufacturing Michigan, United States — Unknown Source
May 2021 Toshiba Tec Corp Manufacturing Shinagawa City, Japan — No Source
May 2021 Irving Materials, Inc. Construction Indiana, United States — Unknown Source
May 2021 ImageTec Technology Illinois, United States — Unknown Source
May 2021 I & H Brown Construction Perth, United Kingdom — Unknown Source
May 2021 Heli-Union Transportation Toussus Le Noble, France — Unknown Source
May 2021 Brenntag Transportation Essen, Germany — Yes Source
May 2021 One Call Finance Doncaster, United Kingdom — Unknown Source
May 2021 Colonial Pipeline Company Utilities Georgia, United States 5,810 Yes Source
May 2021 Carolina Eastern, Inc. Food and Beverage South Carolina, United States 2,187 Unknown Source
May 2021 All American Asphalt Construction California, United States — Unknown Source
April 2021 TSF Sportswear Retail Florida, United States — Unknown Source
April 2021 The Dixie Group, Inc. Manufacturing Georgia, United States 9,293 Unknown Source
April 2021 Southern Industries Home Improvements Construction Georgia, United States — Unknown Source
April 2021 Smile Brands, Inc. Healthcare California, United States 2,592,494 Unknown Source
April 2021 Supabets Technology Johannesburg, South Africa — Unknown Source
April 2021 HITEC Manufacturing Almelo, Netherlands — Unknown Source
April 2021 Grupo Moura Manufacturing Belo Jardim, Brazil — Unknown Source
April 2021 Möbelstadt Sommerlad Retail Giessen, Germany — Unknown Source
April 2021 Hunt and Walsh Construction Virginia, United States — Unknown Source
April 2021 LondonMetric Property Plc Construction London, United Kingdom — Unknown Source
April 2021 Condor Ferries Transportation Guernsey, United Kingdom — Unknown Source
April 2021 BLK Sport Manufacturing Helensvale, Australia — Unknown Source
April 2021 BTU International, Inc. Manufacturing Massachusetts, United States 1,291 Unknown Source
April 2021 Brenntag North America, Inc. Transportation Pennsylvania, United States 6,701 Yes Source
April 2021 Banca di Credito Cooperativo Finance Rome, Italy — Unknown Source
April 2021 Baker & Taylor, Inc. Retail North Carolina, United States — Unknown Source
March 2021 Swift Real Estate Partners LLC Service California, United States — Unknown Source
March 2021 Surge Components Retail New York, United States — Unknown Source
March 2021 Spirit Lake Casino & Resort Other North Dakota, United States — Unknown Source
March 2021 Prime Health Services Finance Tennessee, United States — Unknown Source
March 2021 VG Cargo GmbH Transportation Lautzenhausen, Germany — Unknown Source
March 2021 DeCaro, Doran, Siciliano, Gallagher & DeBlasis, LLP Legal Virginia, United States — Unknown Source
March 2021 Leavitt Group (LGAA, LLC) Finance Utah, United States — Unknown Source
March 2021 Abu Issa Holding LLC Service Doha, Qatar — Unknown Source
March 2021 Cuddy & Feder LLP Legal New York, United States — Unknown Source
March 2021 CompuCom Technology South Carolina, United States — Unknown Source
March 2021 EximBank Finance South Jakarta, Indonesia — Unknown Source
March 2021 Certilman Balin Adler & Hyman Legal New York, United States — Unknown Source
February 2021 Oak Valley Community Bank Finance California, United States 12,057 Unknown Source
February 2021 XCoal Utilities Pennsylvania, United States — Unknown Source
February 2021 TPI CORP Manufacturing Tennessee, United States — Unknown Source
February 2021 Stone Pigman Walther Wittmann, LLC Legal Louisiana, United States 159,387 No Source
February 2021 Sierra Meat & Seafood Food and Beverage Nevada, United States — Unknown Source
February 2021 Schiller DuCanto and Fleck Legal Illinois, United States — Unknown Source
February 2021 Mirion Technologies Inc. Technology Georgia, United States — Unknown Source
February 2021 Segafredo Zanetti Retail Alexandria, Australia — Unknown Source
February 2021 ProSolarTec GmbH Utilities Mechernich, Germany — Unknown Source
February 2021 Pekaes Transportation Błonie, Poland — Unknown Source
February 2021 Komori America Corporation Manufacturing Illinois, United States — Unknown Source
February 2021 Kirwan Spellacy Danner Watkins & Brownstein, P.A. Legal Florida, United States — Unknown Source
February 2021 Jacoby and Jacoby Legal New York, United States — Unknown Source
February 2021 Guess, Inc. Retail California, United States 1,304 Unknown Source
February 2021 Fownes Brothers and Co., Inc Manufacturing New York, United States — Unknown Source
February 2021 Groupe Pénélope Service Paris, France — Unknown Source
February 2021 DWMR Law Legal Texas, United States — Unknown Source
February 2021 Companhia Paranaense de Energia (Copel) Government Curitiba, Brazil — Unknown Source
February 2021 AMICO Group Healthcare Dubai, United Arab Emirates — Unknown Source
February 2021 ALA Corporation Transportation Napoli, Italy — Unknown Source
February 2021 CovalentWorks Technology Texas, United States — Unknown Source
February 2021 Discount Car and Truck Rentals Service Toronto, Canada 18,485 Unknown Source
February 2021 Home Hardware Stores Ltd Retail St Jacobs, Canada 5,242 Unknown Source
February 2021 Bock & Hatch LLC Legal Illinois, United States — Unknown Source
February 2021 AIDA Global Manufacturing Ohio, United States — Unknown Source
January 2021 American Armed Forces Mutual Aid Association (AAFMAA) Finance Virginia, United States 161,621 No Source
January 2021 Wonderbox Retail Paris, France — Unknown Source
January 2021 OneDigital Service Georgia, United States 895 Unknown Source
January 2021 Staab & Kollegen Legal Saarbrücken, Germany — Unknown Source
January 2021 OMV System France Manufacturing Thyez, France — Unknown Source
January 2021 I-D Foods Corporation Food and Beverage Laval, Canada — Unknown Source
January 2021 HEUSSEN Rechtsanwaltsgesellschaft mbH Legal Berlin, Germany — Unknown Source
January 2021 ECHO-USA Retail Illinois, United States — Unknown Source
January 2021 Aaronson Rappaport Feinstein & Deutsch, LLP Legal New York, United States — Unknown Source
December 2020 WorldPosta Technology New York, United States — Unknown Source
December 2020 Stuller Retail Louisiana, United States — Unknown Source
December 2020 T.E.D. com GmbH Utilities Winnenden, Germany — Unknown Source
December 2020 POLIFILM GmbH Manufacturing Osterburken, Germany — Unknown Source
December 2020 Kilpatrick Townsend & Stockton Legal Georgia, United States — Unknown Source
December 2020 Irle Deuz GmbH Manufacturing Netphen, Germany — Unknown Source
December 2020 ECS Groupe Utilities Hœrdt, France — Unknown Source
December 2020 Cobb Office Products dba Cobb Technologies Retail Virginia, United States 913 Unknown Source
November 2020 Piedmont Plastics Manufacturing North Carolina, United States 5,587 Unknown Source
November 2020 Inter-State Studio and Publishing Co. Education Missouri, United States 7,942 Unknown Source
November 2020 Garber Buick GMC Retail Florida, United States — Unknown Source
November 2020 Forbes Energy Services Ltd Utilities Texas, United States — Unknown Source
November 2020 Door Controls USA Manufacturing Texas, United States — Unknown Source
November 2020 Archirodon Construction Dordrecht, Netherlands — Unknown Source
November 2020 Automation Personnel Services, Inc. Service Alabama, United States 299,251 Unknown Source
November 2020 Arrow Truck Sales, Inc. Retail Missouri, United States 18,087 Unknown Source
October 2020 USG Insurance Services, Inc. Finance Pennsylvania, United States 1,530 Unknown Source
October 2020 Tom Wood, Inc. Retail Indiana, United States 15,025 Unknown Source
October 2020 Mestek Manufacturing Massachusetts, United States — Unknown Source
October 2020 ColorTech, Inc. Manufacturing Tennessee, United States 451 No Source
September 2020 Wind River Systems, Inc Technology California, United States 8,585 Unknown Source
August 2020 Brookfield Residential Properties, Inc. Construction Calgary, Canada — No Source

Ransomnews coverage of DarkSide

  • DarkSide: Colonial Pipeline, the Pseudo-Code-of-Conduct, and the Rebrand to BlackMatter

Claimed vs confirmed. The figures above the fold on this page come from DarkSide's own leak-site postings and reflect what the operation claims. The table here is a separate evidence class: incidents Ransomnews verified against a public source. Confirmed counts are lower than claimed counts by design — most victims never disclose, and some leak-site listings are recycled, exaggerated or fabricated. Records and ransom figures are shown only where a named source disclosed them. See the full ransomware statistics or the Ransomtracker dataset.

← Back to Ransomtracker

Statistics on this page are computed by Ransomnews from a live leak-site monitoring feed. Numbers update every ten minutes. Operator-written victim descriptions are truncated and shown in snippet form only. Source data: RansomLook (CC BY 4.0), aggregated and adapted by Ransomnews.

// The Ransomnews Monthly

What leaked, what held up

One email a month: the datasets we verified, and the ones that fell apart under scrutiny.

Double opt-in. We store your email, signup time, and IP for consent records (GDPR Art. 7). See our privacy policy.

// Free tool

Were you in a leak?

Check whether an email address has surfaced in infostealer logs. No signup, no data stored.

Run StealerCheck

// Live data

Ransomtracker

Victims as they are posted to ransomware leak sites, tracked continuously and checked against the claims.

Open the tracker

9,459 confirmed attacks tracked

Facebook X (Twitter) LinkedIn
© 2026 Ransomnews.com

Type above and press Enter to search. Press Esc to cancel.

Cookies on Ransomnews

We use strictly-necessary cookies to run the site and may use first-party analytics to understand which articles are read. Some pages contain affiliate links — when you click one, the affiliate network sets cookies on the merchant's domain to attribute the referral. See the Cookie Policy and Affiliate Disclosure for detail.

RANSOMNEWS.COM

Tracking the criminal infrastructure of the internet.

Independent coverage of ransomware, breach economics, threat actors, privacy, AI security, and the open-source investigation toolkit.

// Topics

  • News
  • Security
  • Privacy
  • Cybercrime
  • AI
  • OSINT
  • Threat Groups
  • Stealer Logs
  • Ransomtracker
  • Stealercheck
  • FortiBleed Checker

// Site

  • About Us
  • Editorial Team
  • Contact
  • Tip Line
  • Editorial

// Legal

  • Privacy Policy
  • Terms of Service
  • Cookie Policy
  • Funding & Independence
  • RSS Feed
© 2026 Ransomnews.com · Tracking the criminal infrastructure of the internet.