Close Menu
  • Home
  • News
  • Security
  • Privacy
  • Cybercrime
    • Threat Groups
    • Ransomware
    • Explainers
    • Stealer Logs
  • AI
  • OSINT
  • Tools
    • Ransomtracker
    • Stealercheck
    • FortiBleed Checker
    • Site Check
  • Data
    • Ransomware statistics
    • Ransom payment rate
    • Breach verification
  • Newsletter
  • About Us
Facebook X (Twitter) Instagram Threads
Ransomnews
  • Home
  • News
  • Security
  • Privacy
  • Cybercrime
    • Threat Groups
    • Ransomware
    • Explainers
    • Stealer Logs
  • AI
  • OSINT
  • Tools
    • Ransomtracker
    • Stealercheck
    • FortiBleed Checker
    • Site Check
  • Data
    • Ransomware statistics
    • Ransom payment rate
    • Breach verification
  • Newsletter
  • About Us
Facebook X (Twitter) LinkedIn
Ransomnews

DOPPELPAYMER · Threat actor profile

THREAT ACTOR

DOPPELPAYMER_

Dormant

DOPPELPAYMER is a ransomware operator tracked through its public data-leak infrastructure. The group operates under the double-extortion model that defines the modern ransomware ecosystem: file encryption combined with the threat of stolen-data publication on a public leak site. It continues to post fresh victim claims as part of an ongoing extortion campaign.

For Ransomnews editorial coverage of DOPPELPAYMER, including incident write-ups, attribution notes and additional context, see the Threat Groups archive or run a site search.

0 Victims tracked
0 / 2 Active mirrors
— First listing
— Most recent

Leak site mirrors

2 mirrors tracked, 0 currently reachable. These are criminal-infrastructure URLs; links are deliberately not provided.

  • hpoo4dosa3x4ognfxpqcrjwnsigvslm7kv6hvmhh2yqczaxy3j6qnwad.onion Start-maximized.com snapshot · 2022-02-24 19:09
  • qkbbaxiuqqcqb5nox4np4qjcniy2q6m7yeluvj7n5i5dn7pgpcwxwfid.onion snapshot · 2024-12-09 20:40

CONFIRMED ATTACKS

Doppelpaymer confirmed attacks: 94 verified incidents

Ransomnews has verified 94 Doppelpaymer incidents against named organisations, each corroborated by a public source such as a breach notification, regulatory filing or press report. The confirmed record runs from November 2019 to June 2021. United States accounts for 45 of them (48%), with victims recorded in 16 countries in total. The most affected sector is government, at 21 confirmed victims. A ransom payment was publicly confirmed in 1 case and publicly refused in 23; the outcome is unrecorded in the remaining 70. Where a figure was disclosed (17 cases), these incidents account for 350,311 exposed records.

94Verified incidents
16Countries
2019–2021Active range
4%Paid, where outcome known

Confirmed victims by year

  • 20192
  • 202070
  • 202122

Most affected sectors

  • Government21
  • Manufacturing15
  • Retail8
  • Education8
  • Healthcare6
  • Food and Beverage6
  • Transportation6
  • Service5

Most affected countries

  • United States45
  • France17
  • Canada8
  • Italy5
  • Germany4
  • South Africa2
  • Mexico2
  • Japan2

Verified Doppelpaymer incidents

DateOrganisationSector LocationRecordsRansom paidSource
June 2021 Siegel Egg Co, Inc. Food and Beverage Massachusetts, United States — Unknown Source
May 2021 Clopay Ames True Temper Holding Corp Retail Ohio, United States — Unknown Source
April 2021 Union Community School District Education Iowa, United States 3,629 Unknown Source
April 2021 Comune di Rho Government Rho, Italy — No Source
April 2021 Illinois Attorney General Government Illinois, United States — No Source
April 2021 Comune di Caselle Torinese Government Caselle Torinese, Italy — No Source
March 2021 Soflog (GCA Supply) Transportation Asnières-sur-Seine, France — Unknown Source
March 2021 Comune di Brescia Government Brescia, Italy — No Source
March 2021 GORON S.A. Service Paris, France — Unknown Source
March 2021 Diversified Plastics Corporation Manufacturing Missouri, United States — Unknown Source
March 2021 Autohaus Muhra GmbH Retail Oberhausen, Germany — Unknown Source
February 2021 Yuba County Government California, United States — No Source
February 2021 Urbaser Utilities Madrid, Spain — Unknown Source
February 2021 Morgan County Government Missouri, United States — Unknown Source
February 2021 PratoAllarmi SRL Retail Prato, Italy — Unknown Source
February 2021 Kia Motors America Retail California, United States — Unknown Source
February 2021 Netherlands Organisation for Scientific Research (NWO)/Dutch Research Council Government Den Haag, Netherlands — No Source
February 2021 Florida Studio Theatre Other Florida, United States — Unknown Source
February 2021 Cuyahoga Metropolitan Housing Authority Government Ohio, United States 189,008 Unknown Source
January 2021 Georgia Crown Distributing Co. Food and Beverage Georgia, United States 4,199 No Source
January 2021 Georgetown County Government South Carolina, United States 50 No Source
January 2021 Azusa Police Department Government California, United States — No Source
December 2020 Peter Pan Seafoods Food and Beverage Washington, United States 8,846 Unknown Source
December 2020 Kaman (Bal Seal) Manufacturing Connecticut, United States — No Source
December 2020 Promutuel Assurance Finance Québec, Canada — Unknown Source
December 2020 Alphacam Technology Aachen, Germany — Unknown Source
December 2020 AIDA Cruise Ships Other Rostock, Germany — Unknown Source
November 2020 Sizzling Platter, LLC Food and Beverage Utah, United States 13,747 Unknown Source
November 2020 Mitsubishi Polysilicon America Corporation Manufacturing Alabama, United States — Unknown Source
November 2020 l’association Caminante Other Saint-André-de-Seignanx, France — Unknown Source
November 2020 Gardiner Public Schools Education Montana, United States — Unknown Source
November 2020 International Container & Transport Transportation Tremblay-en-France, France — Unknown Source
November 2020 Innelec Multimédia Technology Pantin, France — Unknown Source
November 2020 Homeperf Healthcare Aix-en-Provence, France — Unknown Source
November 2020 Groupe Amplitude Retail Chambray-lès-Tours, France — Unknown Source
November 2020 Foxconn Electronics Manufacturing Ciudad Juárez, Mexico — Unknown Source
November 2020 Compal Electronics Manufacturing Taipei, Taiwan — Unknown Source
November 2020 Banijay Group SAS (Endemol Shine) Other Paris, France — Unknown Source
November 2020 Bailly-Creat Healthcare Vernouillet, France — Unknown Source
November 2020 Kneip Finance Bertrange, Luxembourg — Unknown Source
November 2020 Century Furniture, LLC Manufacturing North Carolina, United States — Unknown Source
October 2020 Walled Lake Consolidated School District Education Michigan, United States — Unknown Source
October 2020 The L.S. Starrett Company Manufacturing Massachusetts, United States — Unknown Source
October 2020 Pascagoula-Gautier School District Education Mississippi, United States — Unknown Source
October 2020 Sparflex Manufacturing Marne, France — Unknown Source
October 2020 Med-Care Infusion Services, Inc. Healthcare Florida, United States — Unknown Source
October 2020 Hall County Government Georgia, United States — Unknown Source
October 2020 Foussier Retail Sarthe, France — Unknown Source
October 2020 CISEG GmbH Manufacturing Vienna, Austria — Unknown Source
October 2020 Chatham County Government North Carolina, United States 2,134 No Source
September 2020 Reconstructive Orthopedic Center of Houston Healthcare Texas, United States — Unknown Source
September 2020 Department of Justice and Constitutional Development Government Pretoria, South Africa — No Source
September 2020 Optima Italia SpA Utilities Naples, Italy — Unknown Source
September 2020 Guilford Technical Community College Education North Carolina, United States 69,846 Unknown Source
August 2020 Transport Express Minimax Inc Transportation Cornwall, Canada — Unknown Source
August 2020 Newcastle University Education Newcastle, United Kingdom — Unknown Source
August 2020 DAISHO Co,.Ltd. Food and Beverage Tokyo, Japan — Unknown Source
August 2020 Canpar Express Transportation Brampton, Canada 6,715 Unknown Source
August 2020 Asunaro Aoki Construction Co.,Ltd. Construction Chiyoda, Japan — Unknown Source
August 2020 Boyce Technologies, Inc. Technology New York, United States — Unknown Source
July 2020 Commune de Mitry-Mory Government Mitry-Mory, France — No Source
July 2020 DiVal Safety Equipment, Inc. Retail New York, United States 18 Unknown Source
July 2020 Canada Royal Military Colleges Education Ontario, Canada — Unknown Source
July 2020 Apex Laboratory Healthcare New York, United States 7,102 Unknown Source
June 2020 Wolverine Freight System Transportation Windsor, Canada — Unknown Source
June 2020 Logéal Immobilière Service Yvetot, France — Unknown Source
June 2020 City of Knoxville Government Tennessee, United States — No Source
May 2020 Roger Martin SA Group Construction Dijon, France — No Source
May 2020 Phipps Dickson Integria, Inc. Service Quebec, Canada — Unknown Source
May 2020 Nipissing First Nation Government Ontario, Canada — No Source
May 2020 ICM - International Commerce & Marketing Corp Manufacturing Wisconsin, United States — Unknown Source
May 2020 City of Florence Government Alabama, United States — Yes Source
May 2020 Amphastar Pharmaceuticals, Inc. Healthcare California, United States 2,193 No Source
April 2020 Precoat Metals Corp Manufacturing Missouri, United States — No Source
April 2020 Mitsubishi HiTec Paper Europe GmbH Manufacturing Bielefeld, Germany — Unknown Source
April 2020 Go West Tours Service California, United States — Unknown Source
April 2020 Kent County Trading Ltd Other Kent, United Kingdom — Unknown Source
April 2020 Commercial Development Company, Inc. Service Missouri, United States — Unknown Source
April 2020 Banka Ekonomike Finance Prishtinë, Kosovo — Unknown Source
March 2020 Community Development Bank Finance Minnesota, United States 8,679 Unknown Source
March 2020 Visser Precision Manufacturing Colorado, United States — Unknown Source
March 2020 Kimchuk, Inc. Manufacturing Connecticut, United States — No Source
March 2020 National Aquaculture Group (NAQUA) Food and Beverage Makkah, Saudi Arabia — Unknown Source
March 2020 National Agency for Adult Vocational Training (AFPA) Education Cherbourg-en-Cotentin, France — Unknown Source
March 2020 Digital Management, Inc. Technology Maryland, United States 6,072 Unknown Source
March 2020 Ville de Charleville-Mézières Government Charleville-Mézières, France — Unknown Source
March 2020 City of Torrance Government California, United States 7,670 No Source
February 2020 Valley Forge Fabrics, Inc. Manufacturing Florida, United States — Unknown Source
February 2020 Sekure Merchant Solutions Finance New York, United States 20,403 Unknown Source
February 2020 Furniture Row Retail Colorado, United States — Unknown Source
February 2020 Bidvest Panalpina Logistics Transportation Johannesburg, South Africa — Unknown Source
January 2020 Bretagne Télécom Utilities Châteaubourg, France 0 No Source
November 2019 Petroleos Mexicanos (Pemex) Government Mexico City, Mexico — No Source
November 2019 Government of Nunavut Government Nunavut, Canada — No Source

Claimed vs confirmed. The figures above the fold on this page come from Doppelpaymer's own leak-site postings and reflect what the operation claims. The table here is a separate evidence class: incidents Ransomnews verified against a public source. Confirmed counts are lower than claimed counts by design: most victims never disclose, and some leak-site listings are recycled, exaggerated or fabricated. Records and ransom figures are shown only where a named source disclosed them. See the full ransomware statistics or the Ransomtracker dataset.

← Back to Ransomtracker

Statistics on this page are computed by Ransomnews from a live leak-site monitoring feed. Numbers update every ten minutes. Operator-written victim descriptions are truncated and shown in snippet form only. Source data: RansomLook (CC BY 4.0), aggregated and adapted by Ransomnews.

The Ransomnews Monthly

What leaked, what held up

One email a month: the datasets we verified, and the ones that fell apart under scrutiny.

Double opt-in. We store your email, signup time, and IP for consent records (GDPR Art. 7). See our privacy policy.

Free tool

How does your own site score?

Forty passive checks on TLS, security headers, email spoofing and privacy. A grade out of 100 in about fifteen seconds.

No signup. Nothing installed. We only request what your site already serves publicly.

Free tool

Were you in a leak?

Check whether an email address has surfaced in infostealer logs. No signup, no data stored.

Run StealerCheck

Live data

Ransomtracker

Victims as they are posted to ransomware leak sites, tracked continuously and checked against the claims.

Open the tracker

9,613 confirmed attacks tracked

Facebook X (Twitter) LinkedIn
© 2026 Ransomnews.com

Type above and press Enter to search. Press Esc to cancel.

Cookies on Ransomnews

We use strictly-necessary cookies to run the site and may use first-party analytics to understand which articles are read. Some pages contain affiliate links; when you click one, the affiliate network sets cookies on the merchant's domain to attribute the referral. See the Cookie Policy and Affiliate Disclosure for detail.

RANSOMNEWS.COM

Tracking the criminal infrastructure of the internet.

Independent coverage of ransomware, breach economics, threat actors, privacy, AI security, and the open-source investigation toolkit.

Topics

  • News
  • Security
  • Privacy
  • Cybercrime
  • AI
  • OSINT
  • Threat Groups
  • Stealer Logs
  • Ransomtracker
  • Stealercheck
  • FortiBleed Checker
  • Site Check

Site

  • About Us
  • Editorial Team
  • Contact
  • Tip Line
  • Editorial

Legal

  • Privacy Policy
  • Terms of Service
  • Cookie Policy
  • Funding & Independence
  • RSS Feed
© 2026 Ransomnews.com · Tracking the criminal infrastructure of the internet.