Close Menu

GRIEF · Threat actor profile

THREAT ACTOR

GRIEF_

Dormant

GRIEF is a ransomware operator tracked through its public data-leak infrastructure. The group operates under the double-extortion model that defines the modern ransomware ecosystem: file encryption combined with the threat of stolen-data publication on a public leak site. It continues to post fresh victim claims as part of an ongoing extortion campaign.

For Ransomnews editorial coverage of GRIEF, including incident write-ups, attribution notes and additional context, see the Threat Groups archive or run a site search.

0 Victims tracked
0 / 2 Active mirrors
— First listing
— Most recent

Leak site mirrors

2 mirrors tracked, 0 currently reachable. These are criminal-infrastructure URLs; links are deliberately not provided.

  • griefcameifmv4hfr3auozmovz5yi6m3h3dwbuqw7baomfxoxz4qteid.onion Grief list snapshot · 2022-05-02 13:05
  • payorgz3j6hs2gj66nk6omfw65atgmqwzxqbbxnqi3bv2mlwgcirunad.onion snapshot · 2024-12-09 22:02

CONFIRMED ATTACKS

Grief confirmed attacks: 28 verified incidents

Ransomnews has verified 28 Grief incidents against named organisations, each corroborated by a public source such as a breach notification, regulatory filing or press report. The confirmed record runs from September 2020 to January 2022. United States accounts for 10 of them (36%), with victims recorded in 9 countries in total. The most affected sector is retail, at 6 confirmed victims. A ransom payment was publicly confirmed in 0 cases and publicly refused in 4; the outcome is unrecorded in the remaining 24. Where a figure was disclosed (5 cases), these incidents account for 124,172 exposed records.

28Verified incidents
9Countries
2020–2022Active range
0%Paid, where outcome known

Confirmed victims by year

  • 20201
  • 202125
  • 20222

Most affected sectors

  • Retail6
  • Government5
  • Education4
  • Other3
  • Healthcare3
  • Food and Beverage2
  • Technology1
  • Finance1

Most affected countries

  • United States10
  • France9
  • United Kingdom3
  • Canada1
  • Switzerland1
  • Dominican Republic1
  • Mexico1
  • Greece1

Verified Grief incidents

DateOrganisationSector LocationRecordsRansom paidSource
January 2022 STIMM (Société de Transformation d'Installation et de Montage Métallique) Construction Bas-en-Basset, France — Unknown Source
January 2022 Paul Beuscher Retail Paris, France — Unknown Source
December 2021 Sud Trading Company Retail Villetelle, France — Unknown Source
October 2021 Trujas SAS Retail Trappes, France — Unknown Source
October 2021 National Rifle Association (NRA) Other Virginia, United States — Unknown Source
October 2021 Philippe Fauveder et Cie Transportation Montoir-de-Bretagne, France — Unknown Source
October 2021 Central Indiana Orthopedics Healthcare Indiana, United States 83,705 Unknown Source
September 2021 LinkOffice Technology Strasbourg, France — Unknown Source
September 2021 Cromology Retail Puteaux, France — Unknown Source
July 2021 Matisa Matérial Industriel Manufacturing Crissier, Switzerland — Unknown Source
July 2021 Lensbury Limited Other Teddington, United Kingdom — Unknown Source
July 2021 City of Thessaloniki Government City of Thessaloniki, Greece — No Source
June 2021 The Woodruff Institute Healthcare Florida, United States — Unknown Source
June 2021 Rehabilitation Support Services Healthcare New York, United States 23,907 Unknown Source
June 2021 Lancaster Independent School District Education Texas, United States — Unknown Source
June 2021 Lenaja Food and Beverage Rungis, France — Unknown Source
June 2021 Ville de Villepinte Government Villepinte, France — Unknown Source
June 2021 Booneville School District Education Mississippi, United States — Unknown Source
May 2021 Vicksburg Warren School District Education Mississippi, United States 9,088 Unknown Source
May 2021 Mobile County Government Alabama, United States 1,600 No Source
May 2021 Puntacana Group Other Santo Domingo, Dominican Republic — Unknown Source
May 2021 Comune di Porto Sant’Elpidio Government Porto Sant'Elpidio, Italy — Unknown Source
May 2021 La Concha Food and Beverage Guadalajara, Mexico — Unknown Source
May 2021 Home Decor GB Ltd Retail Sheffield, United Kingdom — Unknown Source
May 2021 HDHC Home Decor Retail Sheffield, United Kingdom — Unknown Source
May 2021 Naz Financial Services, Inc. Finance Ontario, Canada — No Source
May 2021 Clover Park School District Education Washington, United States 5,872 Unknown Source
September 2020 St. Clair County Government Alabama, United States — No Source

Claimed vs confirmed. The figures above the fold on this page come from Grief's own leak-site postings and reflect what the operation claims. The table here is a separate evidence class: incidents Ransomnews verified against a public source. Confirmed counts are lower than claimed counts by design: most victims never disclose, and some leak-site listings are recycled, exaggerated or fabricated. Records and ransom figures are shown only where a named source disclosed them. See the full ransomware statistics or the Ransomtracker dataset.

← Back to Ransomtracker

Statistics on this page are computed by Ransomnews from a live leak-site monitoring feed. Numbers update every ten minutes. Operator-written victim descriptions are truncated and shown in snippet form only. Source data: RansomLook (CC BY 4.0), aggregated and adapted by Ransomnews.