THREAT ACTOR
INSOMNIA_
ActiveINSOMNIA is a ransomware operator tracked through its public data-leak infrastructure. The group operates under the double-extortion model that defines the modern ransomware ecosystem: file encryption combined with the threat of stolen-data publication on a public leak site. It continues to post fresh victim claims as part of an ongoing extortion campaign.
For Ransomnews editorial coverage of INSOMNIA, including incident write-ups, attribution notes and additional context, see the Threat Groups archive or run a site search.
Victims by year
- 2026 52
Leak site mirrors
2 mirrors tracked, 2 currently reachable. These are criminal-infrastructure URLs; links are deliberately not provided.
-
i62huw7ve22rpyw6lnq3kmfump2dmsg4xpveec3ere73njwatrz74gad.onionInsomnia snapshot · 2026-09-23 01:00 -
r3keoxye5mki4fqcvlk4hpfqqzxmakchjpmem7oppynobcieamdbmcyd.onionsnapshot · 2026-09-23 00:07
Recent victims
The 50 most recent victims claimed by INSOMNIA. Total in the index: 52.
| Date listed | Victim | Description |
|---|---|---|
| 2026-09-15 | Wiggins, Childs, Pantazis, Fisher, & Goldfarb LLC | Large U.S. plaintiffs firm with Alabama, D.C., and Florida offices. Si… |
| 2026-09-14 | Metropolitan Community Health Services | Agape Health Services, a CCBHC/FQHC run by Metropolitan Community Heal… |
| 2026-09-14 | Massey, Stotser & Nichols | Massey, Stotser & Nichols is a Birmingham, AL law firm offering real e… |
| 2026-09-07 | NorthShore Health Centers | NorthShore Health Centers offers comprehensive care in Indiana, includ… |
| 2026-09-03 | Maglin, Miskiv & Associates | Maglin Miskiv & Associates in Parsippany, NJ offers personalized accou… |
| 2026-09-02 | N*************** | Medical center with 9 locations offers coordinated care for patients a… |
| 2026-08-31 | Metro Tulsa Foot | A comprehensive foot and ankle treatment center with five locations in… |
| 2026-08-19 | Aurora Health Management | Aurora Health Management, LLC operates a skilled nursing and rehab cen… |
| 2026-08-19 | *********** | A private firm offering fluid system solutions for the oil, gas, chemi… |
| 2026-08-18 | Codinter | Private company supplying welding, cutting, finishing products and ser… |
| 2026-08-06 | Park Place Behavioral Health Care | PPBHC provides mental health and substance use services in Osceola Cou… |
| 2026-07-31 | Merritt Woodwork | Merritt provides strategic interior solutions for global estates and s… |
| 2026-07-31 | Laempe Reich | Laempe Reich is North America’s leading foundry core machine supplier,… |
| 2026-07-29 | Sky Solutions | Sky Solutions is a leading distribution company for Telecommunication … |
| 2026-07-24 | Brooklyn Defender Services | Brooklyn Defender Services is a public defense office providing free, … |
| 2026-06-25 | ************* | Law firm provide legal services to individuals, businesses, and organi… |
| 2026-06-12 | The Vant Group | The Vant Group, founded in 1999, is an M&A advisory firm serving busin… |
| 2026-06-09 | Mid-Cumberland Human Resource Agency | MCHRA is a nonprofit promoting self-sufficiency via Meals-on-Wheels, p… |
| 2026-04-28 | Nephrology Associates | Nephrology Associates, PA is a leading central Arkansas nephrology pra… |
| 2026-04-24 | METO Systems | METO Systems designs and manufactures stainless-steel industrial mater… |
| 2026-04-09 | United Medical Doctors | United Medical Doctors (UMD) is an independent multi‑specialty medical… |
| 2026-04-08 | Noble Inc. | Noble Casing, Inc., founded in 2009, provides casing running and condu… |
| 2026-04-02 | *****d **d**** ****o** | Functions as a comprehensive healthcare ecosystem—combining clinical c… |
| 2026-03-23 | Atlas Ocean Voyages | Atlas Ocean Voyages offers year-round all-inclusive expedition cruises… |
| 2026-03-18 | Valley Family Health Care | Valley Family Health Care is a Community Health Center offering medica… |
| 2026-03-17 | **l** ****** ****** C*** | A multi-service, accessible community health network designed to provi… |
| 2026-03-03 | Belmont Plastic Surgery | |
| 2026-02-26 | Ripple Neuro | |
| 2026-02-26 | Thrash Commercial Contractors | |
| 2026-02-25 | Zaner Group | |
| 2026-02-18 | AdMark Asia Group | |
| 2026-02-18 | Application Solution Providers | |
| 2026-02-13 | Copier Careers | |
| 2026-02-13 | The Syverson Group | |
| 2026-02-11 | Aviam Corporate Housing | |
| 2026-02-08 | Advanced Healthcare Professionals | |
| 2026-02-08 | Integrated Fresh Solutions | |
| 2026-02-08 | Gruel Mills Nims Pylman | |
| 2026-02-08 | Carlyle Senior Care of Florence | |
| 2026-02-08 | Internal Medicine of Milford | |
| 2026-02-08 | Rella Associates | |
| 2026-02-08 | Flint Hills Dialysis | |
| 2026-02-08 | Southern Illinois Dermatology | |
| 2026-02-08 | Parts Life, Inc | |
| 2026-02-08 | DeVal LCS | |
| 2026-02-08 | SchureMed | |
| 2026-02-08 | Optimum Health Institute | |
| 2026-02-08 | Anatomic Clinical Laboratory Associates | |
| 2026-02-08 | Dunn and Dunn | |
| 2026-02-08 | Tri-Cities Gastroenterology |
CONFIRMED ATTACKS
Insomnia confirmed attacks: 6 verified incidents
Ransomnews has verified 6 Insomnia incidents against named organisations, each corroborated by a public source such as a breach notification, regulatory filing or press report. The confirmed record runs from November 2025 to January 2026. United States accounts for 5 of them (83%), with victims recorded in 2 countries in total. The most affected sector is healthcare, at 5 confirmed victims. Where a figure was disclosed (4 cases), these incidents account for 397,554 exposed records.
Confirmed victims by year
Most affected sectors
Most affected countries
Verified Insomnia incidents
| Date | Organisation | Sector | Location | Records | Ransom paid | Source |
|---|---|---|---|---|---|---|
| January 2026 | Enviro-Hub Holdings Ltd | Other | Singapore, Singapore | — | Unknown | Source |
| December 2025 | Anatomic and Clinical Laboratory Associates, P.C. | Healthcare | Tennessee, United States | 169,626 | Unknown | Source |
| December 2025 | United Medical Doctors | Healthcare | California, United States | 501 | Unknown | Source |
| December 2025 | Tri-Cities Gastroenterology | Healthcare | Tennessee, United States | 67,115 | Unknown | Source |
| November 2025 | Internal Medicine of Milford, P.C. | Healthcare | Connecticut, United States | — | Unknown | Source |
| November 2025 | Southern Illinois Dermatology | Healthcare | Illinois, United States | 160,312 | Unknown | Source |
Claimed vs confirmed. The figures above the fold on this page come from Insomnia's own leak-site postings and reflect what the operation claims. The table here is a separate evidence class: incidents Ransomnews verified against a public source. Confirmed counts are lower than claimed counts by design: most victims never disclose, and some leak-site listings are recycled, exaggerated or fabricated. Records and ransom figures are shown only where a named source disclosed them. See the full ransomware statistics or the Ransomtracker dataset.