THREAT ACTOR
LAMASHTU_
ActiveLAMASHTU is a ransomware operator tracked through its public data-leak infrastructure. The group operates under the double-extortion model that defines the modern ransomware ecosystem: file encryption combined with the threat of stolen-data publication on a public leak site. It continues to post fresh victim claims as part of an ongoing extortion campaign.
For Ransomnews editorial coverage of LAMASHTU, including incident write-ups, attribution notes and additional context, see the Threat Groups archive or run a site search.
Victims by year
- 2026 34
Leak site mirrors
2 mirrors tracked, 2 currently reachable. These are criminal-infrastructure URLs; links are deliberately not provided.
-
lamashtux5j74mcm7lwwgn5yrvuwtrpxjoyendif3v3hrztjesfoyayd.onionsnapshot · 2026-09-23 05:00 -
lamashtux5j74mcm7lwwgn5yrvuwtrpxjoyendif3v3hrztjesfoyayd.onionsnapshot · 2026-09-23 05:00
Recent victims
The 50 most recent victims claimed by LAMASHTU. Total in the index: 34.
| Date listed | Victim | Description |
|---|---|---|
| 2026-06-17 | Great Foods | greatfoods.com.eg - Great Foods is a major Egyptian food manufacturin… |
| 2026-06-11 | PatayaFood | patayafood.com - PatayaFood is a Thai food manufacturer and supplier p… |
| 2026-05-29 | Shanpoornam Metals | shanpoornammetals.com - Shanpoornam Metals is a metal trading and fabr… |
| 2026-05-26 | H-W-G & Acros Sport | h-w-g.com - HWG (h-w-g.com): German manufacturer of bearings and mecha… |
| 2026-05-19 | ROTH‑TECHNIK AUSTRIA | rothtechnik.eu - RTA GmbH manufacturer and distributor of metal pipe f… |
| 2026-05-18 | MSC Group | msmelt.com - MSC Group is a global metals trading and recycling corpor… |
| 2026-05-16 | Parle Agro | parleagro.com - Parle Agro — an Indian company that makes non‑alcoholi… |
| 2026-05-12 | NaRaYa | naraya.com - NaRaYa is a famous Thai brand recognized worldwide for it… |
| 2026-05-12 | Saharuang | saharuang.com - Company operates a large-scale sugar mill and refinery… |
| 2026-05-12 | Depósito Dental Universitario | ddu.mx - Depósito Dental Universitario (DDU), a Mexican company specia… |
| 2026-05-12 | Sistemas Electrónicos y de Telecomunicaciones | sertes.com.mx - Sertes is a Mexican company specializing in industrial… |
| 2026-05-08 | Acros Sport GmbH | acros-components.com - Acros Sport GmbH is a high-end German bicycle c… |
| 2026-05-08 | Ashtech Infotech | ashinfo.com - Ashtech Infotech (India) Pvt. Ltd. is a leading System I… |
| 2026-05-06 | WOHA | woha.net - WOHA is a renowned Singapore-based architectural practice f… |
| 2026-05-05 | GRANDHOME | grandhomemart.com - GRANDHOME is a leading Thai retailer specializing … |
| 2026-05-04 | ROYAL M HOTEL BY GEWAN FUJAIRAH LLC | royalmhotels.com - Royal M Hotel Fujairah by Gewan is an upscale 5-sta… |
| 2026-05-04 | Luna Group | lunagroupeg.com - Luna Group is a major Egyptian conglomerate establis… |
| 2026-04-25 | Apple Film Group | applefilm-group.com - Apple Film Co., Ltd. is a leading manufacturer o… |
| 2026-04-25 | Malaysian NPK Fertilizer Sdn. Bhd | mnfsb.com.my - Malaysian NPK established in 2001 in Kedah, is a leadin… |
| 2026-04-20 | Jesin Group | jesin.com.my - Jesin Group is a prominent property developer in Northe… |
| 2026-04-16 | Biotehnos | biotehnos.ro - Biotehnos is a Romanian pharmaceutical company founded … |
| 2026-04-15 | VOLTERRIES | volterres.fr - Volterres, a subsidiary of the Eiffage group, is reinve… |
| 2026-04-14 | LACROIX | palacroix.com - Pièces d'Auto Lacroix is a Canadian company specializi… |
| 2026-04-14 | WEDA ROBOTICS | wedarobotics.com - Over 100 Years of Engineering. Now Pioneering the F… |
| 2026-04-14 | GRUPO RONDA | gruporonda.org - Grupo Ronda Auditores es un despacho constituido por … |
| 2026-04-14 | IPARBILBAO ABOGADOS - ROCA JUNYENT | iparbilbao.com - Prestamos servicios de asesoramiento legal a la empre… |
| 2026-04-12 | Gauthier Tissus | gauthier-tissus.com - Based in the Rhone-Alpes basin, Gauthier Tissus … |
| 2026-04-12 | CNAOC | cnaoc.org - Depuis 1924, la CNAOC porte la voix du vignoble français d… |
| 2026-04-12 | FILAIR | filair.fr - Since 1953, Filair, a French company, has been designing, … |
| 2026-04-12 | Beaver Engineering | beaverengineering.com - Beaver Engineering, Inc. is a Nashville-based … |
| 2026-04-12 | ClientSolution EFO Service Srl Logitech Srl Safety | clientsolution.it - ClientSolution — facility management and business … |
| 2026-04-12 | Servetto Srl | servetto.it - Servetto Srl, einem weltweit führenden italienischen Unt… |
| 2026-04-12 | International Assistance Sdn | international-assist.com - To provide the highest standard of service … |
| 2026-04-12 | The Seacare Hotel | theseacarehotel.com - The Seacare hotel is strategically located near … |
CONFIRMED ATTACKS
Lamashtu confirmed attacks: 1 verified incident
Ransomnews has verified 1 Lamashtu incident against named organisations, each corroborated by a public source such as a breach notification, regulatory filing or press report. All of them fall in May 2026. Thailand accounts for 1 of them (100%). The most affected sector is manufacturing, at 1 confirmed victim.
Confirmed victims by year
Most affected sectors
Most affected countries
Verified Lamashtu incidents
| Date | Organisation | Sector | Location | Records | Ransom paid | Source |
|---|---|---|---|---|---|---|
| May 2026 | NaRaYa | Manufacturing | Nonthaburi, Thailand | — | Unknown | Source |
Claimed vs confirmed. The figures above the fold on this page come from Lamashtu's own leak-site postings and reflect what the operation claims. The table here is a separate evidence class: incidents Ransomnews verified against a public source. Confirmed counts are lower than claimed counts by design: most victims never disclose, and some leak-site listings are recycled, exaggerated or fabricated. Records and ransom figures are shown only where a named source disclosed them. See the full ransomware statistics or the Ransomtracker dataset.