THREAT ACTOR
LV_
DormantLV is a ransomware operator tracked through its public data-leak infrastructure. The group operates under the double-extortion model that defines the modern ransomware ecosystem: file encryption combined with the threat of stolen-data publication on a public leak site. It continues to post fresh victim claims as part of an ongoing extortion campaign.
For Ransomnews editorial coverage of LV, including incident write-ups, attribution notes and additional context, see the Threat Groups archive or run a site search.
Victims by year
- 2022 35
- 2021 17
Leak site mirrors
3 mirrors tracked, 0 currently reachable. These are criminal-infrastructure URLs; links are deliberately not provided.
-
rbvuetuneohce3ouxjlbxtimyyxokb4btncxjbo44fbgxqy7tskinwad.onionLV Blog snapshot · 2022-12-20 18:07 -
4qbxi3i2oqmyzxsjg4fwe4aly3xkped52gq5orp6efpkeskvchqe27id.onionStart-maximized.com snapshot · 2022-03-19 15:00 -
l55ysq5qjpin2vq23ul3gc3h62vp4wvenl7ov6fcn65vir7kc7gb5fyd.onionsnapshot · 2024-12-10 05:00
Recent victims
The 50 most recent victims claimed by LV. Total in the index: 52.
| Date listed | Victim | Description |
|---|---|---|
| 2022-11-15 | THEW ASSOCIATES HACKED. MORE THEN 50 GB SENSETIVE DATA LEAKED. | |
| 2022-11-12 | BRAZILIAN PET FOODS | |
| 2022-11-09 | LAW OFFICES OF JOHN T ORCUTT WAS HACKED. MORE THEN 2TB SENSETIVE DATA LEAKED. | |
| 2022-11-03 | CONSUMAX.COM.AR - WAS HACKED AND MORE THEN 2TB SENSETIVE DATA LEAKED | |
| 2022-11-02 | Saint Jean Industries - MORE THEN 1.5 TB DATA LEAKED | |
| 2022-11-02 | AWESOME-DENTAL.COM - HACKED AND MORE THEN 100GB LEAKED | |
| 2022-11-02 | WICKERSHAMCONSTRUCTION.COM - HACKED AND MORE THEN 1000GB DATA LEAKED! | |
| 2022-11-02 | PARAMOUNT ENTERPRISE INTERNATIONAL HACKED AND MORE THEN 1.5 TB DATA LEAKED | |
| 2022-11-02 | THEHURSTGROUP.CO.UK - HACKED AND MORE THEN 2000GB SENSITIVE DATA LEAKED | |
| 2022-11-02 | ROUGIER HACKED. 1 TB SENSITIVE DATA LEAKED | |
| 2022-11-02 | GRUPO SIFU HACKED. MORE THEN 2TB SENSETIVE DATA LEAKED AND READY FOR PUBLICATION | |
| 2022-11-02 | SUBCARN WAS HACKED AND OVER 200 GB OF SENSETIVE DATA WAS STOLEN | |
| 2022-11-02 | KINETIC.PH WAS HACKED. 200 GB ENGINEERING AND CONFIDENTIAL DATA LEAKED | |
| 2022-11-02 | SICOTEC WAS HACKED. 200GB SENSETIVE DATA LEAKED | |
| 2022-08-25 | ANGT - HACKED. MORE THEN 700 GB SENSITIVE DATA LEAKED | |
| 2022-08-18 | STTLK - HACKED AND MORE THEN 200GB DATA LEAKED | |
| 2022-08-18 | SEMIKRON - EXTREMELY LOW LEVEL OF CYBERSECURITY. 2 TB OF CORPORATE DATA STOLEN | |
| 2022-08-18 | ELEFONDATI SRL - WAS HACKED. 20 GB OF SENSITIVE DATA STOLEN | |
| 2022-06-15 | MOLTOLUCE - HACKED AND DATA LEAKED | |
| 2022-06-14 | SCHIFFMANS - HACKED AND DATA LEAKED | |
| 2022-06-14 | MOTOLUCLE.COM - HACKED AND DATA LEAKED | |
| 2022-06-10 | CAPECODRTA - HACKED AND DATA LEAKED | |
| 2022-06-04 | SilTerra - HACKED AND 1 TB DATA LEAKED WITH SOURCES AND NDA | |
| 2022-06-02 | CICIS.COM- HACKED AND INFORMATION MORE THEN 120,000 CUSTOMERS LEAKED | |
| 2022-06-01 | XYTECH - HACKED AND 650 GB DATA LEAKED | |
| 2022-06-01 | CICIS.COM- HACKED AND DATA LEAKED | |
| 2022-05-19 | Important announcement | |
| 2022-05-02 | CPQD - BANCO CENTRAL OF BRASIL BLOCKHAIN. 1.8TB DATA LEAKED WITH ALL SOURCES. | |
| 2022-04-30 | MOTIVE-ENERGY - HACKED AND 1.5 TB DATA LEAKED | |
| 2022-04-15 | Importador Ferretero Trujillo Cia. Ltda | |
| 2022-02-18 | OPS omniplussystem.com | |
| 2022-02-16 | gruporoveri.com.br | |
| 2022-02-14 | www.tikg.co.jp | |
| 2022-02-11 | ufa.com.lb | |
| 2022-01-29 | lhotellerie-restauration.fr | |
| 2021-12-31 | wagstaff.com - 1.5TB LEAKED | |
| 2021-12-21 | reliancenj.com - HACKED AND MORE THEN 200GB DATA LEAKED | |
| 2021-12-16 | agrofair.nl | |
| 2021-12-13 | tt-network.dk | |
| 2021-12-10 | KOBE BUSSAN - HACKED AND MORE THEN 500Gb DATA LEAKED | |
| 2021-12-09 | benlineagencies.com | |
| 2021-12-08 | tlpterminal.com.my | |
| 2021-12-08 | serta.com - MORE THEN 500Gb DATA LEAKED | |
| 2021-12-06 | jpbdselangor.gov.my | |
| 2021-12-05 | gaben.cz | |
| 2021-12-05 | promhotel.fr | |
| 2021-11-23 | ALPSRX.COM - MORE THEN 150GB DATA LEAKED | |
| 2021-11-23 | scotttesting.com - MORE THEN 2.5TB DATA LEAKED | |
| 2021-11-22 | reigroup.com | |
| 2021-11-22 | redsrugby.com.au - more then 300GB data leaked |
CONFIRMED ATTACKS
LV confirmed attacks: 12 verified incidents
Ransomnews has verified 12 LV incidents against named organisations, each corroborated by a public source such as a breach notification, regulatory filing or press report. The confirmed record runs from March 2021 to August 2022. France accounts for 4 of them (33%), with victims recorded in 6 countries in total. The most affected sector is food and beverage, at 4 confirmed victims. A ransom payment was publicly confirmed in 2 cases and publicly refused in 0; the outcome is unrecorded in the remaining 10. Where a figure was disclosed (2 cases), these incidents account for 5,452 exposed records.
Confirmed victims by year
Most affected sectors
Most affected countries
Verified LV incidents
| Date | Organisation | Sector | Location | Records | Ransom paid | Source |
|---|---|---|---|---|---|---|
| August 2022 | Colosseum Dental | Healthcare | Oosterhaut, Netherlands | — | Yes | Source |
| July 2022 | SEMIKRON Group | Manufacturing | Nuremberg, Germany | — | Unknown | Source |
| May 2022 | Cici Enterprises, LP | Food and Beverage | Texas, United States | 990 | Yes | Source |
| December 2021 | Promhotel | Service | Asnières-sur-Seine, France | — | Unknown | Source |
| June 2021 | Grupo La Moderna, S.A. de C.V. | Food and Beverage | Toluca, Mexico | — | Unknown | Source |
| June 2021 | Grupo Diagnóstico Aries | Healthcare | Puebla, Mexico | — | Unknown | Source |
| June 2021 | Demarne Frères | Food and Beverage | Rungis, France | — | Unknown | Source |
| June 2021 | Beck’s Shoes | Retail | California, United States | — | Unknown | Source |
| May 2021 | Alma SAS | Service | Neron, France | — | Unknown | Source |
| April 2021 | Matthew Clark Bibendum | Retail | Bristol, United Kingdom | — | Unknown | Source |
| April 2021 | Groupe REOREV | Manufacturing | Nazelles-Négron, France | — | Unknown | Source |
| March 2021 | Ken's Foods, Inc. | Food and Beverage | Massachusetts, United States | 4,462 | Unknown | Source |
Claimed vs confirmed. The figures above the fold on this page come from LV's own leak-site postings and reflect what the operation claims. The table here is a separate evidence class: incidents Ransomnews verified against a public source. Confirmed counts are lower than claimed counts by design: most victims never disclose, and some leak-site listings are recycled, exaggerated or fabricated. Records and ransom figures are shown only where a named source disclosed them. See the full ransomware statistics or the Ransomtracker dataset.