THREAT ACTOR
MAZE_
ActiveMAZE is a ransomware operator tracked through its public data-leak infrastructure. The group operates under the double-extortion model that defines the modern ransomware ecosystem: file encryption combined with the threat of stolen-data publication on a public leak site. It continues to post fresh victim claims as part of an ongoing extortion campaign.
For Ransomnews editorial coverage of MAZE, including incident write-ups, attribution notes and additional context, see the Threat Groups archive or run a site search.
Leak site mirrors
7 mirrors tracked, 1 currently reachable. These are criminal-infrastructure URLs; links are deliberately not provided.
-
xfr3txoorcyy7tikjgj5dk3rvo3vsrpyaxnclyohkbfp3h277ap4tiad.onionsnapshot · 2021-09-08 00:06 -
aoacugmutagkwctu.onionsnapshot · 2024-12-10 05:08 -
mazedecrypt.topsnapshot · 2026-09-23 02:20 -
dnspexdevfbct2agyu3oxrmhm4ggf4ec6iwpnlb3kwb2rigrtuz3sayd.onionsnapshot · 2025-07-08 18:05 -
xjypo5vzgmo7jca6b322dnqbsdnp3amd24ybx26x5nxbusccjkm4pwid.onionsnapshot · 2025-07-08 18:05 -
Newsmaze.topsnapshot · 2025-07-08 18:07 -
mazenews.topsnapshot · 2025-07-08 18:07
CONFIRMED ATTACKS
Maze confirmed attacks: 170 verified incidents
Ransomnews has verified 170 Maze incidents against named organisations, each corroborated by a public source such as a breach notification, regulatory filing or press report. The confirmed record runs from August 2019 to June 2021. United States accounts for 84 of them (49%), with victims recorded in 31 countries in total. The most affected sector is manufacturing, at 30 confirmed victims. A ransom payment was publicly confirmed in 1 case and publicly refused in 21; the outcome is unrecorded in the remaining 148. Where a figure was disclosed (37 cases), these incidents account for 12,194,482 exposed records.
Confirmed victims by year
Most affected sectors
Most affected countries
Verified Maze incidents (100 most recent of 170)
| Date | Organisation | Sector | Location | Records | Ransom paid | Source |
|---|---|---|---|---|---|---|
| June 2021 | Smith Group | Service | Michigan, United States | — | Unknown | Source |
| June 2021 | Seats Inc | Manufacturing | Wisconsin, United States | — | Unknown | Source |
| June 2021 | Daily Thermetrics Corporation | Manufacturing | Texas, United States | — | Unknown | Source |
| May 2021 | Southwestern Wire | Manufacturing | Oklahoma, United States | — | Unknown | Source |
| May 2021 | Optimara | Retail | Tennessee, United States | — | Unknown | Source |
| May 2021 | Moseley Construction Group, Inc. | Construction | Virginia, United States | — | Unknown | Source |
| May 2021 | Koller Craft LLC | Manufacturing | Alabama, United States | 44 | Unknown | Source |
| October 2020 | WHDH-TV | Other | Massachusetts, United States | 775 | Unknown | Source |
| September 2020 | WPT Nonwovens | Manufacturing | Kentucky, United States | — | Unknown | Source |
| September 2020 | Toledo Public Schools | Education | Ohio, United States | 66,280 | Unknown | Source |
| September 2020 | Sincera Reproductive Medicine (Abington Reproductive Medicine) | Healthcare | Pennsylvania, United States | 37,989 | Unknown | Source |
| September 2020 | Vinnemeier Textil | Retail | Rietberg, Germany | — | Unknown | Source |
| September 2020 | Vibac Group S.p.a. | Manufacturing | Ticineto, Italy | — | Unknown | Source |
| September 2020 | Tortora Guido Srl | Service | Castel San Giorgio, Italy | — | Unknown | Source |
| September 2020 | Moto, Inc., FKG Oil Company dba Moto and MotoMart Convenience Stores, and Gia's Pizza | Utilities | Illinois, United States | 17,545 | Unknown | Source |
| September 2020 | Sands Fridge Lines | Transportation | Forrestfield, Australia | — | Unknown | Source |
| September 2020 | Royal Media Services | Other | Nairobi, Kenya | — | Unknown | Source |
| September 2020 | Humco | Healthcare | Texas, United States | — | Unknown | Source |
| September 2020 | KUHNLE-TOURS GmbH | Service | Rechlin, Germany | — | Unknown | Source |
| September 2020 | Indian River Transport Ltd | Transportation | Langley, Canada | — | Unknown | Source |
| September 2020 | Fairfax County Public Schools | Education | Virginia, United States | 172,128 | Unknown | Source |
| September 2020 | Handelshof Stendal GmbH | Retail | Stendal, Germany | — | Unknown | Source |
| September 2020 | Gsr Srl | Manufacturing | Calolziocorte, Italy | — | Unknown | Source |
| September 2020 | Groupe Interway | Technology | Vitrolles, France | — | Unknown | Source |
| September 2020 | E.R. Snell Contractor, Inc. | Construction | Georgia, United States | — | No | Source |
| September 2020 | Ghantoot Group | Construction | Abu Dhabi, United Arab Emirates | — | Unknown | Source |
| September 2020 | Fondazione Arena di Verona | Other | Verona, Italy | — | Unknown | Source |
| September 2020 | Cornet Vincent Ségurel | Legal | Nantes, France | — | Unknown | Source |
| September 2020 | Bruschi S.p.A | Manufacturing | Mendosio, Italy | — | Unknown | Source |
| September 2020 | Biraghi S.p.A | Food and Beverage | Cavallermaggiore, Italy | — | Unknown | Source |
| September 2020 | AppliChem GmbH | Manufacturing | Darmstadt, Germany | — | Unknown | Source |
| September 2020 | Bruce L. Boros, M.D., P.A. DBA Advanced Urgent Care | Healthcare | Florida, United States | 58,823 | No | Source |
| September 2020 | Guillevin International Co. | Retail | Ontario, Canada | 1,500 | Unknown | Source |
| September 2020 | Artech, LLC | Service | New Jersey, United States | — | Unknown | Source |
| September 2020 | Arizona Asthma and Allergy Institute | Healthcare | Arizona, United States | 70,372 | Unknown | Source |
| August 2020 | Clean Harbors, Inc. | Utilities | Massachusetts, United States | 772 | No | Source |
| August 2020 | Stylex Seating | Manufacturing | New Jersey, United States | 2,062 | Unknown | Source |
| August 2020 | Schmidt Electric Company | Utilities | Texas, United States | 3,523 | Unknown | Source |
| August 2020 | Tuckers Solicitors | Legal | Manchester, United Kingdom | — | No | Source |
| August 2020 | TRACTO-TECHNIK GmbH & Co. KG | Manufacturing | Lennestadt, Germany | — | Unknown | Source |
| August 2020 | Sogou Inc. | Technology | Beijing, China | — | Unknown | Source |
| August 2020 | SK Hynix | Manufacturing | Icheon-Si, South Korea | — | Unknown | Source |
| August 2020 | Scienter Technologies(pte) Ltd. | Technology | Colombo, Sri Lanka | — | Unknown | Source |
| August 2020 | Regis Healthcare | Healthcare | Armadale, Australia | — | Unknown | Source |
| August 2020 | Metropolitan Health Corporate | Healthcare | Die Hoewes, South Africa | — | Unknown | Source |
| August 2020 | Léon Grosse | Construction | Aix-les-Bains, France | — | Unknown | Source |
| August 2020 | Laboratoires Expanscience | Healthcare | Courbevoie, France | — | Unknown | Source |
| August 2020 | Instituto Costarricense de Acueductos y Alcantarillados | Government | San José, Costa Rica | — | Unknown | Source |
| August 2020 | Holy-Dis | Technology | Colombes, France | — | Unknown | Source |
| August 2020 | Hoa Sen Group | Manufacturing | Phú Nhuận, Vietnam | — | Unknown | Source |
| August 2020 | Fuel Intelligent Transport | Transportation | Montreal, Canada | — | Unknown | Source |
| August 2020 | Certitude | Healthcare | London, United Kingdom | — | Unknown | Source |
| August 2020 | Brennercom Spa | Utilities | Bolzano, Italy | — | Unknown | Source |
| August 2020 | Arabian Industries | Manufacturing | Muscat, Oman | — | Unknown | Source |
| August 2020 | AMA Freight | Transportation | Hamburg, Germany | — | Unknown | Source |
| August 2020 | Clark County School District | Education | Nevada, United States | 44,139 | No | Source |
| July 2020 | Ventura Orthopedics | Healthcare | California, United States | — | No | Source |
| July 2020 | United Memorial Medical Center | Healthcare | Texas, United States | — | Unknown | Source |
| July 2020 | TSL Company Holdings, Ltd | Transportation | Nebraska, United States | 340 | Unknown | Source |
| July 2020 | X-FAB Silicon Foundries SE | Manufacturing | Erfurt, Germany | — | Unknown | Source |
| July 2020 | Walkers Shortbread | Food and Beverage | Aberlour, United Kingdom | — | Unknown | Source |
| July 2020 | Unilac SA | Manufacturing | Buenos Aires, Argentina | — | Unknown | Source |
| July 2020 | Thai Beverage Public Company Limited (Thai Bev) | Food and Beverage | Bangkok, Thailand | — | Unknown | Source |
| July 2020 | Tatematsu Mold Works Co.,Ltd. | Manufacturing | Inazawa, Japan | — | Unknown | Source |
| July 2020 | Strata Plus | Service | Sydney, Australia | — | Unknown | Source |
| July 2020 | Lectra | Technology | Paris, France | — | Unknown | Source |
| July 2020 | Karmsund Maritime Offshore Supply AS | Manufacturing | Kopervik, Norway | — | Unknown | Source |
| July 2020 | Jacitara | Construction | Indaiatuba, Brazil | — | Unknown | Source |
| July 2020 | Information Connectivity Solutions Limited | Utilities | Lekki, Nigeria | — | Unknown | Source |
| July 2020 | Engineering Consultants Group | Construction | Nasr, Egypt | — | Unknown | Source |
| July 2020 | Egypt Yellow Pages Online | Service | Cairo, Egypt | — | Unknown | Source |
| July 2020 | Bazinet Taylor | Food and Beverage | Montreal, Canada | — | Unknown | Source |
| July 2020 | BDL Capital Management | Finance | Paris, France | — | Unknown | Source |
| July 2020 | Canon, U.S.A., Inc. | Manufacturing | New York, United States | 41,968 | Unknown | Source |
| July 2020 | Atlanta Computer Group, Inc. | Technology | Georgia, United States | — | Unknown | Source |
| June 2020 | Xerox Holdings Corporation | Technology | Connecticut, United States | — | No | Source |
| June 2020 | WIX (Filters) | Manufacturing | North Carolina, United States | — | Unknown | Source |
| June 2020 | VT San Antonio Aerospace (ST Engineering) | Service | Texas, United States | 4,392 | Unknown | Source |
| June 2020 | United Enertech | Manufacturing | Tennessee, United States | — | Unknown | Source |
| June 2020 | Smoky Mountain Systems, Inc | Technology | North Carolina, United States | — | Unknown | Source |
| June 2020 | WorldNet Telecommunications, LLC | Utilities | Guaynabo, Puerto Rico | — | Unknown | Source |
| June 2020 | Readerlink Distribution Services | Retail | Illinois, United States | 4,932 | Unknown | Source |
| June 2020 | ST Engineering Group | Service | Singapore, Singapore | — | Unknown | Source |
| June 2020 | Midwest Fresh | Food and Beverage | Indiana, United States | — | Unknown | Source |
| June 2020 | Salini Costruttori S.p.A. | Construction | Milan, Italy | — | Unknown | Source |
| June 2020 | Mark's Plumbing Parts | Retail | Texas, United States | — | Unknown | Source |
| June 2020 | Provincial Electricity Authority | Government | Bangkok, Thailand | — | Unknown | Source |
| June 2020 | National Highways Authority of India | Government | Delhi, India | — | Unknown | Source |
| June 2020 | Threadstone Advisors LLP | Finance | New York, United States | — | Unknown | Source |
| June 2020 | LG Electronics | Manufacturing | Seoul, South Korea | — | Unknown | Source |
| June 2020 | J.W. Smith Customs Broker Ltd. | Service | Ontario, Canada | — | Unknown | Source |
| June 2020 | Innotech-Execaire Aviation Group | Service | Dorval, Canada | — | Unknown | Source |
| June 2020 | Faxon Machining Inc | Manufacturing | Ohio, United States | — | Unknown | Source |
| June 2020 | Domingos Martins | Government | Domingos Martins, Brazil | — | Unknown | Source |
| June 2020 | Critical Control Energy Services | Service | Calgary, Canada | — | Unknown | Source |
| June 2020 | Bossini Enterprises Limited | Retail | Hong Kong, Hong Kong | — | Unknown | Source |
| June 2020 | Groupe IGREC | Finance | Paris, France | — | Unknown | Source |
| June 2020 | CSA Group | Service | New York, United States | — | Unknown | Source |
| June 2020 | Collabera, Inc. | Service | New Jersey, United States | 72,594 | Unknown | Source |
| June 2020 | Club Fitness | Other | Missouri, United States | 4,345 | Unknown | Source |
Claimed vs confirmed. The figures above the fold on this page come from Maze's own leak-site postings and reflect what the operation claims. The table here is a separate evidence class: incidents Ransomnews verified against a public source. Confirmed counts are lower than claimed counts by design: most victims never disclose, and some leak-site listings are recycled, exaggerated or fabricated. Records and ransom figures are shown only where a named source disclosed them. See the full ransomware statistics or the Ransomtracker dataset.