Close Menu
  • Home
  • News
  • Security
  • Privacy
  • Cybercrime
    • Threat Groups
    • Ransomware
    • Explainers
    • Stealer Logs
  • AI
  • OSINT
  • Tools
    • Ransomtracker
    • Stealercheck
    • FortiBleed Checker
    • Site Check
  • Data
    • Ransomware statistics
    • Ransom payment rate
    • Breach verification
  • Newsletter
  • About Us
Facebook X (Twitter) Instagram Threads
Ransomnews
  • Home
  • News
  • Security
  • Privacy
  • Cybercrime
    • Threat Groups
    • Ransomware
    • Explainers
    • Stealer Logs
  • AI
  • OSINT
  • Tools
    • Ransomtracker
    • Stealercheck
    • FortiBleed Checker
    • Site Check
  • Data
    • Ransomware statistics
    • Ransom payment rate
    • Breach verification
  • Newsletter
  • About Us
Facebook X (Twitter) LinkedIn
Ransomnews

MAZE · Threat actor profile

THREAT ACTOR

MAZE_

Active

MAZE is a ransomware operator tracked through its public data-leak infrastructure. The group operates under the double-extortion model that defines the modern ransomware ecosystem: file encryption combined with the threat of stolen-data publication on a public leak site. It continues to post fresh victim claims as part of an ongoing extortion campaign.

For Ransomnews editorial coverage of MAZE, including incident write-ups, attribution notes and additional context, see the Threat Groups archive or run a site search.

0 Victims tracked
1 / 7 Active mirrors
— First listing
— Most recent

Leak site mirrors

7 mirrors tracked, 1 currently reachable. These are criminal-infrastructure URLs; links are deliberately not provided.

  • xfr3txoorcyy7tikjgj5dk3rvo3vsrpyaxnclyohkbfp3h277ap4tiad.onion snapshot · 2021-09-08 00:06
  • aoacugmutagkwctu.onion snapshot · 2024-12-10 05:08
  • mazedecrypt.top snapshot · 2026-09-23 02:20
  • dnspexdevfbct2agyu3oxrmhm4ggf4ec6iwpnlb3kwb2rigrtuz3sayd.onion snapshot · 2025-07-08 18:05
  • xjypo5vzgmo7jca6b322dnqbsdnp3amd24ybx26x5nxbusccjkm4pwid.onion snapshot · 2025-07-08 18:05
  • Newsmaze.top snapshot · 2025-07-08 18:07
  • mazenews.top snapshot · 2025-07-08 18:07

CONFIRMED ATTACKS

Maze confirmed attacks: 170 verified incidents

Ransomnews has verified 170 Maze incidents against named organisations, each corroborated by a public source such as a breach notification, regulatory filing or press report. The confirmed record runs from August 2019 to June 2021. United States accounts for 84 of them (49%), with victims recorded in 31 countries in total. The most affected sector is manufacturing, at 30 confirmed victims. A ransom payment was publicly confirmed in 1 case and publicly refused in 21; the outcome is unrecorded in the remaining 148. Where a figure was disclosed (37 cases), these incidents account for 12,194,482 exposed records.

170Verified incidents
31Countries
2019–2021Active range
5%Paid, where outcome known

Confirmed victims by year

  • 201916
  • 2020147
  • 20217

Most affected sectors

  • Manufacturing30
  • Healthcare22
  • Service21
  • Retail13
  • Finance13
  • Utilities11
  • Technology11
  • Transportation9

Most affected countries

  • United States84
  • Canada12
  • Italy10
  • France10
  • Germany8
  • United Kingdom6
  • Brazil4
  • Australia4

Verified Maze incidents (100 most recent of 170)

DateOrganisationSector LocationRecordsRansom paidSource
June 2021 Smith Group Service Michigan, United States — Unknown Source
June 2021 Seats Inc Manufacturing Wisconsin, United States — Unknown Source
June 2021 Daily Thermetrics Corporation Manufacturing Texas, United States — Unknown Source
May 2021 Southwestern Wire Manufacturing Oklahoma, United States — Unknown Source
May 2021 Optimara Retail Tennessee, United States — Unknown Source
May 2021 Moseley Construction Group, Inc. Construction Virginia, United States — Unknown Source
May 2021 Koller Craft LLC Manufacturing Alabama, United States 44 Unknown Source
October 2020 WHDH-TV Other Massachusetts, United States 775 Unknown Source
September 2020 WPT Nonwovens Manufacturing Kentucky, United States — Unknown Source
September 2020 Toledo Public Schools Education Ohio, United States 66,280 Unknown Source
September 2020 Sincera Reproductive Medicine (Abington Reproductive Medicine) Healthcare Pennsylvania, United States 37,989 Unknown Source
September 2020 Vinnemeier Textil Retail Rietberg, Germany — Unknown Source
September 2020 Vibac Group S.p.a. Manufacturing Ticineto, Italy — Unknown Source
September 2020 Tortora Guido Srl Service Castel San Giorgio, Italy — Unknown Source
September 2020 Moto, Inc., FKG Oil Company dba Moto and MotoMart Convenience Stores, and Gia's Pizza Utilities Illinois, United States 17,545 Unknown Source
September 2020 Sands Fridge Lines Transportation Forrestfield, Australia — Unknown Source
September 2020 Royal Media Services Other Nairobi, Kenya — Unknown Source
September 2020 Humco Healthcare Texas, United States — Unknown Source
September 2020 KUHNLE-TOURS GmbH Service Rechlin, Germany — Unknown Source
September 2020 Indian River Transport Ltd Transportation Langley, Canada — Unknown Source
September 2020 Fairfax County Public Schools Education Virginia, United States 172,128 Unknown Source
September 2020 Handelshof Stendal GmbH Retail Stendal, Germany — Unknown Source
September 2020 Gsr Srl Manufacturing Calolziocorte, Italy — Unknown Source
September 2020 Groupe Interway Technology Vitrolles, France — Unknown Source
September 2020 E.R. Snell Contractor, Inc. Construction Georgia, United States — No Source
September 2020 Ghantoot Group Construction Abu Dhabi, United Arab Emirates — Unknown Source
September 2020 Fondazione Arena di Verona Other Verona, Italy — Unknown Source
September 2020 Cornet Vincent Ségurel Legal Nantes, France — Unknown Source
September 2020 Bruschi S.p.A Manufacturing Mendosio, Italy — Unknown Source
September 2020 Biraghi S.p.A Food and Beverage Cavallermaggiore, Italy — Unknown Source
September 2020 AppliChem GmbH Manufacturing Darmstadt, Germany — Unknown Source
September 2020 Bruce L. Boros, M.D., P.A. DBA Advanced Urgent Care Healthcare Florida, United States 58,823 No Source
September 2020 Guillevin International Co. Retail Ontario, Canada 1,500 Unknown Source
September 2020 Artech, LLC Service New Jersey, United States — Unknown Source
September 2020 Arizona Asthma and Allergy Institute Healthcare Arizona, United States 70,372 Unknown Source
August 2020 Clean Harbors, Inc. Utilities Massachusetts, United States 772 No Source
August 2020 Stylex Seating Manufacturing New Jersey, United States 2,062 Unknown Source
August 2020 Schmidt Electric Company Utilities Texas, United States 3,523 Unknown Source
August 2020 Tuckers Solicitors Legal Manchester, United Kingdom — No Source
August 2020 TRACTO-TECHNIK GmbH & Co. KG Manufacturing Lennestadt, Germany — Unknown Source
August 2020 Sogou Inc. Technology Beijing, China — Unknown Source
August 2020 SK Hynix Manufacturing Icheon-Si, South Korea — Unknown Source
August 2020 Scienter Technologies(pte) Ltd. Technology Colombo, Sri Lanka — Unknown Source
August 2020 Regis Healthcare Healthcare Armadale, Australia — Unknown Source
August 2020 Metropolitan Health Corporate Healthcare Die Hoewes, South Africa — Unknown Source
August 2020 Léon Grosse Construction Aix-les-Bains, France — Unknown Source
August 2020 Laboratoires Expanscience Healthcare Courbevoie, France — Unknown Source
August 2020 Instituto Costarricense de Acueductos y Alcantarillados Government San José, Costa Rica — Unknown Source
August 2020 Holy-Dis Technology Colombes, France — Unknown Source
August 2020 Hoa Sen Group Manufacturing Phú Nhuận, Vietnam — Unknown Source
August 2020 Fuel Intelligent Transport Transportation Montreal, Canada — Unknown Source
August 2020 Certitude Healthcare London, United Kingdom — Unknown Source
August 2020 Brennercom Spa Utilities Bolzano, Italy — Unknown Source
August 2020 Arabian Industries Manufacturing Muscat, Oman — Unknown Source
August 2020 AMA Freight Transportation Hamburg, Germany — Unknown Source
August 2020 Clark County School District Education Nevada, United States 44,139 No Source
July 2020 Ventura Orthopedics Healthcare California, United States — No Source
July 2020 United Memorial Medical Center Healthcare Texas, United States — Unknown Source
July 2020 TSL Company Holdings, Ltd Transportation Nebraska, United States 340 Unknown Source
July 2020 X-FAB Silicon Foundries SE Manufacturing Erfurt, Germany — Unknown Source
July 2020 Walkers Shortbread Food and Beverage Aberlour, United Kingdom — Unknown Source
July 2020 Unilac SA Manufacturing Buenos Aires, Argentina — Unknown Source
July 2020 Thai Beverage Public Company Limited (Thai Bev) Food and Beverage Bangkok, Thailand — Unknown Source
July 2020 Tatematsu Mold Works Co.,Ltd. Manufacturing Inazawa, Japan — Unknown Source
July 2020 Strata Plus Service Sydney, Australia — Unknown Source
July 2020 Lectra Technology Paris, France — Unknown Source
July 2020 Karmsund Maritime Offshore Supply AS Manufacturing Kopervik, Norway — Unknown Source
July 2020 Jacitara Construction Indaiatuba, Brazil — Unknown Source
July 2020 Information Connectivity Solutions Limited Utilities Lekki, Nigeria — Unknown Source
July 2020 Engineering Consultants Group Construction Nasr, Egypt — Unknown Source
July 2020 Egypt Yellow Pages Online Service Cairo, Egypt — Unknown Source
July 2020 Bazinet Taylor Food and Beverage Montreal, Canada — Unknown Source
July 2020 BDL Capital Management Finance Paris, France — Unknown Source
July 2020 Canon, U.S.A., Inc. Manufacturing New York, United States 41,968 Unknown Source
July 2020 Atlanta Computer Group, Inc. Technology Georgia, United States — Unknown Source
June 2020 Xerox Holdings Corporation Technology Connecticut, United States — No Source
June 2020 WIX (Filters) Manufacturing North Carolina, United States — Unknown Source
June 2020 VT San Antonio Aerospace (ST Engineering) Service Texas, United States 4,392 Unknown Source
June 2020 United Enertech Manufacturing Tennessee, United States — Unknown Source
June 2020 Smoky Mountain Systems, Inc Technology North Carolina, United States — Unknown Source
June 2020 WorldNet Telecommunications, LLC Utilities Guaynabo, Puerto Rico — Unknown Source
June 2020 Readerlink Distribution Services Retail Illinois, United States 4,932 Unknown Source
June 2020 ST Engineering Group Service Singapore, Singapore — Unknown Source
June 2020 Midwest Fresh Food and Beverage Indiana, United States — Unknown Source
June 2020 Salini Costruttori S.p.A. Construction Milan, Italy — Unknown Source
June 2020 Mark's Plumbing Parts Retail Texas, United States — Unknown Source
June 2020 Provincial Electricity Authority Government Bangkok, Thailand — Unknown Source
June 2020 National Highways Authority of India Government Delhi, India — Unknown Source
June 2020 Threadstone Advisors LLP Finance New York, United States — Unknown Source
June 2020 LG Electronics Manufacturing Seoul, South Korea — Unknown Source
June 2020 J.W. Smith Customs Broker Ltd. Service Ontario, Canada — Unknown Source
June 2020 Innotech-Execaire Aviation Group Service Dorval, Canada — Unknown Source
June 2020 Faxon Machining Inc Manufacturing Ohio, United States — Unknown Source
June 2020 Domingos Martins Government Domingos Martins, Brazil — Unknown Source
June 2020 Critical Control Energy Services Service Calgary, Canada — Unknown Source
June 2020 Bossini Enterprises Limited Retail Hong Kong, Hong Kong — Unknown Source
June 2020 Groupe IGREC Finance Paris, France — Unknown Source
June 2020 CSA Group Service New York, United States — Unknown Source
June 2020 Collabera, Inc. Service New Jersey, United States 72,594 Unknown Source
June 2020 Club Fitness Other Missouri, United States 4,345 Unknown Source

Claimed vs confirmed. The figures above the fold on this page come from Maze's own leak-site postings and reflect what the operation claims. The table here is a separate evidence class: incidents Ransomnews verified against a public source. Confirmed counts are lower than claimed counts by design: most victims never disclose, and some leak-site listings are recycled, exaggerated or fabricated. Records and ransom figures are shown only where a named source disclosed them. See the full ransomware statistics or the Ransomtracker dataset.

← Back to Ransomtracker

Statistics on this page are computed by Ransomnews from a live leak-site monitoring feed. Numbers update every ten minutes. Operator-written victim descriptions are truncated and shown in snippet form only. Source data: RansomLook (CC BY 4.0), aggregated and adapted by Ransomnews.

The Ransomnews Monthly

What leaked, what held up

One email a month: the datasets we verified, and the ones that fell apart under scrutiny.

Double opt-in. We store your email, signup time, and IP for consent records (GDPR Art. 7). See our privacy policy.

Free tool

How does your own site score?

Forty passive checks on TLS, security headers, email spoofing and privacy. A grade out of 100 in about fifteen seconds.

No signup. Nothing installed. We only request what your site already serves publicly.

Free tool

Were you in a leak?

Check whether an email address has surfaced in infostealer logs. No signup, no data stored.

Run StealerCheck

Live data

Ransomtracker

Victims as they are posted to ransomware leak sites, tracked continuously and checked against the claims.

Open the tracker

9,613 confirmed attacks tracked

Facebook X (Twitter) LinkedIn
© 2026 Ransomnews.com

Type above and press Enter to search. Press Esc to cancel.

Cookies on Ransomnews

We use strictly-necessary cookies to run the site and may use first-party analytics to understand which articles are read. Some pages contain affiliate links; when you click one, the affiliate network sets cookies on the merchant's domain to attribute the referral. See the Cookie Policy and Affiliate Disclosure for detail.

RANSOMNEWS.COM

Tracking the criminal infrastructure of the internet.

Independent coverage of ransomware, breach economics, threat actors, privacy, AI security, and the open-source investigation toolkit.

Topics

  • News
  • Security
  • Privacy
  • Cybercrime
  • AI
  • OSINT
  • Threat Groups
  • Stealer Logs
  • Ransomtracker
  • Stealercheck
  • FortiBleed Checker
  • Site Check

Site

  • About Us
  • Editorial Team
  • Contact
  • Tip Line
  • Editorial

Legal

  • Privacy Policy
  • Terms of Service
  • Cookie Policy
  • Funding & Independence
  • RSS Feed
© 2026 Ransomnews.com · Tracking the criminal infrastructure of the internet.