THREAT ACTOR
MEOW_
DormantMEOW is a ransomware operator tracked through its public data-leak infrastructure. The group operates under the double-extortion model that defines the modern ransomware ecosystem: file encryption combined with the threat of stolen-data publication on a public leak site. It continues to post fresh victim claims as part of an ongoing extortion campaign.
For Ransomnews editorial coverage of MEOW, including incident write-ups, attribution notes and additional context, see the Threat Groups archive or run a site search.
Victims by year
- 2024 130
- 2023 15
Leak site mirrors
5 mirrors tracked, 0 currently reachable. These are criminal-infrastructure URLs; links are deliberately not provided.
-
meow6xanhzfci2gbkn3lmbqq7xjjufskkdfocqdngt3ltvzgqpsg5mid.onionMEOW snapshot · 2024-11-26 17:11 -
totos7fquprkecvcsl2jwy72v32glgkp2ejeqlnx5ynnxvbebgnletqd.onionsnapshot · 2024-07-16 19:31 -
ikjht3url3tvx6itf2eghtrmwlmjfywz63ymnxghwwyhflcxnqffhvid.onionsnapshot · 2024-12-11 09:24 -
mops6j3iuepvarl7ackf2itjkt4in3xkcbupnhy656byx6m6hnxkbgid.onionsnapshot · 2024-12-11 09:24 -
meowthxcf4tm3rujk4bsjaoxd2ghmjx7vi342hz6zdu3lfyeykmc4wqd.onionsnapshot · 2024-12-11 09:24
Recent victims
The 50 most recent victims claimed by MEOW. Total in the index: 145.
| Date listed | Victim | Description |
|---|---|---|
| 2024-11-19 | San Francisco Ballet | |
| 2024-11-14 | OMara Ag Equipment | |
| 2024-11-14 | Zyloware | |
| 2024-11-14 | Pine Belt Cars | |
| 2024-11-14 | DieTech North America | |
| 2024-11-14 | Cottles Asphalt Maintenance Inc | |
| 2024-11-14 | Herron Todd White | |
| 2024-11-14 | J.S.T. Espana | |
| 2024-11-14 | Karl Malone Toyota | |
| 2024-11-09 | Karman Inc | |
| 2024-11-09 | Finger Beton Unternehmensgruppe | |
| 2024-11-07 | Lexco | |
| 2024-11-07 | Equator Worldwide | |
| 2024-11-06 | Lincoln University | |
| 2024-10-31 | Houston Housing Authority | |
| 2024-10-26 | PT Transportasi Gas Indonesia | |
| 2024-10-26 | The Eye Clinic Surgicenter | |
| 2024-10-26 | Westwood Country Club | |
| 2024-10-23 | By Design LLC | |
| 2024-10-23 | Youngs Timber Builders Merchants | |
| 2024-10-23 | KEE Process | |
| 2024-10-21 | Sanglier Limited | |
| 2024-10-21 | Arango Billboard | |
| 2024-10-14 | Astero | |
| 2024-10-13 | Rocky Mountain Gastroenterology | |
| 2024-10-12 | OSG Tool | |
| 2024-10-12 | Modiin Ezrachi | |
| 2024-10-11 | Unita Turism | |
| 2024-10-10 | The Law Office of Omar O Vargas | |
| 2024-10-10 | Atlantic Coast Consulting Inc | |
| 2024-10-10 | La Futura | |
| 2024-10-10 | Barnes Cohen and Sullivan | |
| 2024-10-09 | CANEA ONE | |
| 2024-10-08 | Trinity Wholesale Distributors Inc | |
| 2024-10-08 | Advantage CDC | |
| 2024-10-08 | Maxdream | |
| 2024-10-08 | Accurate Railroad Construction Ltd | |
| 2024-10-08 | Davis Pickren Seydel and Sneed LLP | |
| 2024-10-07 | The Superior Court of California | |
| 2024-10-01 | Corantioquia | |
| 2024-09-30 | Community Hospital of Anaconda | |
| 2024-09-30 | Lee Hoffoss Injury Lawyers | |
| 2024-09-30 | MacGillivray Law | |
| 2024-09-30 | Freshstart Credit Repair | |
| 2024-09-29 | Alvan Blanch | |
| 2024-09-29 | OffRoadAction | |
| 2024-09-29 | Moeller Door and Window | |
| 2024-09-29 | SaniRent | |
| 2024-09-16 | Robson Planning Group Inc | |
| 2024-09-16 | EnviroNET Inc |
CONFIRMED ATTACKS
Meow confirmed attacks: 19 verified incidents
Ransomnews has verified 19 Meow incidents against named organisations, each corroborated by a public source such as a breach notification, regulatory filing or press report. The confirmed record runs from May 2023 to October 2024. United States accounts for 17 of them (89%), with victims recorded in 3 countries in total. The most affected sector is government, at 6 confirmed victims. A ransom payment was publicly confirmed in 0 cases and publicly refused in 4; the outcome is unrecorded in the remaining 15. Where a figure was disclosed (10 cases), these incidents account for 193,817 exposed records.
Confirmed victims by year
Most affected sectors
Most affected countries
Verified Meow incidents
| Date | Organisation | Sector | Location | Records | Ransom paid | Source |
|---|---|---|---|---|---|---|
| October 2024 | Westwood Country Club | Other | Missouri, United States | 3,203 | Unknown | Source |
| October 2024 | Unita Turism Holding S.A. | Other | Brăila, Romania | — | Unknown | Source |
| October 2024 | OSG USA, Inc. | Manufacturing | Illinois, United States | — | Unknown | Source |
| October 2024 | Superior Court of California - County of Sonoma | Government | California, United States | — | Unknown | Source |
| September 2024 | Houston Housing Authority | Government | Texas, United States | 30,210 | No | Source |
| August 2024 | Community Hospital of Anaconda | Healthcare | Montana, United States | 21,243 | Unknown | Source |
| July 2024 | Zydus Pharmaceuticals | Healthcare | New Jersey, United States | 79 | Unknown | Source |
| July 2024 | The Physical Medicine Rehabilitation Center (PMRC) | Healthcare | New Jersey, United States | 4,083 | No | Source |
| June 2024 | City of Miami Gardens | Government | Florida, United States | 2,206 | No | Source |
| June 2024 | CBIZ Benefits & Insurance Services, Inc. | Finance | Ohio, United States | 9,103 | Unknown | Source |
| June 2024 | First Commonwealth Federal Credit Union | Finance | Pennsylvania, United States | 98,809 | Unknown | Source |
| March 2024 | Complete Payroll Solutions | Finance | Massachusetts, United States | 24,344 | Unknown | Source |
| December 2023 | River Delta Unified School District | Education | California, United States | — | Unknown | Source |
| December 2023 | Tulane University | Education | Louisiana, United States | — | Unknown | Source |
| November 2023 | Lake of the Woods County Social Services | Government | Minnesota, United States | 537 | No | Source |
| November 2023 | Bladen County | Government | North Carolina, United States | — | Unknown | Source |
| November 2023 | Vanderbilt University Medical Center | Healthcare | Tennessee, United States | — | Unknown | Source |
| September 2023 | Katsky Korins LLP | Legal | New York, United States | — | Unknown | Source |
| May 2023 | Nuclebrás Equipamentos Pesados (NUCLEP) | Government | Itaguai, Brazil | — | Unknown | Source |
Claimed vs confirmed. The figures above the fold on this page come from Meow's own leak-site postings and reflect what the operation claims. The table here is a separate evidence class: incidents Ransomnews verified against a public source. Confirmed counts are lower than claimed counts by design: most victims never disclose, and some leak-site listings are recycled, exaggerated or fabricated. Records and ransom figures are shown only where a named source disclosed them. See the full ransomware statistics or the Ransomtracker dataset.