// THREAT ACTOR
MYDATA_
ActiveMYDATA is a ransomware operator tracked through its public data-leak infrastructure. The group operates under the double-extortion model that defines the modern ransomware ecosystem — file encryption combined with the threat of stolen-data publication on a public leak site — and continues to post fresh victim claims as part of an ongoing extortion campaign.
For Ransomnews editorial coverage of MYDATA — incident write-ups, attribution notes, and additional context — see the Threat Groups archive or run a site search.
Victims by year
- 2026 1
- 2025 13
- 2024 13
Leak site mirrors
5 mirrors tracked, 1 currently reachable. These are criminal-infrastructure URLs — links are deliberately not provided.
-
mydatae2d63il5oaxxangwnid5loq2qmtsol2ozr6vtb7yfm5ypzo6id.onionBlog snapshot · 2026-08-19 23:26 -
xszpovfd3q52omk5larjf4y7rziov2oee4u4amcm32wwsxc7ublmdtid.onionsnapshot · 2024-12-09 17:32 -
ot3vo3od2pajc7ymxdk6wimur7j7pgs2agvqlzyculowk3yoxzene2id.onionsnapshot · 2024-12-11 09:08 -
2id7ik6lkd3jjjjlaarr3wckrxidp3bgl2jn5nhqciouk2ehuyakdiqd.onionsnapshot · 2024-12-11 09:08 -
3v4zoso2ghne47usnhyoe4dsezmfqhfv5v5iuep4saic5nnfpc6phrad.onionsnapshot · 2025-09-16 22:32
Recent victims
The 50 most recent victims claimed by MYDATA. Total in the index: 27.
| Date listed | Victim | Description |
|---|---|---|
| 2026-02-28 | https://www.pyramisgroup.com | PYRAMIS METALLOURGIA S.A.PYRAMIS is the only producer of household el… |
| 2025-11-16 | https://www.bew.co.th | Bangkok Eagle Wings Co.,Ltd.67/14 Mu 5 Chuamsamphan Rd. Kokfad. Nongch… |
| 2025-11-03 | www.myriversidedentaloffice.com | It is dental practice devoted to restoring and enhancing the natural b… |
| 2025-11-03 | https://www.unterkofler.info | 117 GB data has stolen5611 Grossarl | Marktstr. 109+43 (0) 6414 / 2760 |
| 2025-11-03 | www.automotiveml.com | www.automotiveml.com |
| 2025-10-31 | www.verdugohillsdental.com | At Verdugo Hills Dental in Glendale, CA, our experienced team is commi… |
| 2025-10-13 | www.mercantetubos.com.br | Mangueira Indústria e Comércio de Tubos e Aços Especiais Ltda. was fou… |
| 2025-10-06 | https://www.libertydentaltown.com | Liberty Dental Care & Dentures provides general dentistry 7100 Sennet … |
| 2025-10-01 | https://www.adhunikpower.com | ~86 GB Data-Contracts-Projects-Financial data of the company -Accounts… |
| 2025-09-29 | www.sonoshowmoveis.com.br | 23 GB dataClientsProjectsFinancial documentationetc. |
| 2025-09-16 | grupozeta.com & www.grupozetajalisco.com | ~170 GB dataCiudad Juárez, México · Samalayuca, Chihuahua, Mexico · Va… |
| 2025-09-08 | nubox.com & sumasaas.com | 150 GB DATA-Contracts-Projects-Clients-Customersetc |
| 2025-09-08 | https://gazomet.pl & https://cgas.pl | ~200 GB data has been stolenClientsProjectsFinancial documentationetc. |
| 2025-09-04 | https://ipathpr.com | Integrated Pathology Services90 GB data |
| 2024-08-09 | https://www.arkworkplacerisk.co.uk | 90GB DATA-Customer data -Financial data of the company -Employee infor… |
| 2024-08-06 | https://biw-burger.de | 100GB DATAemployeesclientsdatabase and etc |
| 2024-04-24 | https://goftac.com/ firsttx.com First Texas Alliance Corp (FTAC) | https://goftac.com/ firsttx.com First Texas Alliance Corp (FTAC)… |
| 2024-04-18 | https://geodis.com | GEODIS Thai Ltd. came under attack! All SQL bases of the company are a… |
| 2024-03-10 | https://www.consorzioinnova.it | 225GB DATAemployeesclientsdatabase and etc |
| 2024-02-14 | BM Catalysts bmcatalysts.co.uk | BM Catalysts is the largest independent manufacturer of high-quality a… |
| 2024-01-26 | elandenergy.com Eland Energy | Eland Energy is an independent oil and natural gas exploration and pro… |
| 2024-01-24 | IntegrityInc.org Integrity Inc | IntegrityInc.org Integrity, Inc. is an organization that provides ho… |
| 2024-01-24 | https://www.carri.com | All important information downloaded from the https://www.carri.com se… |
| 2024-01-24 | https://www.gadotbio.com/ Gadot Biochemical Industries Ltd | Gadot Biochemical Industries LtdGBi is a leading manufacturer of food … |
| 2024-01-24 | accolade-group.com + levelwear.com +Taiwan microelectronics(CRM). | accolade-group.com + levelwear.comLevelwear is a premium sports appare… |
| 2024-01-24 | a24group.com ambition24hours.co.za | The A24Group has been operating for over 27 years, providing high-qual… |
| 2024-01-24 | https://www.mikeferry.com | We publish the database of Mike Ferry, it includes the entire accounti… |
// CONFIRMED ATTACKS
Mydata confirmed attacks: 2 verified incidents
Ransomnews has verified 2 Mydata incidents against named organisations, each corroborated by a public source such as a breach notification, regulatory filing or press report. The confirmed record runs from December 2023 to January 2024. United States accounts for 2 of them (100%). The most affected sector is service, at 2 confirmed victims. Where a figure was disclosed (2 cases), these incidents account for 18,480 exposed records.
Confirmed victims by year
Most affected sectors
Most affected countries
Verified Mydata incidents
| Date | Organisation | Sector | Location | Records | Ransom paid | Source |
|---|---|---|---|---|---|---|
| January 2024 | Eland Energy, Inc. | Service | Texas, United States | 18,237 | Unknown | Source |
| December 2023 | The Mike Ferry Organization | Service | Nevada, United States | 243 | Unknown | Source |
Claimed vs confirmed. The figures above the fold on this page come from Mydata's own leak-site postings and reflect what the operation claims. The table here is a separate evidence class: incidents Ransomnews verified against a public source. Confirmed counts are lower than claimed counts by design — most victims never disclose, and some leak-site listings are recycled, exaggerated or fabricated. Records and ransom figures are shown only where a named source disclosed them. See the full ransomware statistics or the Ransomtracker dataset.