Close Menu
  • Home
  • News
  • Security
  • Privacy
  • Cybercrime
    • Threat Groups
    • Ransomware
    • Explainers
    • Stealer Logs
  • AI
  • OSINT
  • Tools
    • Ransomtracker
    • Stealercheck
    • FortiBleed Checker
    • Site Check
  • Data
    • Ransomware statistics
    • Ransom payment rate
    • Breach verification
  • Newsletter
  • About Us
Facebook X (Twitter) Instagram Threads
Ransomnews
  • Home
  • News
  • Security
  • Privacy
  • Cybercrime
    • Threat Groups
    • Ransomware
    • Explainers
    • Stealer Logs
  • AI
  • OSINT
  • Tools
    • Ransomtracker
    • Stealercheck
    • FortiBleed Checker
    • Site Check
  • Data
    • Ransomware statistics
    • Ransom payment rate
    • Breach verification
  • Newsletter
  • About Us
Facebook X (Twitter) LinkedIn
Ransomnews

NOESCAPE · Threat actor profile

THREAT ACTOR

NOESCAPE_

Dormant

NOESCAPE is a ransomware operator tracked through its public data-leak infrastructure. The group operates under the double-extortion model that defines the modern ransomware ecosystem: file encryption combined with the threat of stolen-data publication on a public leak site. It continues to post fresh victim claims as part of an ongoing extortion campaign.

For Ransomnews editorial coverage of NOESCAPE, including incident write-ups, attribution notes and additional context, see the Threat Groups archive or run a site search.

157 Victims tracked
0 / 3 Active mirrors
2023-06-12 First listing
2023-12-04 Most recent

Victims by year

  • 2023 157

Leak site mirrors

3 mirrors tracked, 0 currently reachable. These are criminal-infrastructure URLs; links are deliberately not provided.

  • noescaperjh3gg6oy7rck57fiefyuzmj7kmvojxgvlmwd5pdzizrb7ad.onion NoEscape snapshot · 2023-12-09 13:04
  • noescapemsqxvizdxyl7f7rmg5cdjwp33pg2wpmiaaibilb4btwzttad.onion NoEscape snapshot · 2023-12-09 13:04
  • noescapemsqxvizdxyl7f7rmg5cdjwp33pg2wpmiaaibilb4btwzttad.onion NoEscape snapshot · 2023-12-09 13:04

Recent victims

The 50 most recent victims claimed by NOESCAPE. Total in the index: 157.

Date listed Victim Description
2023-12-04 UF Resources These UF Resources services include providing consolidated resources i…
2023-12-04 Nida Corp Nida Corporation understands that a critical element of learning a tec…
2023-12-01 Grupo PRIDES Grupo Prides is an Information and Communication Technology (ICT) comp…
2023-11-30 Science History Institute The Science History Institute collects, preserves, interprets, and sha…
2023-11-30 Verdecora Verdecora is an evolution, an advance, a new concept, a project in con…
2023-11-24 TALENTUM Temporal SAS TALENTUM is an EMPLOYMENT SERVICE company, with approval from the Mini…
2023-11-21 Enware Australia Pty Ltd Since 1937, Enware has been supplying specialist plumbing and safety e…
2023-11-21 Rc Moore Inc Headquartered in Scarborough, ME., R.C. Moore has created a substantia…
2023-11-18 PruittHealth A family-owned organization for more than 50 years, PruittHealth provi…
2023-11-17 Kwik Industries, Inc. Kwik Industries provides both full-service and self-service options fo…
2023-11-14 Southeastern Orthopaedic Specialists Southeastern Orthopaedic Specialists, P.A. is an organization made up …
2023-11-14 Lander County Convention & Tourism Authority Are you planning a weekend trip or a long getaway in Lander County, NV…
2023-11-14 Carespring We engage our patients on a personal level. Every patient in our commu…
2023-11-13 Putzel Electrical Contractors Inc Putzel offers a rich history of experience in commercial electrical co…
2023-11-13 Mpr Lifts MPR LIFTS is the leading lift company in Sweden and it has nationwide …
2023-11-11 PAR Group Co Par Plumbing started four generations ago with a small shop in Brookly…
2023-11-09 Action Santé Travail Action Santé Travail has a multidisciplinary team coordinated by your …
2023-11-09 Ezi Floor Products From a modest start as a floor sanding and installation company EFP is…
2023-11-09 Jeffcoat Mechanical Services Inc Jeffcoat Mechanical Services Is your source for all your heating, vent…
2023-11-08 Orion Township Public Library Designed to serve a population of 30,000 and house a collection of 100…
2023-11-08 Avianor Group Avianor Group was founded in 1995. This company provides aircraft main…
2023-11-08 OE Federal Credit Union Built on a foundation of union pride, OE Federal is the country’s larg…
2023-11-03 labor force Inc Labor Force® is an employment and staffing agency that offers clients …
2023-11-03 Agile Display Solutions Agile Display Solutions builds high-quality professional LCD displays …
2023-11-02 Schwob AG Schwob AG consciously relies on Switzerland as a location. In this way…
2023-11-02 R N Wooler & Co Ltd R N Wooler & Co Ltd was founded in 1985 by Managing Director, Norman W…
2023-11-01 Vinovalie Vinovalie union of the 4 cooperative cellars of Técou, Fronton, Rabast…
2023-10-31 Dynametal Technologies Inc Dynametal Technologies Inc. is an employee owned company and we take g…
2023-10-31 Spolzino Termosanitari Srl The quality of Spolzino products and the satisfaction of our customers…
2023-10-31 PR Clinical Positioned as the first High Complexity Reference Laboratory in Puerto…
2023-10-31 McKeag & Co McKeag & Co are a long established legal practice located in Newcastle…
2023-10-31 STRUMET Since the beginning of its operations in 1995, the basic area of activ…
2023-10-31 St Raphael'S Hospice St Raphael's Hospice provides palliative care services for the 401,000…
2023-10-31 Two Saints Two Saints services are located in Berkshire, Hampshire, Isle of Wight…
2023-10-27 Corinium Carpets Ltd Making a decision on flooring for your home can be daunting. At Corini…
2023-10-27 City of Chevilly-Larue Chevilly-Larue, located 4 km south of Paris in the Val-de-Marne depart…
2023-10-27 Fushimitsu Gumi Co., Ltd. Fushimitsu Gumi Co., Ltd.The company's network was successfully encryp…
2023-10-27 Addison Electronique Ltd Addison Electronique Ltd The company's network was successfully encryp…
2023-10-27 Garac GARAC prepares young people to meet the technological and commercial c…
2023-10-27 Beijer Ref Ibérica Beijer Ref Ibérica. Our more than 150 years of history make us the lar…
2023-10-27 Grupo SCA SCA Group is a national consulting, solutions and advice firm present …
2023-10-27 John L Lowery & Associates Inc John L. Lowery & Associates, Inc. was organized in 1964 to provide ver…
2023-10-27 FTRIA CO., LTD. FTRIA CO., LTD. continue to meet the needs of our customers with the r…
2023-10-27 SoftVerk Co LTD SoftVerk Co LTDThe company's network was successfully encrypted and co…
2023-10-27 Influence Communication Influence Communication offers monitoring and aggregating services, as…
2023-10-27 RS Logistics Ltd RS Logistics Limited (RS) is a fast growing customer-oriented firm in …
2023-10-27 IINA BA Inc Iina Ba Inc is a company that operates in the Civil Engineering indust…
2023-10-27 Pasquale Bruni Pasquale Bruni is a company that operates in the Luxury Goods & Jewelr…
2023-10-27 Gordon Muir & Foley LLP As a designated essential service under Governor Lamont’s Executive Or…
2023-10-27 Qi Group Today, the QI Group, headquartered in Hong Kong, is a diversified multi…

CONFIRMED ATTACKS

NoEscape confirmed attacks: 32 verified incidents

Ransomnews has verified 32 NoEscape incidents against named organisations, each corroborated by a public source such as a breach notification, regulatory filing or press report. The confirmed record runs from May 2023 to November 2023. United States accounts for 13 of them (41%), with victims recorded in 11 countries in total. The most affected sector is government, at 7 confirmed victims. A ransom payment was publicly confirmed in 1 case and publicly refused in 8; the outcome is unrecorded in the remaining 23. Where a figure was disclosed (12 cases), these incidents account for 425,262 exposed records.

32Verified incidents
11Countries
2023–2023Active range
11%Paid, where outcome known

Confirmed victims by year

  • 202332

Most affected sectors

  • Government7
  • Healthcare7
  • Other5
  • Service3
  • Education3
  • Food and Beverage2
  • Manufacturing2
  • Construction1

Most affected countries

  • United States13
  • France5
  • Japan2
  • Australia2
  • Italy2
  • Belgium2
  • Canada2
  • Germany1

Verified NoEscape incidents

DateOrganisationSector LocationRecordsRansom paidSource
November 2023 PruittHealth Healthcare Georgia, United States 56,045 Unknown Source
November 2023 Kwik Industries, Inc. Service Texas, United States 765 Unknown Source
October 2023 OE Federal Credit Union Finance California, United States 6,237 Unknown Source
October 2023 Carespring Health Care Management LLC Healthcare Ohio, United States 76,719 Unknown Source
October 2023 Southeastern Orthopaedic Specialists Healthcare North Carolina, United States 35,533 Unknown Source
October 2023 Vinovalie Food and Beverage Tarn, France — No Source
October 2023 Ordine degli Psicologi della Lombardia Government Milan, Italy — No Source
October 2023 Orion Township Public Library Government Michigan, United States — Unknown Source
October 2023 LDLC ASVEL Other Villeurbanne, France — Unknown Source
October 2023 Centre du Sablon Other Laval, Canada — Unknown Source
September 2023 Powerhouse Retail Services, LLC Service Texas, United States 7,856 Unknown Source
September 2023 Bellsonica Co, Ltd. Manufacturing Kosai, Japan 1,035 Unknown Source
September 2023 Fondation Vincent de Paul Healthcare Strasbourg, France — Unknown Source
September 2023 Center for Urban Community Services Other New York, United States 38,000 Unknown Source
September 2023 La SCARA (Société Coopérative Agricole de la Région d’Arcis-sur-Aube) Food and Beverage Arcis-sur-Aube, France — No Source
September 2023 Mulkay Cardiology Consultants at Holy Name Medical Center, P.C. Healthcare New Jersey, United States 79,582 Unknown Source
September 2023 Empresa Pública de Gestión Ambiental de Castilla-La Mancha (GEACAM) Government Cuenca, Spain — No Source
September 2023 International Joint Commission Government Ottawa, Canada — Unknown Source
September 2023 Altmann Dental GmbH & Co. KG Retail Bamberg, Germany — Unknown Source
August 2023 Seattle Housing Authority Government Washington, United States 82,745 Unknown Source
August 2023 Ftria Co. Ltd. Construction Kawasaki, Japan — Unknown Source
August 2023 Contact 121 Pty Ltd Service Adelaide, Australia 12,745 Unknown Source
August 2023 City of Victorville Government California, United States — Unknown Source
August 2023 au Domain Administration Ltd. (auDA) Other Melbourne, Australia — Unknown Source
August 2023 Instituto de Tecnologia em Fármacos (Farmanguinhos/Fiocruz) Healthcare Rio de Janeiro, Brazil — Unknown Source
August 2023 Northwave Manufacturing Pederobba, Italy — Unknown Source
August 2023 Fondation de Verdeil Education Lausanne, Switzerland — No Source
August 2023 Bundesrechtsanwaltskammer (Federal Bar Association) Other Brussels, Belgium — Unknown Source
July 2023 Lower Yukon School District Education Alaska, United States — No Source
July 2023 Ville de Chevilly-Larue Government Chevilly-Larue, France — No Source
June 2023 Hawaii Community College Education Hawaii, United States 28,000 Yes Source
May 2023 Centre Hospitalier Régional Sambre et Meuse (CHRSM) Healthcare Namur, Belgium — No Source

Claimed vs confirmed. The figures above the fold on this page come from NoEscape's own leak-site postings and reflect what the operation claims. The table here is a separate evidence class: incidents Ransomnews verified against a public source. Confirmed counts are lower than claimed counts by design: most victims never disclose, and some leak-site listings are recycled, exaggerated or fabricated. Records and ransom figures are shown only where a named source disclosed them. See the full ransomware statistics or the Ransomtracker dataset.

← Back to Ransomtracker

Statistics on this page are computed by Ransomnews from a live leak-site monitoring feed. Numbers update every ten minutes. Operator-written victim descriptions are truncated and shown in snippet form only. Source data: RansomLook (CC BY 4.0), aggregated and adapted by Ransomnews.

The Ransomnews Monthly

What leaked, what held up

One email a month: the datasets we verified, and the ones that fell apart under scrutiny.

Double opt-in. We store your email, signup time, and IP for consent records (GDPR Art. 7). See our privacy policy.

Free tool

How does your own site score?

Forty passive checks on TLS, security headers, email spoofing and privacy. A grade out of 100 in about fifteen seconds.

No signup. Nothing installed. We only request what your site already serves publicly.

Free tool

Were you in a leak?

Check whether an email address has surfaced in infostealer logs. No signup, no data stored.

Run StealerCheck

Live data

Ransomtracker

Victims as they are posted to ransomware leak sites, tracked continuously and checked against the claims.

Open the tracker

9,613 confirmed attacks tracked

Facebook X (Twitter) LinkedIn
© 2026 Ransomnews.com

Type above and press Enter to search. Press Esc to cancel.

Cookies on Ransomnews

We use strictly-necessary cookies to run the site and may use first-party analytics to understand which articles are read. Some pages contain affiliate links; when you click one, the affiliate network sets cookies on the merchant's domain to attribute the referral. See the Cookie Policy and Affiliate Disclosure for detail.

RANSOMNEWS.COM

Tracking the criminal infrastructure of the internet.

Independent coverage of ransomware, breach economics, threat actors, privacy, AI security, and the open-source investigation toolkit.

Topics

  • News
  • Security
  • Privacy
  • Cybercrime
  • AI
  • OSINT
  • Threat Groups
  • Stealer Logs
  • Ransomtracker
  • Stealercheck
  • FortiBleed Checker
  • Site Check

Site

  • About Us
  • Editorial Team
  • Contact
  • Tip Line
  • Editorial

Legal

  • Privacy Policy
  • Terms of Service
  • Cookie Policy
  • Funding & Independence
  • RSS Feed
© 2026 Ransomnews.com · Tracking the criminal infrastructure of the internet.