THREAT ACTOR
OROVA_
ActiveOROVA is a ransomware operator tracked through its public data-leak infrastructure. The group operates under the double-extortion model that defines the modern ransomware ecosystem: file encryption combined with the threat of stolen-data publication on a public leak site. It continues to post fresh victim claims as part of an ongoing extortion campaign.
For Ransomnews editorial coverage of OROVA, including incident write-ups, attribution notes and additional context, see the Threat Groups archive or run a site search.
Victims by year
- 2026 46
Leak site mirrors
1 mirror tracked, 1 currently reachable. These are criminal-infrastructure URLs; links are deliberately not provided.
-
mll5ddmdzgiq2siv3qnocmmqyiigfpajtc663xtf32qtp6weycyx2hyd.onionOROVA Blog snapshot · 2026-09-23 00:06
Recent victims
The 50 most recent victims claimed by OROVA. Total in the index: 46.
| Date listed | Victim | Description |
|---|---|---|
| 2026-09-20 | Siddhi Green Excellence Pvt. Ltd | Our journey started in 2001 with baby steps like – treatability studie… |
| 2026-09-20 | Euramex Management Group | Avila Real Estate, LLC is a vertically-integrated multifamily company,… |
| 2026-08-31 | ASYS Corporation | ASYS has been dedicated to providing instrument agency services for se… |
| 2026-08-31 | Fu Sheng Industrial Co., Ltd | The company was initially built from the ground up, and it overcame da… |
| 2026-08-30 | Magnolia Dental | Our practice is dedicated to providing exceptional dental services to … |
| 2026-08-30 | Country Oaks Veterinary Clinic | We were the first practice to become AAHA accredited in the area. Our … |
| 2026-08-30 | David King Architect | We are an Architectural Firm and Design and prepare plans for almost a… |
| 2026-08-30 | Woodside Ranch | Our motto is hard work and attention to detail. We are committed to gi… |
| 2026-08-30 | Stoneybrook West Master Association, Inc | At Stoneybrook West, we plan regularly scheduled group physical fitnes… |
| 2026-08-30 | Stonecrest POA | Stonecrest POA, a United States-based property owners’ association. |
| 2026-08-30 | Hilliard's Air Conditioning & Heating Inc | Our company has developed a reputation for high quality work and excel… |
| 2026-08-30 | Gemstone UK | Gemstone UK was a company that operated for over 30 years before closi… |
| 2026-08-30 | First Baptist Church of Belleview | We are a medium-sized church with an average attendance of 220 on Sund… |
| 2026-08-30 | Ganzhou Xinye Craft Co., Ltd. | Ganzhou Xinye Art and Craft Co., Ltd. is a large-scale craft gift prod… |
| 2026-08-30 | Smartsoft | Say goodbye to cumbersome and difficult-to-maintain traditional archit… |
| 2026-08-30 | DL HOLDINGS GROUP | DL Holdings is a listed main board company on the Hong Kong Stock Exch… |
| 2026-08-30 | Central Florida Civil LLC | Central Florida Civil, a leading name in underground utilities and sit… |
| 2026-08-30 | Arich Enterprise Co., Ltd. | Currently, our end customers include over 12,000 establishments, such … |
| 2026-08-30 | Bai-chi CPA Firm | Bai-chi CPA Firm is a registered Taiwanese CPA practice. |
| 2026-08-30 | South Pacific Hotel Limited | The hotel has a unique glass curtain wall and an oval building appeara… |
| 2026-08-30 | ITC Properties Group Limited | ITC Properties is an investment holding company and the Group is princ… |
| 2026-08-05 | eSysTech | Software Company URL Open https://www.esystech.com.br/ in a new tab|… |
| 2026-08-05 | ADG Healthcare | ADG Healthcare is a company that operates in the Medical Specialists i… |
| 2026-08-05 | Ultra Fame | As PCB design continues to evolve in complexity and customization, we … |
| 2026-08-05 | DBM Reflex | DBM Technology Co., Ltd. is a leading brand in electroforming mold cor… |
| 2026-08-05 | Agricultural Chemical Solutions | Agricultural Chemical Solutions, Inc. provides high-quality agricultur… |
| 2026-08-05 | SBI Manufacturing | SBI Manufacturing is a family-owned company based in Sioux Falls, SD, … |
| 2026-08-05 | Northeastern Communications & ElectricalNortheastern Communications & Electrical | Northeastern Communications & Electrical LLC, based in Middletown, Con… |
| 2026-08-05 | Apollo Office System | Since our establishment in May 1970 as an office equipment sales compa… |
| 2026-08-05 | Texas Medical Screening | Texas Medical has helped organizations deliver health screenings witho… |
| 2026-08-05 | EMPYREAN INT’L TECHNO DEVICES | Taiwan-based telecom and electronics accessories company. They special… |
| 2026-08-05 | Sc Regional Housing Authority | Government Company URL Open https://www.scrha.net in a new tab| Jun… |
| 2026-08-05 | FixIT Tek | Security Company URL Open https://fixittek.com/ in a new tab| Aug 5… |
| 2026-08-04 | Bjs Insurance & Financial | BJS Insurance Services, Inc. was established upon two underlying princ… |
| 2026-08-04 | Wisdom Oral Surgery | Wisdom Oral Surgery, located in Fair Lawn, NJ, specializes in a wide r… |
| 2026-08-04 | SURE TRAVEL COMPANY | SURE TRAVEL COMPANY LIMITED was incorporated on 24-JAN-2000 as a Priva… |
| 2026-08-04 | Cardiology Associates | Serving the community for over 45 years, Cardiology Associates of Port… |
| 2026-08-04 | Yost Home Improvements | Yost Home Improvements is a family-owned exterior remodeling and const… |
| 2026-08-04 | KINGSSON | Manufacturing Company URL Open https://www.kingsson.com.tw/ in a new… |
| 2026-08-04 | SSI HOLDING (FAR EAST) LIMITED | AIMING at streamlining all aspects of business, procuring excellent qu… |
| 2026-08-04 | Sanrio Hong Kong Co., Ltd | Retail Company URL Open https://www.sanrio.com.hk/ in a new tab| Ju… |
| 2026-08-04 | Tat Fung Textile Co., Ltd. | Tat Fung Textile Co., Ltd. Manufacturing Company URL Open https://w… |
| 2026-08-04 | Integrated Site Management | Real Estate Company URL Open https://www.ism-sc.com/ in a new tab| … |
| 2026-08-04 | Conceptual Designs, Inc. | |
| 2026-08-04 | JK Capital Management Limited | |
| 2026-08-04 | Global Friction Products, Inc |
CONFIRMED ATTACKS
Orova confirmed attacks: 1 verified incident
Ransomnews has verified 1 Orova incident against named organisations, each corroborated by a public source such as a breach notification, regulatory filing or press report. All of them fall in August 2026. Hong Kong accounts for 1 of them (100%). The most affected sector is retail, at 1 confirmed victim. Where a figure was disclosed (1 case), these incidents account for 92 exposed records.
Confirmed victims by year
Most affected sectors
Most affected countries
Verified Orova incidents
| Date | Organisation | Sector | Location | Records | Ransom paid | Source |
|---|---|---|---|---|---|---|
| August 2026 | Sanrio Hong Kong Co., Ltd. | Retail | Kowloon, Hong Kong | 92 | Unknown | Source |
Claimed vs confirmed. The figures above the fold on this page come from Orova's own leak-site postings and reflect what the operation claims. The table here is a separate evidence class: incidents Ransomnews verified against a public source. Confirmed counts are lower than claimed counts by design: most victims never disclose, and some leak-site listings are recycled, exaggerated or fabricated. Records and ransom figures are shown only where a named source disclosed them. See the full ransomware statistics or the Ransomtracker dataset.