THREAT ACTOR
ROYAL_
DormantRoyal was a closed, non-affiliate ransomware operation believed to be staffed by former Conti operators. Active from late 2022 through mid-2023, the group rebranded as Black Suit after the FBI and CISA published a joint advisory naming it as one of the most damaging extortion groups of 2023.
For Ransomnews editorial coverage of ROYAL, including incident write-ups, attribution notes and additional context, see the Threat Groups archive or run a site search.
200
Victims tracked
0 / 5
Active mirrors
2022-11-04
First listing
2023-07-19
Most recent
Victims by year
- 2023 123
- 2022 77
Leak site mirrors
5 mirrors tracked, 0 currently reachable. These are criminal-infrastructure URLs; links are deliberately not provided.
-
royal2xthig3ou5hd7zsliqagy6yygk2cdelaxtni2fyad6dpmpxedid.onionRoyal snapshot · 2023-10-16 14:08 -
royal4ezp7xrbakkus3oofjw6gszrohpodmdnfbe5e4w3og5sm7vb3qd.onionRoyal snapshot · 2023-10-16 16:09 -
72u5vd67xdff354hhge6wjuvsixxwo3c6bvrdlqstgmjfptpbzwrsmad.onionsnapshot · 2024-12-10 15:13 -
k6s24pz55gtvtzzpg4riv7zb74vts425bl42zrpmice5ud3a65itj6ad.onionsnapshot · 2024-12-10 15:13 -
yef4xoqj2jq554rqetf2ikmpdtewdlbnx5xrtjtjqaotvfw77ipb6pad.onionsnapshot · 2024-12-10 15:14
Recent victims
The 50 most recent victims claimed by ROYAL. Total in the index: 200.
| Date listed | Victim | Description |
|---|---|---|
| 2023-07-19 | Braintree Public Schools | Braintree Public Schools is an independent public school district whic… |
| 2023-06-11 | Tachi-S Engineering USA | Global Seat System CreatorAt Tachi-S, we help automotive manufacturers… |
| 2023-06-09 | PENNCREST School District | PENNCREST School District provides resources and opportunities that ch… |
| 2023-05-26 | AFG Holdings | AFG Holdings, Inc. is a fully integrated OEM providing differentiated … |
| 2023-05-26 | Volt | Volt Information Sciences, Inc. provides staffing and information tech… |
| 2023-05-26 | Colrich | From South Africa to Southern California, the ColRich story is a decad… |
| 2023-05-26 | Haworth Tompkins | Haworth Tompkins is a Stirling Prize-winning architectural studio with… |
| 2023-05-26 | Grange Packing Solutions | In April 2021 Speciality consortium completed the final stage of the t… |
| 2023-05-26 | Groupe Sovitrat Interim and Recrutement | Groupe Sovitrat Interim & Recrutement is a company that operates in th… |
| 2023-05-26 | BM Precision | B & M Precision, Inc. is capable of producing any part made from stain… |
| 2023-05-26 | DirectViz Solutions | Directviz Solutions (DVS) provides the information technology and serv… |
| 2023-05-26 | The Best Connection | Headquartered in Bromsgrove, United Kingdom, The Best Connection is a … |
| 2023-05-26 | Mitutoyo | Mitutoyo is one of the world's leading manufacturers of high-quality p… |
| 2023-05-23 | Coos Bay | Coos Bay is a city located in Coos County, Oregon, where the Coos Rive… |
| 2023-05-23 | Dotcom Distribution | Dotcom Distribution is a fulfillment and logistics services provider f… |
| 2023-05-22 | Westside | |
| 2023-05-22 | Morris Hospital | |
| 2023-05-22 | Trinity Exploration and Production | Trinity Exploration & Production plc, an independent oil company, enga… |
| 2023-05-22 | Agostini Insurance Brokers | Agostini Insurance Brokers Limited is the longest standing private sec… |
| 2023-05-22 | TA Supply | T&A Supply Company, Inc. distributes various flooring products in the … |
| 2023-05-22 | Utah-Yamas Controls | Reports \ Drawings \ Users Folders |
| 2023-05-22 | Atlas Commodities | HR \ Accounting \ Banking |
| 2023-05-19 | City of Dallas | “There is still no indication that data from residents, vendors or emp… |
| 2023-05-18 | NASHUA SCHOOL DISTRICT | The Nashua, New Hampshire School District is a city of 88,000 resident… |
| 2023-05-15 | Parker Drilling | Parker Drilling is a drilling solutions company that provides support … |
| 2023-05-05 | Meade Tractor | |
| 2023-05-04 | Midwest Truck | Midwest Truck and Auto Parts, Inc. sources and supplies various compon… |
| 2023-05-03 | Southern West Virginia Community and Technical College | Southern West Virginia Community and Technical College is a public com… |
| 2023-05-03 | ZBW News | ZBW's disciplinary repository EconStor provides a large collection of … |
| 2023-05-02 | Great Falls College of Technology | Great Falls College Montana State University is a public community col… |
| 2023-05-02 | Montana State University | Montana State University, located in the city of Bozeman, is an educat… |
| 2023-05-01 | EdisonLearning | EdisonLearning provides education management solutions, alternative ed… |
| 2023-04-25 | Encompass Group | Encompass was founded in 1999 and headquartered in McDonough, Georgia,… |
| 2023-04-24 | Lake Dallas Independent School District | Lake Dallas Independent School District has a vibrant, growing student… |
| 2023-04-24 | MW Components | MW Components is focused on accelerating the entire process of deliver… |
| 2023-04-24 | Clarke County Hospital | |
| 2023-04-22 | GKS Hydraulik | GKS Hydraulik is a company that operates in the Wholesale industry. It… |
| 2023-04-18 | Mainstream Engineering | |
| 2023-04-18 | City of Ballwin | |
| 2023-04-17 | Swanson Group | Founded in 1951, Swanson Group sells and manufactures wood products an… |
| 2023-04-17 | Moon Capital | Moon Capital Management is a company that specializes in global invest… |
| 2023-04-16 | Talon Outdoor | Talon Outdoor is the leading global independent Out of Home (OOH) medi… |
| 2023-04-16 | Dataram | Founded in 1967 and backed by more than 50 years of technology leaders… |
| 2023-04-12 | einhaus-gruppe | Services from a single source - since 2003 The Einhaus Group GmbH is … |
| 2023-04-10 | Stanley Electric U.S. | Stanley Electric US is a manufacturer of motorcycle and automotive lig… |
| 2023-04-10 | Nature Path Foods | Nature's Path Foods was founded in 1985 in Richmond, Canada. It is a f… |
| 2023-04-10 | Big Ass Fans | Big Ass Fans is a fans, light and controls manufacturer for different … |
| 2023-04-10 | Tom Duffy Company | Commercial & Residential ConstructionFounded in 1956, Tom Duffy Compan… |
| 2023-04-10 | Alvaria | Business Intelligence (BI) SoftwareAlvaria was founded through the mer… |
| 2023-04-07 | Beghelli USA | Beghelli USA is a provider of emergency lighting products. We have wor… |
CONFIRMED ATTACKS
Royal confirmed attacks: 54 verified incidents
Ransomnews has verified 54 Royal incidents against named organisations, each corroborated by a public source such as a breach notification, regulatory filing or press report. The confirmed record runs from September 2022 to May 2023. United States accounts for 40 of them (74%), with victims recorded in 9 countries in total. The most affected sector is education, at 13 confirmed victims. A ransom payment was publicly confirmed in 3 cases and publicly refused in 9; the outcome is unrecorded in the remaining 42. Where a figure was disclosed (27 cases), these incidents account for 5,500,139 exposed records.
54Verified incidents
9Countries
2022–2023Active range
25%Paid, where outcome known
Confirmed victims by year
Most affected sectors
Most affected countries
Verified Royal incidents
| Date | Organisation | Sector | Location | Records | Ransom paid | Source |
|---|---|---|---|---|---|---|
| May 2023 | City of Dallas | Government | Texas, United States | 30,546 | Unknown | Source |
| April 2023 | Leibniz-Informationszentrum Wirtschaft (ZBW) | Education | Kiel, Germany | — | No | Source |
| April 2023 | Parker Wellbore | Service | Texas, United States | — | Unknown | Source |
| April 2023 | EdisonLearning | Education | Florida, United States | 23,922 | Unknown | Source |
| April 2023 | Morris Hospital & Healthcare Centers | Healthcare | Illinois, United States | 248,943 | Unknown | Source |
| April 2023 | Clarke County Hospital | Healthcare | Iowa, United States | 28,003 | Unknown | Source |
| April 2023 | Lake Dallas Independent School District | Education | Texas, United States | 21,982 | Unknown | Source |
| April 2023 | Curry County | Government | Oregon, United States | — | Unknown | Source |
| April 2023 | City of Nashua School District | Education | New Hampshire, United States | 9,829 | Unknown | Source |
| April 2023 | Penncrest School District | Education | Pennsylvania, United States | — | Unknown | Source |
| April 2023 | Montana State University (Great Falls College of Technology) | Education | Montana, United States | — | Unknown | Source |
| March 2023 | MERS Missouri Goodwill Industries | Other | Missouri, United States | 70,678 | Unknown | Source |
| March 2023 | Nature's Path Foods | Food and Beverage | Richmond, Canada | — | Unknown | Source |
| March 2023 | Helmholtz-Zentrum Berlin für Materialien und Energie | Other | Munich, Germany | — | Unknown | Source |
| March 2023 | MW Components | Manufacturing | North Carolina, United States | 18,107 | Unknown | Source |
| March 2023 | Alvaria, Inc. | Technology | Massachusetts, United States | 51,858 | Unknown | Source |
| March 2023 | Swanson Group, Inc. | Manufacturing | Oregon, United States | — | Unknown | Source |
| March 2023 | City of Ballwin | Government | Missouri, United States | — | Unknown | Source |
| March 2023 | Wymondham College | Education | Wymondham, United Kingdom | — | Unknown | Source |
| March 2023 | Savannah Technical College | Education | Georgia, United States | — | Unknown | Source |
| March 2023 | Shoreline Community College | Education | Washington, United States | 400,000 | Yes | Source |
| March 2023 | Einhaus Gruppe | Finance | Hamm, Germany | — | Yes | Source |
| February 2023 | Benning Construction Company | Construction | Georgia, United States | — | Unknown | Source |
| February 2023 | Liberty Lines Transit, Inc. | Transportation | New York, United States | — | No | Source |
| February 2023 | Ville de Lille | Government | Lille, France | — | No | Source |
| January 2023 | Messer Cutting Systems, Inc. | Manufacturing | Wisconsin, United States | 852 | Unknown | Source |
| January 2023 | Tucson Unified School District | Education | Arizona, United States | 28,948 | No | Source |
| December 2022 | T&A Supply Company, Inc. | Retail | Washington, United States | — | Unknown | Source |
| December 2022 | Builders Mutual Insurance Company, Inc. | Finance | North Carolina, United States | 64,761 | Unknown | Source |
| December 2022 | AAA Energy Service Co. | Service | Maine, United States | 184 | No | Source |
| December 2022 | Livingston International. Inc. | Service | Toronto, Canada | 5,199 | Unknown | Source |
| December 2022 | Duplicator Sales & Service, Inc. | Retail | Kentucky, United States | — | Unknown | Source |
| December 2022 | Reventics LLC | Healthcare | Colorado, United States | 4,212,823 | Unknown | Source |
| December 2022 | Samuels & Son Seafood | Food and Beverage | Pennsylvania, United States | — | Unknown | Source |
| December 2022 | Inforlandia | Technology | Lisbon, Portugal | 0 | No | Source |
| December 2022 | Huron-Superior Catholic District School Board | Education | Marie, Canada | — | Unknown | Source |
| December 2022 | Aegea | Utilities | São Paulo, Brazil | — | Unknown | Source |
| December 2022 | Queensland University of Technology | Education | Brisbane, Australia | 11,405 | Unknown | Source |
| December 2022 | Intrado | Utilities | Nebraska, United States | 147 | Unknown | Source |
| November 2022 | Leo Hamel Fine Jewelers | Retail | California, United States | 517 | Unknown | Source |
| November 2022 | Trussbilt LLC | Manufacturing | South Dakota, United States | 1,026 | Unknown | Source |
| November 2022 | Silverstone Circuit | Other | Towcester, United Kingdom | — | Unknown | Source |
| November 2022 | Vincent Fister | Service | Kentucky, United States | 465 | Unknown | Source |
| November 2022 | Comune di Macerata | Government | Macerata, Italy | — | No | Source |
| November 2022 | Comune di Torre del Greco | Government | Naples, Italy | — | No | Source |
| November 2022 | Iowa Public Broadcasting System | Government | Iowa, United States | — | Unknown | Source |
| November 2022 | Dallas Central Appraisal District | Government | Texas, United States | — | Yes | Source |
| November 2022 | Adams-Friendship Area School District | Education | Wisconsin, United States | 1,366 | Unknown | Source |
| October 2022 | All Season Movers, Inc. | Service | New Jersey, United States | — | Unknown | Source |
| October 2022 | Virginia Farm Bureau | Finance | Virginia, United States | 261,187 | Unknown | Source |
| October 2022 | PGT Innovations | Manufacturing | United States, United States | 6,020 | No | Source |
| October 2022 | Lamtec Corporation | Manufacturing | Pennsylvania, United States | 747 | Unknown | Source |
| September 2022 | Miller Milling Company | Food and Beverage | Minnesota, United States | 624 | Unknown | Source |
| September 2022 | InfoCision Management Corporation | Service | Ohio, United States | — | Unknown | Source |
Claimed vs confirmed. The figures above the fold on this page come from Royal's own leak-site postings and reflect what the operation claims. The table here is a separate evidence class: incidents Ransomnews verified against a public source. Confirmed counts are lower than claimed counts by design: most victims never disclose, and some leak-site listings are recycled, exaggerated or fabricated. Records and ransom figures are shown only where a named source disclosed them. See the full ransomware statistics or the Ransomtracker dataset.