// THREAT ACTOR

SIEGEDSEC_

Dormant

SIEGEDSEC is a ransomware operator tracked through its public data-leak infrastructure. The group operates under the double-extortion model that defines the modern ransomware ecosystem — file encryption combined with the threat of stolen-data publication on a public leak site — and continues to post fresh victim claims as part of an ongoing extortion campaign.

For Ransomnews editorial coverage of SIEGEDSEC — incident write-ups, attribution notes, and additional context — see the Threat Groups archive or run a site search.

19 Victims tracked

0 / 1 Active mirrors

2023-12-09 First listing

2023-12-09 Most recent

Victims by year

2023 19

Leak site mirrors

1 mirror tracked, 0 currently reachable. These are criminal-infrastructure URLs — links are deliberately not provided.

nv5p2mmpctvyqdyyi5zwh4gnifq2uxdx4etvnmaheqlrw6ordrjwxryd.onion snapshot · 2024-03-25 17:13

Recent victims

The 50 most recent victims claimed by SIEGEDSEC. Total in the index: 19.

Date listed	Victim	Description
2023-12-09	OpTransRights - 2	healthcare
2023-12-09	Telerad	healthcare
2023-12-09	Technical University of Mombasa	kenyan education
2023-12-09	National Office for centralized procurement	romanian government
2023-12-09	Portland Government & United states government	governmental
2023-12-09	Staples	retail
2023-12-09	Deqing County	chinese citizens
2023-12-09	Colombian National Registry	corrective measures, police
2023-12-09	Idaho National Laboratory	nuclear research, nuclear power, power plant
2023-12-09	Operation Israel - 1	government sector, supermarket chain, airline
2023-12-09	Cellcom	telecommunications
2023-12-09	Bezeq	telecommunications, fixed-line, mobile telephony
2023-12-09	GNSS, BACNet & ModBus	navigation satellite system, building automation and control systems, …
2023-12-09	Operation Jane	industrial control systems, government
2023-12-09	Atlassian	software developers, project managers, it service management
2023-12-09	Faroe Islands	tourism, travel guides, accommodation
2023-12-09	NATO Leak - 2	intergovernmental, military alliance
2023-12-09	NATO Leak - 1	intergovernmental, military alliance
2023-12-09	Grupo Televisa	mass media, entertainment, media corporation

← Back to Ransomtracker

Statistics on this page are computed by Ransomnews from a live leak-site monitoring feed. Numbers update every ten minutes. Operator-written victim descriptions are truncated and shown in snippet form only. Source data: RansomLook (CC BY 4.0), aggregated and adapted by Ransomnews.