THREAT ACTOR
SINOBI_
DormantSINOBI is a ransomware operator tracked through its public data-leak infrastructure. The group operates under the double-extortion model that defines the modern ransomware ecosystem: file encryption combined with the threat of stolen-data publication on a public leak site. It continues to post fresh victim claims as part of an ongoing extortion campaign.
For Ransomnews editorial coverage of SINOBI, including incident write-ups, attribution notes and additional context, see the Threat Groups archive or run a site search.
259
Victims tracked
0 / 21
Active mirrors
2025-07-05
First listing
2026-05-08
Most recent
Victims by year
- 2026 86
- 2025 173
Leak site mirrors
21 mirrors tracked, 0 currently reachable. These are criminal-infrastructure URLs; links are deliberately not provided.
-
sinobi6ftrg27d6g4sjdt65malds6cfptlnjyw52rskakqjda6uvb7yd.onionSinobi snapshot · 2026-05-26 10:13 -
sinobi6rlec6f2bgn6rd72xo7hvds4a5ajiu2if4oub2sut7fg3gomqd.onionSinobi snapshot · 2026-05-26 10:02 -
sinobi6ywgmmvg2gj2yygkb2hxbimaxpqkyk27wti5zjwhfcldhackid.onionSinobi snapshot · 2026-05-26 10:03 -
sinobi7l3wet3uqn4cagjiessuomv75aw3bvgah4jpj43od7xndb7kad.onionSinobi snapshot · 2026-05-26 10:11 -
sinobi7sukclb3ygtorysbtrodgdbnrmgbhov45rwzipubbzhiu5jvqd.onionSinobi snapshot · 2026-05-26 10:29 -
sinobi23i75c3znmqqxxyuzqvhxnjsar7actgvc4nqeuhgcn5yvz3zqd.onionSinobi snapshot · 2026-05-26 10:15 -
sinobia6mw6ht2wcdjphessyzpy7ph2y4dyqbd74bgobgju4ybytmkqd.onionSinobi snapshot · 2026-05-26 10:21 -
sinobi7yuoppj76qnkwiobwfc2qve2xkv2ckvzyyjblwd7ucpptl62ad.onionSinobi snapshot · 2026-05-25 23:15 -
sinobi57mfegeov2naiufkidlkpze263jtbldokimfjqmk2mye6s4yqd.onionSinobi snapshot · 2026-05-26 10:22 -
sinobibdvzohujkliofkxiz3ueyedfh6bed21zjz2z6pafw5jeoptsid.onionsnapshot · 2025-07-05 14:33 -
sinobibjqytwqxjw24zuerqcjyd3hoow6zia7z6kzvwawivamu7nqayd.onionSinobi snapshot · 2026-05-26 10:24 -
sinobicrh73ongfuxjajmlyyhalvkhlcgttxkxaxz3gvsgdcgf76uiqd.onionSinobi snapshot · 2026-05-26 09:26 -
sinobidxodgt4jsr3t1mf2rr4okjvvwfp5gh31rqxnowomcx62ssrhqd.onionsnapshot · 2025-07-05 14:33 -
sinobiea4snfqtkc43paumapo40i7vxcy5vjzfoalunsnvzehozfhpyd.onionsnapshot · 2025-07-05 14:34 -
blog.sinobi.us.orgSinobi snapshot · 2026-04-25 04:25 -
chat.sinobi.us.orgSinobi snapshot · 2026-04-25 04:07 -
cdn.sinobi.us.orgsnapshot · 2026-04-25 04:32 -
sinobihmkmncjubqin5u44vso3z2zongdmmtgle7eglskjmfb6u74rad.onionsnapshot · 2026-05-26 10:02 -
sinobibdvzohujkliofkxiz3ueyedfh6bed2lzjz2z6pafw5jeoptsid.onionSinobi snapshot · 2026-05-26 03:30 -
sinobidxodgt4jsr3tlmf2rr4okjvvwfp5gh3lrqxnowomcx62ssrhqd.onionSinobi snapshot · 2026-05-26 10:01 -
sinobiea4snfqtkc43paumapo4oi7vxcy5vjzfoalunsnvzehozfhpyd.onionSinobi snapshot · 2026-05-26 10:17
Recent victims
The 50 most recent victims claimed by SINOBI. Total in the index: 259.
| Date listed | Victim | Description |
|---|---|---|
| 2026-05-08 | Neurotrials Research Inc | Founded in 1997, NeuroTrials Research is an outpatient and inpatient r… |
| 2026-05-06 | Scales and Associates Inc | Scales & Associates, Inc. is a firm that specializes in engineering an… |
| 2026-05-05 | Bay State Land Services | Bay State Land Services Inc is a company that operates in the Architec… |
| 2026-05-05 | Unre3d | Unre3d is a company that operates in the Information & Document Manage… |
| 2026-05-05 | Positiwise Infotech Pvt | Positiwise Software Pvt Ltd is a software development company based in… |
| 2026-05-05 | Celeris Networks | Celeris Networks is a business IT support provider based in Knoxville,… |
| 2026-03-19 | Elgi Electric & Industries | LGI Electric is a leading provider of innovative industrial electric m… |
| 2026-03-19 | Amerinational Management Services (AMS) | Amerinational Management Services, Inc. specializes in providing compr… |
| 2026-03-18 | Summa Energy | Summa Energy Fuel Services specializes in providing 24/7 on-site fueli… |
| 2026-03-18 | Interpack Northwest | Interpack Northwest Frozen Foods operates from Bainbridge Island, Wash… |
| 2026-03-17 | Eco Sound Builders | EcoSound Builders, LLC specializes in crafting high-performance custom… |
| 2026-03-17 | McAfee Tool & Die | McAfee Tool & Die, Inc. is a company specializing in the manufacturing… |
| 2026-03-17 | Teco | Teco HVAC, LLC is a full-service HVAC and plumbing company serving the… |
| 2026-02-20 | Gentegra | GenTegra specializes in innovative solutions for the stabilization and… |
| 2026-02-20 | Graymatter | GrayMatter (graymatter.co.in) is a Bangalore-based IT company founded … |
| 2026-02-19 | Iblesoft | Iblesoft Inc. is a full service software development, global resource … |
| 2026-02-19 | Saltech Systems | Saltech Systems is a technology company specializing in application de… |
| 2026-02-19 | Electriduct | Electriduct specializes in cable management solutions, offering a wide… |
| 2026-02-19 | Mayfair Hotels & Resorts | MAYFAIR Hotels & Resorts is a premier, award-winning luxury hospitalit… |
| 2026-02-13 | Halcyon Technologies | About Halcyon Technologies: Halcyon, an ISO certified company with Mic… |
| 2026-02-11 | BCS ProSoft | BCS ProSoft is a technology consulting firm that specializes in busine… |
| 2026-02-10 | The Sundher Group | Sundher Group is a family-owned Canadian lumber manufacturer based in … |
| 2026-02-10 | Venesco | Venesco specializes in providing premium administrative, healthcare, a… |
| 2026-02-10 | Snyder Diamonds | Founded in 1949 with locations in Santa Monica, Pasadena and North Hol… |
| 2026-02-10 | Halcyontek | Halcyon is the industrys first dedicated, adaptive security platform t… |
| 2026-02-06 | Accountnet | Accountnet Inc provides educational webinars, newsletters, quarterly s… |
| 2026-02-06 | Penn Fencing | Penn Fencing, Inc. specializes in the fabrication and sales of fencing… |
| 2026-02-05 | Exco | Exco is a network of accounting, consulting, and audit firms that simp… |
| 2026-02-05 | InfoMontreal | InfoMontréal provides business services. Contact them directly for mor… |
| 2026-02-05 | Western Slope Iron & Supply | Western Slope Iron & Supply, Inc. is a certified steel fabricator oper… |
| 2026-02-05 | Reilly Foam Corp | Reilly Foam Corporation manufactures fabricated foam components for se… |
| 2026-01-29 | LeMatic | LeMatic is a leader in automated baking technology, offering innovatio… |
| 2026-01-28 | Impressico Business Solutions | Impressico Digital provide 360° IT solutions to their clients varying … |
| 2026-01-28 | Affordable Housing Management Overview Metrics | Affordable Housing Management, Inc. (AHM, Inc.) is a nonprofit organiz… |
| 2026-01-28 | Active Green + Ross | Active Green + Ross operates a chain of Complete Tire & Auto Centres a… |
| 2026-01-28 | JP Research | JP Research, Inc. is a leading US statistical and engineering research… |
| 2026-01-28 | FIAMPACK | FIAMPACK is a custom contract packager specializing in packaging solut… |
| 2026-01-27 | Gallagher Transport International | Gallagher Transport International is a leading customs broker speciali… |
| 2026-01-27 | Ashcraft | The Ashcraft Company is a HVAC manufacturers' representative based in … |
| 2026-01-27 | Morison Insurance Brokers | Morison Insurance Brokers is a leading insurance provider in Ontario, … |
| 2026-01-23 | West Cary Group | West Cary Group is a creative agency that specializes in providing com… |
| 2026-01-22 | OnSight | ONSIGHT is a leading production facilities company, specializing in se… |
| 2026-01-21 | ShuBee | ShuBee is a company providing care wear to service companies. It offer… |
| 2026-01-21 | Bayside Dental | Are you looking for a dentist in Rowlett, TX, 75088 near Mesquite? Bay… |
| 2026-01-21 | Asian Heart Institute | Asian Heart Institute (AHI) is a leading cardiac care hospital located… |
| 2026-01-21 | MODERNISTIC GARDEN & PET SUPPLY LTD | Modernistic Garden and Pet Supply offers a wide range of products for … |
| 2026-01-20 | Pivotal Healthcare | Pivotal Healthcare is a company that operates in the Hospitals & Physi… |
| 2026-01-20 | Geoplin | Geoplin is a leading supplier of natural gas in Slovenia, providing re… |
| 2026-01-19 | Bray Whaler | Bray Whaler Inc operates as a comprehensive construction management fi… |
| 2026-01-19 | Channel Products | Channel Products specializes in inventing and manufacturing component … |
CONFIRMED ATTACKS
Sinobi confirmed attacks: 20 verified incidents
Ransomnews has verified 20 Sinobi incidents against named organisations, each corroborated by a public source such as a breach notification, regulatory filing or press report. The confirmed record runs from July 2025 to January 2026. United States accounts for 19 of them (95%), with victims recorded in 2 countries in total. The most affected sector is healthcare, at 9 confirmed victims. Where a figure was disclosed (15 cases), these incidents account for 182,300 exposed records.
20Verified incidents
2Countries
2025–2026Active range
—Paid, where outcome known
Confirmed victims by year
Most affected sectors
Most affected countries
Verified Sinobi incidents
| Date | Organisation | Sector | Location | Records | Ransom paid | Source |
|---|---|---|---|---|---|---|
| January 2026 | Bayside Dental | Healthcare | Texas, United States | 9,687 | Unknown | Source |
| January 2026 | Geoplin d.o.o. | Other | Ljubljana, Slovenia | — | Unknown | Source |
| January 2026 | Pecan Tree Dental | Healthcare | Texas, United States | 13,300 | Unknown | Source |
| December 2025 | Buena Vista Management Services, LLC dba Windward Life Care | Healthcare | California, United States | — | Unknown | Source |
| December 2025 | Title Guaranty Company of Lewis County | Service | Washington, United States | — | Unknown | Source |
| November 2025 | Central Texas MHMR Center dba Center for Life Resources | Healthcare | Texas, United States | 10,037 | Unknown | Source |
| November 2025 | Jeffrey W. Krol & Associates, Ltd. | Finance | Illinois, United States | 3,067 | Unknown | Source |
| October 2025 | Heywood Healthcare | Healthcare | Massachusetts, United States | 7,603 | Unknown | Source |
| September 2025 | Law Offices of James Scott Farrin | Legal | North Carolina, United States | 29,008 | Unknown | Source |
| September 2025 | Public Relations Society of America (PRSA) | Service | New York, United States | 873 | Unknown | Source |
| September 2025 | MTI America, LLC | Healthcare | Florida, United States | 1,555 | Unknown | Source |
| September 2025 | Ever Care Corporation d/b/a Right at Home | Healthcare | Nebraska, United States | 882 | Unknown | Source |
| August 2025 | Stewart Home & School | Education | Kentucky, United States | 3,677 | Unknown | Source |
| August 2025 | Melwood, Inc. | Service | Maryland, United States | 10,975 | Unknown | Source |
| August 2025 | Central Jersey Medical Center, Inc. | Healthcare | New Jersey, United States | 88,000 | Unknown | Source |
| August 2025 | Pittsburgh Gastroenterology Associates | Healthcare | Pennsylvania, United States | — | Unknown | Source |
| July 2025 | Hygrade Metal Moulding Manufacturing Corp. (Hygrade Components) | Manufacturing | Pennsylvania, United States | 761 | Unknown | Source |
| July 2025 | ECM Consultants, Inc. | Service | Louisiana, United States | 819 | Unknown | Source |
| July 2025 | TELACU Property Management, Inc. | Other | California, United States | — | Unknown | Source |
| July 2025 | Main Electric Supply Company, LLC | Retail | California, United States | 2,056 | Unknown | Source |
Claimed vs confirmed. The figures above the fold on this page come from Sinobi's own leak-site postings and reflect what the operation claims. The table here is a separate evidence class: incidents Ransomnews verified against a public source. Confirmed counts are lower than claimed counts by design: most victims never disclose, and some leak-site listings are recycled, exaggerated or fabricated. Records and ransom figures are shown only where a named source disclosed them. See the full ransomware statistics or the Ransomtracker dataset.