THREAT ACTOR
THE-SEVEN-DEADLY-SINS_
ActiveTHE-SEVEN-DEADLY-SINS is a ransomware operator tracked through its public data-leak infrastructure. The group operates under the double-extortion model that defines the modern ransomware ecosystem: file encryption combined with the threat of stolen-data publication on a public leak site. It continues to post fresh victim claims as part of an ongoing extortion campaign.
For Ransomnews editorial coverage of THE-SEVEN-DEADLY-SINS, including incident write-ups, attribution notes and additional context, see the Threat Groups archive or run a site search.
Victims by year
- 2026 7
Leak site mirrors
3 mirrors tracked, 2 currently reachable. These are criminal-infrastructure URLs; links are deliberately not provided.
-
sinsp6ibw32abbcoagbjwetgm2w56u7tr4izy3xzp7ehqoenxvdd3qyd.onionThe Seven Deadly Sins | DLS snapshot · 2026-10-15 14:00 -
185.100.85.146.The Seven Deadly Sins | DLS snapshot · 2026-10-15 14:08 -
37.72.140.179.snapshot · 2026-10-15 15:30
Recent victims
The 50 most recent victims claimed by THE-SEVEN-DEADLY-SINS. Total in the index: 7.
| Date listed | Victim | Description |
|---|---|---|
| 2026-10-15 | Cradlewise Inc. | cradlewise.com Company value $26M raised · ~$14M/yr rev Rows … |
| 2026-10-15 | Hospital Sírio-Libanês | hsl.org.br Company value $750M est. Rows exfiltrated 3.5… |
| 2026-10-15 | Globeia Inc. | globeia.com Company value $2.0M est. · compliance SaaS Rows e… |
| 2026-10-15 | Verano Holdings Corp. | verano.com Company value ~$1.2B mkt cap · public MSO Rows exf… |
| 2026-10-15 | Harness Inc. | harness.io Company value ~$5B val · DevOps CI/CD Rows exfiltr… |
| 2026-10-15 | iHeartJane | iheartjane.com Company value $400M+ raised · cannabis marketpl… |
| 2026-10-15 | Canva Pty Ltd | canva.com Company value ~$40B val · design platform Rows exfi… |