// THREAT ACTOR

TITAN_

Active

TITAN is a ransomware operator tracked through its public data-leak infrastructure. The group operates under the double-extortion model that defines the modern ransomware ecosystem — file encryption combined with the threat of stolen-data publication on a public leak site — and continues to post fresh victim claims as part of an ongoing extortion campaign.

For Ransomnews editorial coverage of TITAN — incident write-ups, attribution notes, and additional context — see the Threat Groups archive or run a site search.

15 Victims tracked

3 / 3 Active mirrors

2026-05-19 First listing

2026-07-22 Most recent

Victims by year

2026 15

Leak site mirrors

3 mirrors tracked, 3 currently reachable. These are criminal-infrastructure URLs — links are deliberately not provided.

x4bccxlsmjsxlnnf3ocvndlshgfkagzytpqmsjnlfykceumnw6i4hkqd.onion TITAN snapshot · 2026-08-06 21:26
titanblog.org TITAN snapshot · 2026-08-06 21:18
x4bccxlsmjsxlnnf3ocvndlshgfkagzytpqmsjnlfykceumnw6i4hkqd.onion TITAN snapshot · 2026-08-06 21:05

Recent victims

The 50 most recent victims claimed by TITAN. Total in the index: 15.

Date listed	Victim	Description
2026-07-22	PERTINENT HEALTHCARE BUSINESS SOLUTIONS PRIVATE LIMITED
2026-07-13	Cooperate consulting CZ s.r.o.
2026-07-13	DataOstrov s.r.o.
2026-07-13	Ozmit s.r.o.
2026-07-12	Cooperate service CZ s.r.o.
2026-07-04	Eureka Construction INC
2026-05-19	Apex Maritime Co., Inc.
2026-05-19	SIRILAK SEAFOOD (PW) LTD.
2026-05-19	Mezta Corporativo, S.A. de C.V.
2026-05-19	Abp Autoricambi Srl
2026-05-19	DFI AMERICA, LLC
2026-05-19	CRIT Tunisie
2026-05-19	Groupe CRIT SA
2026-05-19	ETM-ELECTROMATIC, INC.
2026-05-19	Quahe Woo & Palmer LLC

← Back to Ransomtracker

Statistics on this page are computed by Ransomnews from a live leak-site monitoring feed. Numbers update every ten minutes. Operator-written victim descriptions are truncated and shown in snippet form only. Source data: RansomLook (CC BY 4.0), aggregated and adapted by Ransomnews.