// THREAT ACTOR
TRINITY_
DormantTRINITY is a ransomware operator tracked through its public data-leak infrastructure. The group operates under the double-extortion model that defines the modern ransomware ecosystem — file encryption combined with the threat of stolen-data publication on a public leak site — and continues to post fresh victim claims as part of an ongoing extortion campaign.
For Ransomnews editorial coverage of TRINITY — incident write-ups, attribution notes, and additional context — see the Threat Groups archive or run a site search.
Victims by year
- 2025 8
- 2024 11
Leak site mirrors
2 mirrors tracked, 0 currently reachable. These are criminal-infrastructure URLs — links are deliberately not provided.
-
txtggyng5euqkyzl2knbejwpm4rlq575jn2egqldu27osbqytrj6ruyd.onionTrinity snapshot · 2025-12-06 18:07 -
txtggyng5euqkyzl2knbejwpm4rlq575jn2egqldu27osbqytrj6ruyd.onionrans snapshot · 2025-12-06 17:07
Recent victims
The 50 most recent victims claimed by TRINITY. Total in the index: 19.
| Date listed | Victim | Description |
|---|---|---|
| 2025-10-03 | www.capitalchoice.com | Description: DOWNLOADED:420GB Capital Choice assists Americans in ach… |
| 2025-03-16 | Kairav Chemofarbe Industries | Description: |
| 2025-03-16 | consultoria-consultores.es | Description: 219GB |
| 2025-03-14 | ROBONG-WINMINI | Description: Revenue: Company name: |
| 2025-03-14 | www.lakepsych.com | Description: 190Gb Publication time: Publish time 27 days 5 hours 3… |
| 2025-03-14 | www.canamrealty.com | Description: Publication time: Publish time 22 days 4 hours 36 minu… |
| 2025-03-14 | CNS | Description: download server CNS admin CNS admin Yell0wSt0ne! server a… |
| 2025-03-14 | la-z-boy | Description: Publication time: Public Revenue: 2.6m Company n… |
| 2024-11-30 | Agencia Tributaria AEAT | 560Gb |
| 2024-10-03 | Barnes & Cohen | 15Gb |
| 2024-10-02 | FoccoERP | Data base 300 GB |
| 2024-09-23 | Fabrica Industrial Machinery & Equipment | Data base 20+tb |
| 2024-09-15 | INTERNAL.ROCKYMOUNTAINGASTRO.COM | 330Gb |
| 2024-09-01 | welland | full data base |
| 2024-08-18 | www.cosmeticdentalgroup.je | 3.63 Tb |
| 2024-08-13 | Banner and Associates | full data base(1,5 TB) |
| 2024-06-12 | sgvfr.com | sgvfr.com |
| 2024-06-12 | cbstraining.com | CBSTRAINING |
| 2024-06-12 | www.filmetrics.com.ph | www.filmetrics.com.ph |