Privacy UnpackedRansomware gang
ALPHV (BlackCat) (also tracked as blackcat)
Claims on its leak site since 9 September 2021; none in the last 12 months
- Claims, 12 months
- 0
- Last 30 days
- 0
- All claims
- 731
- Last claim
- 3 March 2024
Where its claimed victims are
Sectors
Claims matched to an official notice
16 organisations ALPHV (BlackCat) claimed also filed a breach notice with a regulator, 14 of them after the claim (a median of 135 days later). Matched by name: the notice does not say who the attacker was.
- Davidoff Hutcher & Citron LLP
Claimed 21 August 2023 · notice filed with the Washington Attorney General 9 August 2024 - MNGI Digestive Health
Claimed 29 September 2023 · notice filed with the California Attorney General 15 July 2024 - Mariposa Landscapes Inc.
Claimed 10 November 2023 · notice filed with the California Attorney General 7 June 2024 - Superior Communications, Inc.
Claimed 28 August 2023 · notice filed with the California Attorney General 15 February 2024 - Advarra, Inc.
Claimed 1 November 2023 · notice filed with the Washington Attorney General 2 February 2024 - Prestige Care, Inc.
Claimed 26 September 2023 · notice filed with the California Attorney General 31 January 2024 - Transformative Healthcare
Claimed 26 July 2023 · notice filed with the California Attorney General 29 December 2023 - Academy Mortgage Corporation
Claimed 26 July 2023 · notice filed with the Washington Attorney General 27 December 2023 - Norton Healthcare, Inc.
Claimed 26 July 2023 · notice filed with the California Attorney General 8 December 2023 - McLaren Health Care
Claimed 29 September 2023 · notice filed with the California Attorney General 9 November 2023 - Progressive Leasing
Claimed 22 September 2023 · notice filed with the California Attorney General 22 October 2023 - The City of Lakewood
Claimed 26 July 2023 · notice filed with the Washington Attorney General 10 October 2023 - The Estée Lauder Companies Inc.
Claimed 26 July 2023 · notice filed with the Washington Attorney General 31 August 2023 - Beverly Hills Plastic Surgery
Claimed 26 July 2023 · notice filed with the California Attorney General 30 August 2023 - The Law Foundation of Silicon Valley
Claimed 26 July 2023 · notice filed with the California Attorney General 6 July 2023 - Silicon Valley Mechanical, Inc.
Claimed 26 July 2023 · notice filed with the California Attorney General 5 July 2023
Government advisories
What a claim is, and is not
A claim is a ransomware gang naming an organisation on its leak site, usually to pressure it into paying. It is the gang’s word: some claims are false, recycled from older breaches or exaggerated, and a claim says nothing about whose personal data, if any, was taken. That is why we count claims but do not list the organisations, and why a breach goes on the tracker as confirmed only when the organisation or a regulator says so.
How this is counted
Claims as collected from the gangs’ leak sites by ransomware.live, which says itself that they are unverified. We read its list every day and keep only counts: by month, by the victim’s country and by sector (as ransomware.live classifies them). Matches with official notices are by the organisation’s name, from 30 days before the claim to a year after it, against California’s and Washington’s full breach registers and every official notice on the tracker. A match is not a confirmation rate: those registers only see breaches of their own residents, and names are written differently. We never link to or visit leak sites.
From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Found a mistake? Tell us and we correct it.