R
Ransomwhere.org
Live MapLatest VictimsGroups
PaymentsTTPsIdentifyNewsDataAPI
LIVE
Ransomwhere.org

Real-time ransomware intelligence platform. Tracking threat actors, victims, and payments to raise awareness and help defend against ransomware attacks worldwide.

Platform

  • Live Map
  • Latest Victims
  • Groups
  • Payments
  • Identify
  • News

Resources

  • Data & Methodology
  • API Docs
  • NoMoreRansom
  • Ransomware.live
  • CISA Advisories

Data sourced from Ransomware.live API. For informational purposes only.

© 2026 Ransomwhere.org

Groups/blacksuit

blacksuit

Active

According to Trend Micro, this ransomware has significant code overlap with Royal Ransomware.

184
Victims
1
Sites

Known Leak Sites

weg7sdx54bevnvulapqu6bpzwztryeflq3s23tegbmnhkbpqz637f2yd.onionDLS

Victims (184)

Live
Kansas City Aviation Center
blacksuitUS
metromont.com
blacksuitUS
Inns of Aurora
blacksuitUS
Gloucester County Virginia
blacksuitUS
Pacific Metallurgical
blacksuitUS
The Fortune Society
blacksuitUS
Massachusetts Municipal Wholesale Electric
blacksuitUS
dapope.com
blacksuit
Town of Orangeville
blacksuitCA
midwest.com
blacksuitUS
copresi.es
blacksuitES
JTEKT NORTH AMERICA
blacksuitUS
Grandview School District
blacksuitUS
co.cullman.al.us
blacksuitUS
eastgateauto.com
blacksuitUS
kciaviation.com
blacksuitUS
hetrhedens.nl
blacksuitNL
brandywinecoachworks.com
blacksuitUS
kapurinc.com
blacksuitIN
klarenbeek-transport.nl
blacksuitNL
surgicalassociates.com
blacksuitUS
billyheromans.com
blacksuitUS
kenmore.com
blacksuitUS
marysville.k12.oh.us
blacksuitUS
stalyhill-inf.tameside.sch.uk
blacksuitGB

Top Targeted Countries

United States100
Unknown33
United Kingdom9
Canada6
Spain4

Profile

:
:

Activity

Total victims184
Countries affected22
Last seen