L group

☆ pin

Reports

First seen

Aug 7, 2026

Last seen

Aug 7, 2026

Motivation

Financial

Targeting

Sectors

Manufacturing ×4 Retail & E-commerce ×2 Education ×2 Agriculture ×1 Government ×1 Other ×1 Energy & Utilities ×1

Victim regions

×1

×4

United States×4

Argentina×2

Brazil×2

Canada×1

Vietnam×1

Luxembourg×1

Australia×1

Hungary×1

Victim country, only when stated. Corpus is predominantly English-language reporting, so US/EU coverage is overweighted relative to true victim distribution.

Indicators

domain ×44ip_v4 ×14hash_md5 ×5hash_sha1 ×1

Indicator values are available on Pro and via the API.

Recent reports

High

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Targeting

Indicators

Recent reports

L group claims breach of Universidade Veiga de Almeida (UVA), Brazil

L group publishes ausfec1.com.au as ransomware victim

L group claims Rose Kennedy Greenway Conservancy on ransomware.live

L group publishes jean-petit.lu as ransomware victim

L group claims Chaco Provincial Tax Administration (ATP) as ransomware victim

L group publishes victim l-a.com.vn on ransomware.live

L group publishes automobile-mueller.info as ransomware victim

L group claims LATICRETE China subsidiary as ransomware victim

L group claims victim: mygoalseek.com

L group publishes psec.com.ar as ransomware victim

L group claims Bouygues Energies & Services (France) in ransomware extortion

L group publishes ferretornillos.com as ransomware victim

L group publishes Ratnasagar as ransomware victim

L group publishes brdigital.net.br as ransomware victim

L group claims victim: daycohost.com

L group publishes Venezuelan paint company as ransomware victim

L group publishes Nokota Packers as ransomware victim

L group claims breach of immobilia.hu, Hungarian real estate platform

L group publishes gslusa.com as ransomware victim

L group publishes www.racheljulien.com as ransomware victim

L group claims Coast Produce Company victim on ransomware.live

L group publishes zuckers.com as ransomware victim

L group publishes onsite-eng.ca as ransomware victim

L group publishes doclv.com as ransomware victim

L group publishes www.upbrand.com as ransomware victim

L group claims Cookies Kids breach