Signalis
sign in--:--:--UTC
Threat actors

Metaencryptor

☆ pin
Reports
27
First seen
Aug 23, 2026
Last seen
Oct 12, 2026
Motivation
Financial

Targeting

Sectors
Manufacturing ×7Healthcare ×7Technology ×3Energy & Utilities ×2Professional Services ×2Transport & Logistics ×1Other ×1Defense ×1
Victim regions
×1
×16
United States×16
Japan×2
Germany×1
Singapore×1
Canada×1
South Korea×1
Indonesia×1

Victim country, only when stated. Corpus is predominantly English-language reporting, so US/EU coverage is overweighted relative to true victim distribution.

Indicators

domain ×68ip_v4 ×52hash_sha256 ×37hash_md5 ×19hash_sha1 ×4url ×1

Indicator values are available on Pro and via the API.

Recent reports

High

Metaencryptor publishes MyMichigan Health as ransomware victim

ransomware.liveHigh

Metaencryptor claims VIATechnik as ransomware victim

ransomware.liveHigh

Metaencryptor claims GE Vernova Inc. as ransomware victim

ransomware.liveHigh

Metaencryptor claims PKF Hadiwinata breach

ransomware.liveHigh

Metaencryptor ransomware gang publishes Platinum Healthcare Staffing as victim

ransomware.liveHigh

Metaencryptor claims Astemo, Ltd. as ransomware victim

ransomware.liveHigh

Metaencryptor ransomware claims Hudson MD Group, LLC as victim

ransomware.liveHigh

Metaencryptor claims Bruker Corporation as ransomware victim

ransomware.liveHigh

Metaencryptor claims Flex Ltd as ransomware victim

ransomware.liveHigh

Metaencryptor publishes HyVision System Inc as ransomware victim

ransomware.liveHigh

Metaencryptor ransomware targets Visual Intelligence, Inc.

ransomware.liveHigh

Metaencryptor ransomware gang claims Beckman Coulter, Inc.

ransomware.liveHigh

Metaencryptor ransomware gang publishes AECOM as victim

ransomware.liveHigh

Metaencryptor claims ProMantra, Inc as ransomware victim

ransomware.liveHigh

Metaencryptor claims SFA Engineering Corporation victim

ransomware.liveHigh

Metaencryptor claims Nippon Steel Corporation as ransomware victim

ransomware.liveHigh

Metaencryptor claims EllisDon Corporation breach

ransomware.liveHigh

Metaencryptor claims SIFCO Industries as ransomware victim

ransomware.liveHigh

Metaencryptor claims new victim: ST Engineering

ransomware.liveHigh

Metaencryptor ransomware claims Hologic, Inc. as victim

ransomware.liveHigh

Metaencryptor claims Woodlore International Inc. as ransomware victim

ransomware.liveHigh

Metaencryptor claims Trailer Transit Inc victim on ransomware.live

ransomware.liveHigh

Metaencryptor claims Weber Water Resources in ransomware attack

ransomware.liveHigh

Metaencryptor publishes MPA Pharma GmbH as ransomware victim

ransomware.liveHigh

Metaencryptor publishes Aquamar Inc as ransomware victim

ransomware.liveHigh

Metaencryptor claims Corona Corporation as ransomware victim

ransomware.liveHigh

Metaencryptor claims Factory Five Racing as ransomware victim

ransomware.live

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign upSee plans