Scarlettgroup

☆ pin

Reports

First seen

Oct 8, 2026

Last seen

Oct 21, 2026

Motivation

Financial

Targeting

Sectors

Education ×1 Media & Entertainment ×1 Technology ×1 Government ×1

Victim regions

×1

×3

United States×3

India×1

Victim country, only when stated. Corpus is predominantly English-language reporting, so US/EU coverage is overweighted relative to true victim distribution.

Indicators

hash_sha256 ×20domain ×12ip_v4 ×2hash_md5 ×1hash_sha1 ×1

Indicator values are available on Pro and via the API.

Recent reports

High

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Targeting

Indicators

Recent reports

Scarlettgroup publishes police.rajasthan.gov.in as ransomware victim

Scarlettgroup claims Genesys Cloud Services breach

Scarlettgroup claims NBCUniversal breach on ransomware.live

Scarlettgroup publishes Yale University victim on ransomware.live