Dark Project Ransomware Gang Targets Healthcare and Manufacturing Globally

Ground.News

Dark Project Ransomware Gang Targets Healthcare and Manufacturing Globally

First seen 6 Nov 2026, 20:16 UTC • •51.1

Article Content

1 / 7

Browse articles

ThreatCluster •November 6, 2026 at 20:17 UTC

•Dark Project ransomware gang claims 38 victims across 8 countries.
•Healthcare and manufacturing sectors are the most affected.
•The group uses data theft, encryption, and public disclosure threats.

The Dark Project ransomware gang has claimed 38 victims across eight countries, primarily affecting the healthcare and manufacturing sectors. The group employs a combination of data theft, system encryption, and threats of public disclosure to maximize impact. Their operations include an affiliate program designed to enhance their reach and effectiveness. The reported incidents highlight the growing threat posed by financially motivated cybercriminals targeting critical infrastructure. Specific details about the attack methods or vulnerabilities exploited were not disclosed in the articles. The situation remains fluid as organizations assess their exposure and respond to the threat. No specific CVEs or tools were mentioned in the reports.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 3d ago How this analysis works

More articles in this cluster (6)

Threat Graph

5 entities, 6 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (3)

Ransomware
T1041 - Exfiltration Over C2 Channel
T1486 - Data Encrypted for Impact

Threat Actor (2)

Dark Project
Dark Project Ransomware Gang

Relationships

Dark Project uses Ransomware
Dark Project uses T1041 - Exfiltration Over C2 Channel
Dark Project uses T1486 - Data Encrypted for Impact
Dark Project Ransomware Gang uses Ransomware
Dark Project Ransomware Gang uses T1041 - Exfiltration Over C2 Channel
Dark Project Ransomware Gang uses T1486 - Data Encrypted for Impact

Following this threat?

Track Dark Project in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Common questions

Who are the victims?

The victims include organizations in the healthcare and manufacturing sectors across eight countries.

What methods does Dark Project use?

The gang combines data theft, system encryption, and threats of public disclosure.

Is there a known response to this threat?

Details on specific responses or mitigation strategies were not provided in the articles.

Continue Reading

Beach Eye Medical Group Data Breach Investigation Underway Beach Eye Medical Group, an optometry and ophthalmology practice in Southern California, may have experienced a data breach reportedly involving the hacker group Dark Project. The breach, estimated to have occurred on October 15, 2026, is said to involve over 250,000 files containing sensitive employee and patient…

Critical RCE Vulnerability in Confection WordPress Plugin (CVE-2026-115252) A critical vulnerability, CVE-2026-115252, has been identified in the Confection WordPress Cable plugin, affecting versions 0.4.0 to 0.4.7. This flaw allows unauthenticated attackers to execute arbitrary PHP code on the server by writing unmodified settings into a PHP file without proper checks. The vulnerability has…