Skip to content
Leak site of blackwater, captured by ThreatCluster

blackwater

Active

7 tracked victims · First seen Apr 17, 2026 · Last seen Aug 24, 2026

About

Aggregated threat-intel description

Blackwater is a ransomware group that first surfaced in early 2026, combining file encryption with data theft and targeting healthcare organizations, with known victims including Minidoka Memorial Hospital in Idaho.

Sectors: Energy & Utilities, Healthcare, Hospitality and Tourism · Countries: AR, BR, CN

Recent victims

View all →
VictimSectorCountryPostedStatus
www.ptesm.com
ptesm.com
Not FoundPTAug 24, 2026published
www.amca.org.ar
amca.org.ar
Professional ServicesARAug 15, 2026published
www.shalina.com
shalina.com
Not FoundINAug 15, 2026published
msgas.com.br
msgas.com.br
Energy & UtilitiesBRJul 25, 2026published
txdkj.com
txdkj.com
Not FoundCNJul 10, 2026published
www.utourworld.com
utourworld.com
Hospitality and TourismJun 6, 2026published
medical-parkHealthcareTRMar 20, 2026listed

Found by ThreatCluster

22 total from our crawl

Listed on this group's leak site and not present in the aggregated feeds.

UTourWorld
utourworld.com
Sep 21, 2026
amca.org.ar
amca.org.ar
Sep 5, 2026
shalina.com
shalina.com
Sep 5, 2026
utourworld.com
utourworld.com
Sep 5, 2026
ptesm.com
ptesm.com
Sep 3, 2026
PTESM
ptesm.com
Sep 3, 2026
TXDKJ
txdkj.com
Aug 30, 2026
MSGAS
msgas.com.br
Aug 30, 2026
AMCA
amca.org.ar
Aug 30, 2026
UTour World
utourworld.com
Aug 30, 2026
Grupo EBD
Aug 30, 2026
Shenzhen Gongjin Electronics
Aug 30, 2026
Shalina
shalina.com
Aug 30, 2026
Compass Housing Alliance
nonprofit housing
Aug 30, 2026
Sinarmas Cepsa Pte. Ltd.
ptesm.com · oleochemicals (production and marketing of oleochemicals, particularly fatty alcohols and their derivatives)
Aug 30, 2026
Tuopu
Aug 30, 2026

All ransomware groups · Dark web intelligence