Skip to content

embargo

Inactive

25 tracked victims · First seen Apr 17, 2024 · Last seen Sep 9, 2026

About

Written by ThreatCluster from 1 stories

Embargo is a ransomware group that operates an extortion-focused model, claiming 2 TB of sensitive data exfiltrated in a breach of USA DeBusk LLC, a Texas-based provider. Victims claimed by Embargo total about 40, with hits across Technology, Healthcare, Manufacturing, Business Services, and Transportation/Logistics, and the most affected countries are the US, SG, DE, GB, and FR. Recent reporting shows a pattern of large data exfiltration used as leverage in its operations, illustrated by the USA DeBusk incident around September 5, 2025, in which Embargo claimed 2 TB of data was obtained. Overall, the reporting indicates a cross-sector, cross-geography footprint consistent with a data-exfiltration-focused ransomware actor.

Sectors: Technology, Healthcare, Manufacturing · Countries: US, SG, DE

Recent victims

View all →
VictimSectorCountryDataPostedStatus
gardensalive.com, bitsandpieces.com, iselinursery.local, weeksroses.org, esm.localAgriculture and Food ProductionUS2tbSep 9, 2026
www.maytrucking.comTransportation/LogisticsUnited States1 TBJun 30, 2026listed
Auburn Electrical Construction CompanyElectrical contractingUS2.7 TB DATA AVAILABLEJun 3, 2026published
https://www.lagoonpark.com/Hospitality and TourismUS—Mar 31, 2026
ludlums.comTechnologyUS—Mar 26, 2026
westport.com
westport.com
Transportation technologiesUSTOTAL QUANTITY 1.8 TBMar 14, 2026published
seclore.comTechnologyIN—Mar 11, 2026
ubm.hu
ubm.hu
TechnologyHU300 GB (sensitive data including recipes, documents, contracMar 11, 2026published
nch.com
nch.com
TechnologyUS7.3TBMar 9, 2026published
lso.com
lso.com
Transportation/LogisticsLS500 GBDec 6, 2025published
ACTi.com
acti.com
TechnologyTWmore than 1.5TB of data has been downloaded.Oct 22, 2025published
usadebusk.comNot FoundUS—Sep 20, 2025
Heart of America Medical Centr (HAMC)HealthcareUS—Aug 6, 2025
hawaiiunified.comTelecommunicationUS—Jun 24, 2025
rotaryeng.com.sgManufacturingSG—Jun 10, 2025
allstarflooring.comManufacturingUS—May 30, 2025
M&H Electric FabricatorsManufacturingUS—May 30, 2025
Kingsmen Creatives Ltd.Business ServicesSG—May 14, 2025
rixos.comHospitality and TourismTR—Mar 14, 2025
Insider Technologies LimitedTechnologyGB—Mar 9, 2025
tequaly.comTechnologyBR—Feb 25, 2025
myhscu.comFinancial ServicesUS—Feb 17, 2025
annegrady.orgHealthcareUS—Feb 16, 2025
Heritage South Credit UnionFinancial ServicesUS—Feb 14, 2025
alansarioman.comFinancialOM—Jan 9, 2025

Found by ThreatCluster

17 total from our crawl

Listed on this group's leak site and not present in the aggregated feeds.

Gardens Alive, Inc.
gardensalive.com · Consumer goods · 2tb data
Sep 10, 2026
Lone Star Overnight
lso.com · Parcel delivery / Logistics · ~500 GB data total includin...
Sep 9, 2026
UBM Group
ubm.hu · Agriculture · 300 GB (sensitive data including recipes, documents, contrac
Sep 6, 2026
NCH Corporation
nch.com · Industrial solutions · More than 7.3TB of data has been downloaded.
Aug 30, 2026
May Trucking Company
maytrucking.com · Transportation · 1 TB
Aug 30, 2026
The UBM Group
ubm.hu · agriculture · 300 GB (sensitive data including recipes, documents, contrac
Aug 30, 2026
Ludlum Measurements, Inc.
ludlums.com · Industrial equipment · We have 5 TB data including full source codes, client data,
Aug 30, 2026
Westport
westport.com · Transportation technology · 1.8 TB
Aug 30, 2026
Lagoon Amusement Park
lagoonpark.com · Entertainment / Amusement · 6 TB
Aug 30, 2026
ACTi Corporation
acti.com · Big Data, Robot, IoT, Cloud and AI Technologies · more than 1.5TB of data has been downloaded.
Aug 30, 2026
Lone Star Overnight (LSO)
lso.com · Logistics · ~500 GB data total includin...
Aug 30, 2026

All ransomware groups · Dark web intelligence