About
Written by ThreatCluster from 29 storiesEverest is a ransomware group that operates an extortion-focused model, breaching networks to exfiltrate data and threatening to publish it on the dark web unless a ransom is paid. Victims span healthcare, technology, business services, financial services, and manufacturing, with the United States, Italy, the United Arab Emirates, Spain, and Germany most affected. Recent reporting shows a pattern of large-scale data exfiltration followed by ransom demands or threats to leak the data, illustrated by Everest’s breach of Stadler Rail and a CHF 10 million ransom demand after attackers accessed a supplier data-exchange platform. Across the reported incidents, Everest has claimed breaches affecting multiple sectors and regions, with about 240 victims claimed.
Sectors: Technology, Healthcare, Business Services · Countries: US, IT, AE
Recent victims
View all →| Victim | Sector | Country | Data | Files | Views | Posted | Status |
|---|---|---|---|---|---|---|---|
| Rise UP | Technology | 473.08 GB | — | — | Sep 1, 2026 | listed | |
| VIVOTEK | Technology | TW | 236.29 GB | — | — | Sep 8, 2026 | listed |
| Italtel Peru | Technology | PE | 388.996 GB | — | — | Sep 1, 2026 | listed |
| CCA Bank cca-bank.com |
Banking | 19.04 GB | 11,837 | 8,100 | Aug 20, 2026 | published | |
| Kingston Technology | Technology | US | — | — | — | Aug 20, 2026 | |
| Experts Entreprendre | Professional Services | FR | 1.13 TB | — | 8,000 | Aug 20, 2026 | published |
| Grupo DT grupodt.es |
Other | ES | 204.28 GB | 31,157 | 8,000 | Aug 20, 2026 | published |
| Capgemini Engineering capgemini.com |
Professional Services | FR | 13.08 GB | 722,470 | 9,400 | Aug 20, 2026 | published |
| Rx Networks | Technology | CA | — | — | — | Aug 17, 2026 | |
| Ingersoll Rand irco.com |
Manufacturing | US | 118 GB | — | 26,000 | Aug 17, 2026 | published |
| Omnicell | Healthcare | US | — | — | — | Aug 8, 2026 | |
| EPM | Energy & Utilities | CO | — | — | 34,000 | Aug 5, 2026 | published |
| AKM Enterprises INC | Other | US | — | — | 34,000 | Aug 6, 2026 | published |
| Formulatrix formulatrix.com |
Technology | US | 455.76 GB | 19,285 | 34,000 | Jul 6, 2024 | published |
| Oasis Legal Group | Professional Services | US | — | — | 34,000 | Aug 5, 2026 | published |
| Conway Analytics conwayanalytics.com |
Technology | US | 40 TB | 78,077 | 35,000 | Aug 5, 2026 | published |
| Greenbotz greenbotz.co |
Technology | IN | approximately 15 TB | 8,313 | 34,000 | Aug 5, 2026 | published |
| NIMR Oil nimroil.com |
Energy & Utilities | AE | 233.59 GB | 83,375 | 35,000 | Aug 5, 2026 | published |
| TechCorr techcorr.com |
oil-and-gas, industrial infrastructure and field-inspection context | 136 GB | 49,506 | 34,000 | Jul 9, 2024 | published | |
| Rodschinson Investment rodschinson.com |
Real estate and M&A | BE | 64.72 GB | 28,495 | 34,000 | Jul 12, 2026 | published |
| Allied Telesis alliedtelesis.com |
Technology | JP | 221 GB | — | 31,000 | Jul 17, 2024 | published |
| Dharma Group dharmagroup.co.id |
Manufacturing | IT | 133 GB | 157,000 | 33,000 | Aug 5, 2026 | published |
| Emirates Flight Catering emiratesflightcatering.com |
Hospitality | AE | 24 GB | 13,823 | 32,000 | Jul 17, 2026 | published |
| Alzone Software alzonesoftware.com |
Technology | 145 GB | — | 31,000 | Jul 18, 2024 | published | |
| Al-Futtaim Group alfuttaim.com |
Retail & E-Commerce | AE | 307 GB | 161,149 | 30,000 | Jul 21, 2026 | published |
Found by ThreatCluster
205 total from our crawlListed on this group's leak site and not present in the aggregated feeds.