Skip to content
Leak site of kairos, captured by ThreatCluster

kairos

Active

25 tracked victims · First seen Jun 26, 2024 · Last seen Sep 2, 2026

About

Written by ThreatCluster from 2 stories

Kairos is a ransomware group operating an extortion-focused model, claiming to exfiltrate data from victim networks to pressure payment. The group has 92 victims claimed, and it targets Education, Healthcare, Manufacturing, Business Services, and Consumer Services sectors, with the United States, Australia, the United Kingdom, Canada, and Denmark among the most affected countries. Recent reporting shows a pattern of data-exfiltration as the extortion method, illustrated by a Bedfordshire Hospitals NHS Foundation Trust incident in June 2024 where attackers accessed and extracted internal files affecting about 32,927 patients, with Kairos claiming to have exfiltrated data from the network.

Sectors: Healthcare, Education, Business Services · Countries: US, AU, GB

Recent victims

View all →
VictimSectorCountryDataViewsPostedStatus
Ville de LibercourtGovernmentFrance817 GB885Sep 2, 2026published
Ayuntamiento de Velilla de San AntonioGovernmentSpain77.6 GB1,513Aug 20, 2026published
Hightech SignsBuilding MaterialsUnited States293 GB2,164Aug 12, 2026published
Warwick FabricsApparel & Accessories RetailNew Zealand386 GB3,133Jul 30, 2026published
Thermalex IncBuilding MaterialsUnited States1,55 TB3,640Jul 25, 2026published
LR ReedReal EstateAustralia335 GB3,841Jul 22, 2026published
College O'Sullivan de QuébecColleges & UniversitiesCanada384 GB3,957Jul 20, 2026published
Collge O'Sullivan de QuébecEducationCAJul 20, 2026
MortensenlawofficesBusiness ServicesUSJun 1, 2026
Commune De CamiersGovernmentFrance154 GB7,294May 29, 2026published
McCarthy IncConstructionUSMay 15, 2026
Gregory JewellersConsumer ServicesAUApr 22, 2026
Nordenta (a daughter company of LIFCO)HealthcareDKApr 20, 2026
Strata RepublicBusiness ServicesAUApr 17, 2026
FriendlyCare PharmacyHealthcareAUApr 15, 2026
Pullen MovingTransportation/LogisticsUSApr 13, 2026
Colonial Presbyterian ChurchConsumer ServicesUSApr 13, 2026
South Florida Injury CentersHealthcareUSApr 9, 2026
Resch MaschinenbauManufacturingDEMar 21, 2026
Folet & RivoireNot FoundFRMar 16, 2026
Institute of Social Security - ParaguayPublic SectorPYMar 10, 2026
Katz Kantor Stonestreet & BucknerNot FoundUSMar 3, 2026
Rockwood Retirement CommunitiesConsumer ServicesUSFeb 27, 2026
Robbins Parking Service LtdTransportation/LogisticsCAFeb 14, 2026
The Marena GroupHealthcareUSFeb 13, 2026

Found by ThreatCluster

10 total from our crawl

Listed on this group's leak site and not present in the aggregated feeds.

Ayuntamiento de Valdemoro
Administration of the City of Valdemoro · 1.80 TB
Aug 30, 2026
ARWINI
arwini.de · Economic Effectiveness Review Working Group · 2.87 TB
Aug 30, 2026

All ransomware groups · Dark web intelligence