About
Written by ThreatCluster from 1 storiesKairos is a ransomware group operating an extortion-focused model, claiming to exfiltrate data from victim networks to pressure payment. The group has 92 victims claimed, and it targets Education, Healthcare, Manufacturing, Business Services, and Consumer Services sectors, with the United States, Australia, the United Kingdom, Canada, and Denmark among the most affected countries. Recent reporting shows a pattern of data-exfiltration as the extortion method, illustrated by a Bedfordshire Hospitals NHS Foundation Trust incident in June 2024 where attackers accessed and extracted internal files affecting about 32,927 patients, with Kairos claiming to have exfiltrated data from the network.
Sectors: Healthcare, Education, Business Services · Countries: US, AU, GB
Recent victims
View all →| Victim | Sector | Country | Data | Views | Posted | Status |
|---|---|---|---|---|---|---|
| Oceania Digital Communications | IT services | Vanuatu | 257 GB | 251 | Oct 14, 2026 | listed |
| Slate Valley Unified School District | Education | United States | 762 GB | 1,433 | Oct 1, 2026 | published |
| Le Centre National de l'Expertise Hospitalière (CNEH) | Healthcare | France | 645 GB | 1,852 | Sep 30, 2026 | published |
| Unique Repair Services | Consumer Services | United States | 361 GB | 1,871 | Sep 29, 2026 | published |
| Krapf Group | Rail, Bus & Taxi | United States | 637 GB | 2,396 | Sep 22, 2026 | published |
| Leisure Coast Kitchens | Construction Management | Australia | 540 GB | 3,133 | Sep 16, 2026 | published |
| Ville de Libercourt | Government | France | 817 GB | 4,155 | Sep 2, 2026 | published |
| Ayuntamiento de Velilla de San Antonio | Government | Spain | 77.6 GB | 4,718 | Aug 20, 2026 | published |
| Hightech Signs | Building Materials | United States | 293 GB | 5,355 | Aug 12, 2026 | published |
| Warwick Fabrics | Apparel & Accessories Retail | New Zealand | 386 GB | 6,078 | Jul 30, 2026 | published |
| Thermalex Inc | Building Materials | United States | 1,55 TB | 5,393 | Jul 25, 2026 | published |
| LR Reed | Real Estate | Australia | 335 GB | 5,421 | Jul 22, 2026 | published |
| College O'Sullivan de Québec | Colleges & Universities | Canada | 384 GB | 5,491 | Jul 20, 2026 | published |
| Collge O'Sullivan de Québec | Education | CA | — | — | Jul 20, 2026 | |
| Mortensenlawoffices | Business Services | US | — | — | Jun 1, 2026 | |
| Commune De Camiers | Government | France | 154 GB | 8,153 | May 29, 2026 | published |
| McCarthy Inc | Construction | US | — | — | May 15, 2026 | |
| Gregory Jewellers | Consumer Services | AU | — | — | Apr 22, 2026 | |
| Nordenta (a daughter company of LIFCO) | Healthcare | DK | — | — | Apr 20, 2026 | |
| Strata Republic | Business Services | AU | — | — | Apr 17, 2026 | |
| FriendlyCare Pharmacy | Healthcare | AU | — | — | Apr 15, 2026 | |
| Pullen Moving | Transportation/Logistics | US | — | — | Apr 13, 2026 | |
| Colonial Presbyterian Church | Consumer Services | US | — | — | Apr 13, 2026 | |
| South Florida Injury Centers | Healthcare | US | — | — | Apr 9, 2026 | |
| Resch Maschinenbau | Manufacturing | DE | — | — | Mar 21, 2026 |
Found by ThreatCluster
16 total from our crawlListed on this group's leak site and not present in the aggregated feeds.