Leak site of kazu, captured by ThreatCluster

kazu

Active

18 tracked victims · First seen Nov 6, 2025 · Last seen Aug 23, 2026

About

Written by ThreatCluster from 4 stories

kazu is a ransomware group that operates an extortion-based model built on data theft and threats to leak stolen files, including a case where it threatened to publish over 400,000 files within 48 hours. Victims span sectors such as Healthcare, Public Sector, Financial Services, Professional Services, and Technology, with activity reported across the United States, Mexico, Colombia, Brazil, and Canada. The reporting shows a pattern of data exfiltration followed by rapid ransom demands; for example, in the ManageMyHealth breach in New Zealand thousands of patients' records were exposed and a ransom of US$60,000 was demanded.

Sectors: Healthcare, Public Sector, Financial Services · Countries: US, MX, CO

Recent victims

View all →
Victim Sector Country Posted Status
Redacted Not Found Aug 25, 2026
PappyJoe: Healthcare Management System Healthcare US Aug 23, 2026
Instituto Ferrero de Neurología y Sueño Healthcare AR Aug 23, 2026
Brazil Mobilemed: Cloud PACS Platform Healthcare BR Aug 23, 2026
Canada Yocale: Appointment Management System Professional Services CA Aug 23, 2026
PawlyClinic: Digital Veterinary Care Platform Healthcare US Aug 23, 2026
Dr Akbar Niazi Teaching Hospital Healthcare PK Aug 23, 2026
Centro Médico Especializado OSI: Healthcare Solutions Healthcare MX Aug 23, 2026
Meducar: Telemedicine and Patient Management System Healthcare BR Aug 23, 2026
ConsultorioMovil: Telemedicine and Healthcare System Healthcare MX Aug 23, 2026
zHealthEHR — Practice Management Software for Chiropractic & Wellness Clinics Technology US Jan 26, 2026
ManageMyHealth - New Zealand Healthcare NZ Dec 30, 2025
Saudi Icon Not Found SA Dec 29, 2025
Leadway Assurance Financial Services NG Dec 11, 2025
CT Dent Ltd Healthcare GB Dec 6, 2025
National Civil Service Commission of Colombia Public Sector CO Nov 11, 2025
Defensoría del Pueblo de Colombia – Protection and Promotion of Human Rights Public Sector CO Nov 11, 2025
Doctor Alliance – Streamlined Document and Billing Management for Healthcare Providers Healthcare US Nov 11, 2025

All ransomware groups · Dark web intelligence