Skip to content
Leak site of metaencryptor, captured by ThreatCluster

metaencryptor

Active

25 tracked victims · First seen Aug 16, 2023 · Last seen Oct 12, 2026

About

Written by ThreatCluster from 4 stories

metaeencryptor is a ransomware group that uses an extortion model centered on a public leak site where victims are listed to pressure payment. It has 27 victims claimed, spanning Manufacturing, Business Services, Healthcare, Transportation/Logistics, and Other sectors, with the United States, Germany, Canada, Japan, and South Korea among the most affected countries. As illustrated by the reporting, the pattern shows victims being posted on the leak site; on 2026-09-15 SFA Engineering Corporation (South Korea) and Nippon Steel Corporation (Japan) were listed as victims. Overall, the reporting indicates ongoing focus on manufacturing and related industrial targets across the United States, Germany, Canada, Japan, and South Korea.

Sectors: Healthcare, Aerospace, Energy and Defense, Asset management · Countries: US, DE, CA

Recent victims

View all →
VictimSectorCountryDataFilesPostedStatus
MyMichigan Health
mymichigan.org
HealthcareUnited States——Oct 12, 2026listed
VIATechnik
viatechnik.com
AEC industryUnited States12.5 TB—Oct 12, 2026listed
GE Vernova Inc.
gevernova.com
Energy & UtilitiesUnited States——Sep 25, 2026listed
PKF Hadiwinata
pkfhadiwinata.com
Public accounting / professional servicesIndonesia1.4 TB—Sep 25, 2026published
Platinum Healthcare Staffing
platinumhs.com
Healthcare staffingUnited States50 GB—Sep 25, 2026listed
Astemo, Ltd.
astemo.com
Automotive partsJapan18.109 TB—Sep 21, 2026listed
Hudson MD Group, LLC
hudsonmdgroup.com
HealthcareUnited States——Sep 21, 2026listed
Bruker Corporation
bruker.com
Life Science Research and Diagnostics SolutionsUnited States121 GB—Sep 21, 2026published
Flex Ltd
flex.com
Technology manufacturing and supply-chainUnited States365 GB—Sep 21, 2026published
HyVision System. Inc
en.hyvision.co.kr
Manufacture of automatic test and measurement equipment for mobile camera modulesSouth Korea80 GB—Sep 21, 2026published
Visual Intelligence, Inc.
visualintelligenceinc.com
TelecomUnited States135 GB—Sep 21, 2026published
Beckman Coulter, Inc
beckmancoulter.com
biomedical testing instrument systems and clinical diagnosticsUnited States213 GB—Sep 17, 2026listed
AECOM
aecom.com
Infrastructure consulting and engineeringUnited States1.2 TB—Sep 17, 2026published
Promantra, Inc
promantra.us
Healthcare technology and business process servicesUnited States40 GB—Sep 17, 2026listed
SFA Engineering Corporation
sfa.co.kr
industrial automation, robotics, and manufacturing equipmentKR70 GB—Sep 15, 2026listed
Nippon Steel Corporation
nipponsteel.com
SteelmakingJapan109 GB—Sep 15, 2026listed
EllisDon Corporation
ellisdon.com
construction services and technologyCanada1.4 TB3Sep 7, 2026published
SIFCO Industries INC.
sifco.com
Aerospace, Energy and DefenseUnited States251 GB—Sep 7, 2026listed
ST Engineering
stenng.com
Technology, defence and engineeringUnited States1064 GB—Sep 7, 2026listed
Hologic, Inc.
hologic.com
Medical technologyUnited States——Sep 7, 2026listed
Woodlore International Inc.
woodlore.ca
Furniture manufacturingCanada68 GB3Aug 23, 2026listed
Trailer Transit Inc
trailertransit.com
Logistics / truckingUnited States8 GB—Aug 23, 2026listed
Weber Water Resources
weberwaterresources.com
water resource solutionsUnited States38 GB3Aug 23, 2026published
MPA Pharma GmbH
mpapharma.com
pharmaceuticalsGermany14 TB3Aug 23, 2026listed
Aquamar Inc
aquamarseafood.com
Seafood (retail and foodservice)United States540 GB—Aug 23, 2026listed

Found by ThreatCluster

85 total from our crawl

Listed on this group's leak site and not present in the aggregated feeds.

Dillon
Oct 12, 2026
stormtech
stormtech.com
Sep 29, 2026
Lee Hartman & Sons, Inc.
leehartman.com · 4.5 Gb
Sep 23, 2026
HyVision System, Inc
en.hyvision.co.kr · 80 GB
Sep 23, 2026
Visual Intelligence, Inc
· 135 GB
Sep 22, 2026
ST Engineering Negotiating
stenng.com · 1064 GB
Sep 16, 2026
Woodlore International Inc
furniture manufacturing · 68 Gb · 3 files
Sep 11, 2026
FactoryFive Racing Inc
factoryfive.com · 780 GB · 66 files
Sep 10, 2026
The Lowell Hotel
lowellhotel.com · 53 GB
Sep 10, 2026
ST Engineering New
· 1064 GB
Sep 8, 2026
Life University Published
· 18.2 GB
Sep 8, 2026
MBS Radio Viewed
· 130 Mb
Sep 8, 2026
Carlex Glass Luxembourg S.A. Viewed
· 4 Gb
Sep 8, 2026
EllisDon Corporation New
Construction and infrastructure services · 409 GB
Sep 8, 2026
Hologic, Inc. New
Sep 8, 2026
SIFCO Industries INC. New
· 251 GB
Sep 8, 2026
Weber Water Resources Published
· 38 GB
Sep 8, 2026
MPA Pharma GmbH Viewed
· 14 TB
Sep 8, 2026
Lee Hartman & Sons Published
· 4.5 Gb
Sep 8, 2026
Woodlore International Inc. Published
· 68 Gb
Sep 8, 2026

All ransomware groups · Dark web intelligence