Leak site of nightspire, captured by ThreatCluster

nightspire

Active

25 tracked victims · First seen Feb 17, 2025 · Last seen Aug 31, 2026

About

Written by ThreatCluster from 3 stories

NightSpire is a ransomware group that uses a double-extortion model, encrypting data and threatening disclosure while gaining access through remote-access channels, notably exploiting RDP vulnerabilities and remote admin tools. Victims are drawn from Manufacturing, Technology, Healthcare, Business Services, and Construction, with the US, India, France, Turkey, and Hong Kong appearing most frequently in the victim set. A May 2026 incident described in ThreatCluster reporting shows NightSpire targeting hospitals and government offices via RDP exploitation, illustrating a pattern of rapid, cross-sector expansion and infrastructure-targeted activity.

Sectors: Manufacturing, Technology, Healthcare · Countries: US, IN, FR

Recent victims

View all →
Victim Sector Country Posted Status
Transportes Montejo S.A.S. Transportation CO Sep 1, 2026
Easyoga Retail & E-Commerce TW Aug 31, 2026
Truckworx Transportation US Aug 31, 2026
Victory Personal Care, Inc Retail & E-Commerce US Aug 22, 2026
Vi***** Pe****** C***, Inc Not Found Aug 19, 2026
T****w**x Technology Aug 18, 2026
eas**** Not Found Aug 13, 2026
Tianji Auto Care Service Company Transportation TR Aug 12, 2026
T***w**x Not Found Aug 7, 2026
The Mountain Other GB Jul 27, 2026
Kates Nussman Ellis Earle & Landolfi LLP Professional Services US Jul 27, 2026
Akribis Systems Pte Ltd Technology SG Jul 27, 2026
Thai Seng International Co. Ltd Manufacturing TH Jul 27, 2026
MKS Transformator Manufacturing TR Jul 27, 2026
OPTIDEA GmbH Technology CH Jul 27, 2026
Furama Bukit Bintang Hospitality MY Jul 27, 2026
K. Venkatesh, Co Not Found IN Jul 27, 2026
Wings Argo Private Limited Other IN Jul 27, 2026
KSL Dirtworks LLC Manufacturing US Jul 27, 2026
Diffusion de Produits Inoxydables Manufacturing FR Jul 27, 2026
TFG Benefits, Inc. Financial Services US Jul 27, 2026
Auto Royal Company Manufacturing IT Jul 23, 2026
Cedar Crest College Education US Jul 14, 2026
Webosphere Technology IN Jul 13, 2026
PCCC Realty LLC Consumer Services US Jul 8, 2026

Found by ThreatCluster

16 total from our crawl

Listed on this group's leak site and not present in the aggregated feeds.

Enem Nostrum Remedies
Sep 4, 2026
Chansn Hospital
Sep 4, 2026
Valentin Hotel
Sep 4, 2026
Powiatowy Urzad Pracy w Zorach
Sep 4, 2026
Nicera Data
Sep 4, 2026
KZMDData
Sep 4, 2026
Big Brothes and Big Sisters
Sep 3, 2026
ArtisticSmiles
Aug 31, 2026
Advanced Vehicle Assembles
Aug 31, 2026
GMP Group
Aug 31, 2026

All ransomware groups · Dark web intelligence