About
Aggregated threat-intel descriptionOrion is a ransomware operation first observed in October 2025 that listed 13 alleged victims on a dark web leak site across financial services, manufacturing, and healthcare, though analysts determined its victim list was recycled from prior LockBit and BlackCat disclosures rather than fresh compromises.
Sectors: Manufacturing, Professional Services, Food processing · Countries: US, DE, GB
Recent victims
View all →| Victim | Sector | Country | Data | Views | Posted | Status |
|---|---|---|---|---|---|---|
| huntongroup.com | Professional Services | GB | — | — | Jun 1, 2024 | |
| hphood.com | Other | US | — | — | Oct 28, 2025 | listed |
| bridgestoneamericas.com | Manufacturing | US | — | — | Aug 5, 2026 | |
| albanybank.com | Financial Services | US | — | — | Oct 28, 2025 | listed |
| ipsenlogistics.com ipsenlogistics.com | international transport services | — | 243,632 | Aug 5, 2026 | published | |
| hetero.com hetero.com | pharmaceuticals | — | 243,884 | Aug 5, 2026 | published | |
| sitrack.com sitrack.com | Transportation | DE | — | 244,261 | Aug 5, 2026 | published |
| kioti.com kioti.com | tractor technology/manufacturing | US | — | 243,518 | Aug 5, 2026 | published |
| udhaiyamdhall.com udhaiyamdhall.com | Food processing | India | — | 244,718 | Aug 5, 2026 | published |
| emanic.net emanic.net | Technology | DE | — | 244,374 | Aug 5, 2026 | published |
| daubertchemical.com daubertchemical.com | Chemicals | United States | — | 243,852 | Aug 5, 2026 | published |
| morrisgroupint.com morrisgroupint.com | Professional Services | GB | 0.5TB | 244,498 | Aug 5, 2026 | published |
| pricemodern.com pricemodern.com | Commercial services | United States | — | 247,863 | Aug 5, 2026 | published |
| Nitrex Chemicals India nitrex.in | Chemicals | India | — | 105,351 | Aug 5, 2026 | published |
Found by ThreatCluster
21 total from our crawlListed on this group's leak site and not present in the aggregated feeds.
morrisgroupint
morrisgroupint.com · Manufacturing · 0.5TB
Aug 30, 2026
kioti
kioti.com
Aug 30, 2026
sitrack
sitrack.com
Aug 30, 2026
ipsenlogistics
ipsenlogistics.com · international transport services
Aug 30, 2026
Orion RAAS Group
Aug 30, 2026
pricemodern
pricemodern.com
Aug 30, 2026
emanic
emanic.net
Aug 30, 2026
udhaiyamdhall
udhaiyamdhall.com
Aug 30, 2026
Orion RAAS
Aug 30, 2026
hetero
hetero.com · Pharmaceuticals
Aug 30, 2026
daubertchemical
daubertchemical.com · steel, automotive, transportation and general manufacturing industries
Aug 30, 2026