Skip to content
Leak site of shadowbyt3$, captured by ThreatCluster

shadowbyt3$

Active

23 tracked victims · First seen Feb 17, 2026 · Last seen Aug 29, 2026

About

Summarised by ThreatCluster from the group's own leak site

ShadowByt3$ 2.0 ransomware group leak site homepage featuring a verification prompt and a session verification path labeled DDOS PREVENTION with a countdown-like expiry note.

Sectors: Technology, Education, Other · Countries: US, GB, IN

Recent victims

View all →
VictimSectorCountryPostedStatus
HandyTrac Greystar AZ WARNINGOtherUSSep 16, 2026
HandyTrac (Greystar Litchfield Park, AZ)OtherUSSep 15, 2026
John Engel TeamProfessional ServicesUSSep 10, 2026
Ben Leeds PropertiesOtherGBSep 7, 2026
Ben Leeds Properties WARNINGOtherGBSep 7, 2026
BayView Real EstateRetail & E-CommerceUSAug 29, 2026
Bayview Real Estate WARNINGRetail & E-CommerceUSAug 28, 2026
Sinar Mas Agribusiness and Food Golden Agri-Resources)Agriculture and Food ProductionIDAug 25, 2026
A-Plus Software LimitedTechnologyGBAug 25, 2026
Knottingham Trent UniversityEducationGBAug 25, 2026
TINYpulse NINTENDO BREACH (nintendo.com)TechnologyJPJun 16, 2026
Nintendo Company (Nintendo.com)TechnologyJPJun 12, 2026
Lead Company (Leadership Boulevard)Business ServicesJun 3, 2026
Cropwise (Syngenta Group)Agriculture and Food ProductionCHJun 2, 2026
BreachForums is Back (breachforu.ms)Not FoundJun 1, 2026
Hotelogix Company (Hotelogix.com)Hospitality and TourismINMay 21, 2026
StarBucks Company (StarBucks.comHospitality and TourismUSMay 21, 2026
PowerCampusEducationINMay 14, 2026
Stride LearningEducationUSMay 14, 2026
Amplify TechnologyTechnologyGBMay 14, 2026
University Of GeorgiaEducationUSMay 14, 2026
HotelogixHospitality and TourismSGMay 14, 2026
UMSANot FoundFeb 25, 2026

All ransomware groups · Dark web intelligence