Skip to content
Leak site of storm, captured by ThreatCluster

storm

Active

25 tracked victims

About

Written by ThreatCluster from 3 stories

storm is a ransomware group that operates via an extortion-based model, claiming breaches and leveraging stolen data to pressure victims. About 41 victims have been attributed to storm, across sectors including Manufacturing, Healthcare, Other, Financial Services, and Technology, with the United States, Australia, Canada, Germany, and Great Britain among the most affected countries. Recent reporting shows a pattern of cross-sector, cross-border intrusions and data-breach incidents attributed to this actor. As an illustration of that pattern, the August 2026 report describes healthcare-sector data breaches involving Health Carousel and United Group of Companies that are under investigation.

Sectors: Manufacturing, Financial Services, Healthcare · Countries: US, CA, AU

Recent victims

View all →
VictimSectorCountryPostedStatus
Baltimore Tank LinesTransportationUSOct 19, 2026
Merit Financial GroupFinancial ServicesUSOct 19, 2026
Patriot MaritimeTransportationUSOct 19, 2026
R. A. Wood AssociatesProfessional ServicesUSOct 16, 2026
Tech ElectronicsTechnologyUSOct 16, 2026
Cooperative Des Techniciens Ambulanciers De La MonteHealthcareCAOct 8, 2026
TheraCareHealthcareUSOct 8, 2026
Nipigon District Memorial HospitalHealthcareCAOct 4, 2026
States IndustriesManufacturingUSOct 3, 2026
Allied Machine & EngineeringManufacturingUSOct 3, 2026
Step By StepEducationUSOct 3, 2026
West County Health CentersHealthcareUSSep 30, 2026
Gardeners' GuildAgriculture and Food ProductionUSSep 30, 2026
North Hills Facility ServicesProfessional ServicesUSSep 30, 2026
Olnick RentalsHospitalityUSSep 30, 2026
Century Management ServicesProfessional ServicesUSSep 30, 2026
Silvercup StudiosOtherUSSep 30, 2026
UC ComponentsManufacturingUSSep 30, 2026
Stockham ConstructionManufacturingUSSep 30, 2026
Vintners DistributorsRetail & E-CommerceUSSep 30, 2026
Agra IndustriesAgriculture and Food ProductionUSSep 30, 2026
Poca Valley BankFinancial ServicesUSSep 30, 2026
First Secure Bank GroupFinancial ServicesUSSep 27, 2026
Applied CompositesManufacturingUSSep 26, 2026
Magna Legal ServicesProfessional ServicesUSSep 26, 2026

All ransomware groups · Dark web intelligence