Clop Ransomware Gang Ransomware — Victims, Campaigns & Activity

Threat entity extracted from intelligence sources

Frequency
2
occurrences
First Seen
January 14, 2026
Last Seen
June 5, 2026

Clop Ransomware Gang is a ransomware_group tracked by ThreatCluster, appearing in 2 threat clusters built from 2 intelligence report mentions.

Clop Ransomware Gang is a ransomware_group tracked across 2 threat clusters and 2 intelligence report mentions on ThreatCluster. First observed January 14, 2026; most recent activity June 5, 2026.

Related Threat Clusters

  • Active Exploitation of SolarWinds Serv-U Flaw CVE-2026-28318

    The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning regarding the active exploitation of a high-severity vulnerability in SolarWinds Serv-U, tracked as CVE-2026-28318. This flaw allows…

    13 articles · Updated June 5, 2026
  • Monroe University Data Breach Affects Over 320,000 Individuals

    Monroe University experienced a data breach in December 2024, compromising the personal, financial, and health information of approximately 320,973 individuals. The breach was discovered between December 9 and December…

    5 articles · Updated January 15, 2026

Recent Intelligence Reports

  • CISA: Hackers now exploit SolarWinds Serv — Bleepingcomputer · June 5, 2026
  • Monroe University says 2024 data breach affects 320,000 people — Bleepingcomputer · January 14, 2026

Frequently asked questions

What is Clop Ransomware Gang?

Clop Ransomware Gang is a ransomware_group tracked by ThreatCluster, appearing in 2 threat clusters built from 2 intelligence report mentions.

Is Clop Ransomware Gang still active?

The most recent intelligence report mentioning Clop Ransomware Gang on ThreatCluster is dated June 5, 2026. Activity was first observed January 14, 2026, giving a tracked span from then to June 5, 2026.

What is Clop Ransomware Gang associated with?

Across ThreatCluster reporting, Clop Ransomware Gang most frequently co-occurs with Dev-0322, Data Breach, DDoS, Phishing, Ransomware, among 12 tracked related entities.

What are the latest developments involving Clop Ransomware Gang?

The most significant recent cluster is “Active Exploitation of SolarWinds Serv-U Flaw CVE-2026-28318” (13 articles · Updated June 5, 2026). Clop Ransomware Gang appears across 2 threat clusters in total, listed above with sources.

How much reporting does ThreatCluster have on Clop Ransomware Gang?

Clop Ransomware Gang appears in 2 intelligence report mentions across 2 deduplicated threat clusters, aggregated from 17,000+ monitored sources.

CVSS v3.1 Breakdown