Ransomware group
Black X ransomware: victims and leak site activity
The Black X ransomware group has listed 14 victims on its leak site since June 2026; its latest post is from 9 October 2026. Most affected countries: South Korea, Germany and Yemen. Most targeted sector: Healthcare.
Total posts
14
First seen
2026-06-02
Latest post
2026-10-09
Countries hit
9
About Black X
- Leak site (Tor)
- http://blackxppq2jvqyg4slyg3sbszv7ib2avaaycvhff5qipgdoepqi57xyd.onion
- Profile
- ransomware.live
Most targeted countries
- South Korea 4
- Germany 2
- Yemen 2
- United Kingdom 1
- Japan 1
- Malaysia 1
- Philippines 1
- Vietnam 1
- South Africa 1
Most targeted sectors
- Healthcare 3
- Financial Services 2
- Professional Services 2
- Technology 2
- Energy & Utilities 1
- Government & Defense 1
- Manufacturing 1
Black X victims per year
All 14 victims
Search every post in the full table.| Victim | Country | Sector | Discovered |
|---|---|---|---|
| bayer | Germany | Healthcare | |
| enTouch | Japan | Technology | |
| lopay | United Kingdom | Financial Services | |
| iwin | South Korea | Technology | |
| FE CREDIT | Vietnam | Financial Services | |
| i-one | South Korea | — | |
| sanaa hospital | Yemen | Healthcare | |
| Tong Kong E & E Sdn Bhd (95907X) | Malaysia | Manufacturing | |
| sanaa | Yemen | Other | |
| Daechang Solution | South Korea | Professional Services | |
| elektroverband-bayern | Germany | Energy & Utilities | |
| African National Congress | South Africa | Government & Defense | |
| case.law | Philippines | Professional Services | |
| Wonjin Plastic Surgery | South Korea | Healthcare |