Ransomware group

Darkvault ransomware: victims and leak site activity

The Darkvault ransomware group has listed 55 victims on its leak site since April 2024; its latest post is from 6 January 2025. Most affected countries: India, United States and Brazil. Most targeted sector: Technology.

Total posts 55
First seen 2024-04-11
Latest post 2025-01-06
Countries hit 20

About Darkvault

DarkVault is a data-exfiltration and double-extortion group first identified in late 2023, targeting medium-to-large organizations in finance, professional services, legal, and technology sectors across Europe, the UK, and North America, with a suspected connection to LockBit.

Leak site (Tor)
http://tx23pk4zw5qynq3tmfk2jz5zbel63p4nwvkheswze7r6gzxhzcbseyad.onion

Most targeted countries

  1. India 10
  2. United States 10
  3. Brazil 6
  4. United Kingdom 6
  5. United Arab Emirates 3
  6. South Korea 3
  7. Mexico 2
  8. Saudi Arabia 2
  9. South Africa 2
  10. Argentina 1
All countries →

Most targeted sectors

  1. Technology 19
  2. Professional Services 15
  3. Healthcare 6
  4. Financial Services 4
  5. Transportation 4
  6. Agriculture and Food Production 2
  7. Education 2
  8. Government & Defense 1
  9. Hospitality 1
  10. Retail & E-Commerce 1
All sectors →

Darkvault victims per year

53 2024
2 2025

All 55 victims

Search every post in the full table.
Victim Country Sector Discovered
yoniot.cn China Technology
confluxhr.com India Technology
timely.mn Mongolia Technology
salesgig.com United States Professional Services
inthinking.net South Korea Education
arabot.io United Arab Emirates Technology
techguard.in India Technology
naj.ae United Arab Emirates Technology
freshairefranchise.com United States Professional Services
pocketrisk.com United Kingdom Financial Services
ingotbrokers.com Seychelles Financial Services
peoplewell.com South Korea Healthcare
megatravel.com.mx Mexico Hospitality
lenmed.co.za South Africa Healthcare
gpf.org.za South Africa Government & Defense
glazkov.co.il Israel Professional Services
comoferta.com Brazil Professional Services
mercadomineiro.com.br Brazil Professional Services
warrendale-wagyu.co.uk United Kingdom Agriculture and Food Production
blankstyle.com United States Professional Services
eurovilla.hr Croatia Professional Services
sequelglobal.com India Technology
foremedia.net United Kingdom Technology
life.vet.br Brazil Healthcare
pandacare.ae United Arab Emirates Healthcare
buyeazzy.com India Professional Services
decreditos.com Argentina Financial Services
oexpress.id Indonesia Transportation
cosimti.com Costa Rica Technology
journohq.com United States Technology
ZeepLive India Retail & E-Commerce
nordspace.lt Lithuania Professional Services
wave2.co.kr South Korea Technology
aletech.com.br Brazil Technology
eskarabajo.mx Mexico Transportation
ikfhomefinance.com India Financial Services
sandipuniversity.edu.in India Education
atriline.by Belarus Technology
bzrastreador.com.br Brazil Transportation
bigtoe.yoga United States Professional Services
qint.com.br Brazil Technology
thsp.co.uk United Kingdom Professional Services
tommyclub.co.uk United Kingdom Professional Services
baheyabeauty.com Saudi Arabia Professional Services
baheya.com Saudi Arabia Healthcare
hawkremote2.com United States Technology
hawkremote.com United States Technology
hirebus.com United States Transportation
ezeldsolutions.com India Technology
zanebenefits.com United States Healthcare
taskhound.com United States Technology
lankacom.net Sri Lanka Professional Services
adachikan.com India Professional Services
agribazaar.com India Agriculture and Food Production
wexer.com United Kingdom Technology