Ransomware group
Devman ransomware: victims and leak site activity
The Devman ransomware group has listed 184 victims on its leak site since April 2025; its latest post is from 4 February 2026. Most affected countries: United States, France and Svalbard and Jan Mayen. Most targeted sector: Technology.
Total posts
184
First seen
2025-04-06
Latest post
2026-02-04
Countries hit
39
About Devman
Former RansomHub and INC Ransom affiliate.
- Also known as
- Devman 2.0
- Leak site (Tor)
- http://devmanblggk7ddrtqj3tsocnayow3bwnozab2s4yhv4shpv6ueitjzid.onion
Most targeted countries
- United States 44
- France 9
- Svalbard and Jan Mayen 7
- Taiwan 7
- Brazil 6
- Canada 6
- Thailand 6
- South Africa 6
- China 5
- Japan 5
Most targeted sectors
- Technology 31
- Healthcare 28
- Financial Services 16
- Professional Services 15
- Government & Defense 14
- Retail & E-Commerce 11
- Manufacturing 9
- Agriculture and Food Production 7
- Hospitality 5
- Transportation 5