Ransomware group

Dunghill ransomware: victims and leak site activity

The Dunghill ransomware group has listed 16 victims on its leak site since April 2023; its latest post is from 1 July 2025. Most affected countries: United Kingdom, Bolivia and Brazil. Most targeted sector: Professional Services.

Total posts 16
First seen 2023-04-10
Latest post 2025-07-01
Countries hit 6

About Dunghill

Dunghill Leak is the data extortion site operated by the Dark Angels ransomware group, active since early 2023, targeting large enterprises across healthcare, finance, industrial, and technology sectors using a highly selective non-affiliate model, and responsible for a record-breaking $75 million ransom payment in 2024.

Also known as
darkangel
Leak site (Tor)
http://nsalewdnfclsowcal6kn5csm4ryqmfpijznxwictukhrgvz2vbmjjjyd.onion

Dunghill victims per year

11 2023
3 2024
2 2025

All 16 victims

Search every post in the full table.
Victim Country Sector Discovered
The Printing House Canada Professional Services
Linney United Kingdom Professional Services
Nuevatel Bolivia Professional Services
Nexperia United States Technology
Array Networks Taiwan Technology
Supply Technology Professional Services
Robins & Morton Professional Services
CannonDesign Professional Services
Roper & Vertafore Technology
Go-Ahead Group United Kingdom Transportation
Ropertech.com & Vertafore.com Technology
Sabre Corporation Transportation
Sysco Corporation Agriculture and Food Production
Gentex Corporation Manufacturing
ANDRADE GUTIERREZ & ZAGOPE Brazil Manufacturing
Incredible Technologies Retail & E-Commerce