Ransomware group
Everest ransomware: victims and leak site activity
The Everest ransomware group has listed 386 victims on its leak site since January 2022; its latest post is from 22 October 2026. Most affected countries: United States, Italy and Germany. Most targeted sector: Healthcare.
Total posts
386
First seen
2022-01-08
Latest post
2026-10-22
Countries hit
38
About Everest
Everest ransom group collects and analyzes information about their victims. They specialize in customer privacy data, financial information, databases, credit card information, and more. The Everest ransom group leaks the victim's data to the darknet and they announced that any victim that will not contact them will suffer from a data leak and they will not delete hist files for future usage.
- Leak site (Tor)
- http://everestndkvzcibcje2cqxhre2hmmybl3rn2gwzwsblz7gx6uryn5rad.onion
- Profile
- ransomware.live
Most targeted countries
- United States 118
- Italy 14
- Germany 13
- United Kingdom 13
- United Arab Emirates 12
- Japan 12
- Spain 10
- Canada 7
- Switzerland 6
- India 6
Most targeted sectors
- Healthcare 66
- Technology 65
- Professional Services 58
- Manufacturing 51
- Financial Services 38
- Retail & E-Commerce 21
- Energy & Utilities 20
- Government & Defense 16
- Transportation 16
- Agriculture and Food Production 9