Ransomware group
Insomnia ransomware: victims and leak site activity
The Insomnia ransomware group has listed 53 victims on its leak site since February 2026; its latest post is from 5 October 2026. Most affected countries: United States, Brazil and Panama. Most targeted sector: Healthcare.
Total posts
53
First seen
2026-02-07
Latest post
2026-10-05
Countries hit
4
About Insomnia
Insomnia is a data-theft and extortion group that emerged in October 2025, targeting primarily US-based healthcare organizations — stealing patient files and threatening public exposure rather than encrypting files — and avoiding former Soviet states, consistent with Russian-speaking cybercrime norms.
- Leak site (Tor)
- http://i62huw7ve22rpyw6lnq3kmfump2dmsg4xpveec3ere73njwatrz74gad.onion
- Profile
- ransomware.live
Most targeted countries
- United States 50
- Brazil 1
- Panama 1
- Singapore 1
Most targeted sectors
- Healthcare 21
- Professional Services 13
- Technology 5
- Manufacturing 4
- Hospitality 2
- Agriculture and Food Production 1
- Energy & Utilities 1
- Financial Services 1
- Government & Defense 1