Ransomware group
Insomnia ransomware: victims and leak site activity
The Insomnia ransomware group has listed 49 victims on its leak site since February 2026; its latest post is from 7 September 2026. Most affected countries: United States, Brazil and Panama. Most targeted sector: Healthcare.
Total posts
49
First seen
2026-02-07
Latest post
2026-09-07
Countries hit
4
About Insomnia
Insomnia is a data-theft and extortion group that emerged in October 2025, targeting primarily US-based healthcare organizations — stealing patient files and threatening public exposure rather than encrypting files — and avoiding former Soviet states, consistent with Russian-speaking cybercrime norms.
Most targeted countries
- United States 46
- Brazil 1
- Panama 1
- Singapore 1
Most targeted sectors
- Healthcare 19
- Professional Services 11
- Technology 5
- Manufacturing 4
- Hospitality 2
- Agriculture and Food Production 1
- Energy & Utilities 1
- Financial Services 1
- Government & Defense 1