Ransomware group

Kraken ransomware: victims and leak site activity

The Kraken ransomware group has listed 25 victims on its leak site since February 2025; its latest post is from 13 November 2025. Most affected countries: United States, Canada and Spain. Most targeted sector: Technology.

Total posts 25
First seen 2025-02-09
Latest post 2025-11-13
Countries hit 10

About Kraken

Kraken is a Russian-speaking ransomware group that emerged in February 2025, believed to have links to the HelloKitty operation, employing a RaaS model notable for a benchmarking step that measures victim machine speed to optimize encryption, and in September 2025 launched an underground criminal forum called "The Last Haven Board."

Leak site (Tor)
http://krakenccj3wr23452a4ibkbkuph4d6soyx2xgjoogtuamc3m7u7wemad.onion

Kraken victims per year

25 2025

All 25 victims

Search every post in the full table.
Victim Country Sector Discovered
www.pointcag.com United States Agriculture and Food Production
www.ronvil.com United States Professional Services
The Last Haven Board
www.mada.com.kw Kuwait Technology
www.optyma.co.uk United Kingdom Technology
www.pomerandboccia.com Canada Professional Services
www.wheelsauto.com Canada Transportation
www.georgeallenconstruction.com Manufacturing
www.ultrarapit.net Spain Transportation
www.humac.dk Denmark Technology
www.prival.com Canada Technology
www.skcounsel.com United States Professional Services
www.continental.aero Germany Manufacturing
www.sanmarti.es Spain Transportation
www.anubis-cosmetics.com Spain Retail & E-Commerce
www.floralimited.com Bangladesh Technology
www.circul-aire.com, www.dectron.com Canada Manufacturing
www.kvhealth.net United States Healthcare
www.selt-sistemi.com Italy Technology
Kitty cookies Retail & E-Commerce
www.cisco.com United States Technology
www.cdprojekt.com Poland Technology
www.mgl.law United States Professional Services
www.fudpucker.com United States Hospitality
ctntelco.com United States Technology