Ransomware group
M3rx ransomware: victims and leak site activity
The M3rx ransomware group has listed 37 victims on its leak site since April 2026; its latest post is from 14 August 2026. Most affected countries: United States, Germany and United Kingdom. Most targeted sector: Professional Services.
Total posts
37
First seen
2026-04-29
Latest post
2026-08-14
Countries hit
18
About M3rx
M3rx is a small ransomware group first observed in 2025, using AES-CTR/AES-GCM encryption and targeting organizations in England, the US, Australia, Germany, Italy, and Switzerland, with around eight claimed victims including a Sydney-based property firm.
Most targeted countries
- United States 8
- Germany 4
- United Kingdom 4
- Australia 3
- Canada 3
- Spain 2
- Italy 2
- Argentina 1
- Brazil 1
- Switzerland 1
Most targeted sectors
- Professional Services 13
- Retail & E-Commerce 6
- Technology 6
- Manufacturing 2
- Transportation 2
- Agriculture and Food Production 1
- Healthcare 1