Ransomware group
Metaencryptor ransomware: victims and leak site activity
The Metaencryptor ransomware group has listed 57 victims on its leak site since August 2023; its latest post is from 12 October 2026. Most affected countries: United States, Germany and Canada. Most targeted sector: Manufacturing.
Total posts
57
First seen
2023-08-16
Latest post
2026-10-12
Countries hit
11
About Metaencryptor
MetaEncryptor is a ransomware group first observed in mid-2023, targeting medium-to-large enterprises in legal, technology, logistics, manufacturing, and finance sectors primarily in the UK, Europe, and Southeast Asia, using AES-256/RSA-2048 encryption and double extortion.
- Leak site (Tor)
- https://metacrptmytukkj7ajwjovdpjqzd7esg5v3sg344uzhigagpezcqlpyd.onion
- Profile
- ransomware.live
Most targeted countries
- United States 22
- Germany 10
- Canada 5
- Japan 3
- South Korea 2
- Austria 1
- Belgium 1
- United Kingdom 1
- Indonesia 1
- Luxembourg 1
Most targeted sectors
- Manufacturing 13
- Professional Services 11
- Technology 7
- Healthcare 6
- Retail & E-Commerce 5
- Transportation 3
- Agriculture and Food Production 2
- Education 2
- Energy & Utilities 2
- Financial Services 1