Ransomware group
Netrunner ransomware: victims and leak site activity
The Netrunner ransomware group has listed 10 victims on its leak site since April 2026; its latest post is from 8 October 2026. Most affected countries: United States, Japan and India. Most targeted sector: Healthcare.
Total posts
10
First seen
2026-04-03
Latest post
2026-10-08
Countries hit
6
About Netrunner
NetRunner is a ransomware group active from at least 2025 targeting diverse sectors including healthcare, telecommunications, manufacturing, and agriculture across Japan, Italy, the US, and Jordan, notably demanding a $100M ransom from Nippon Medical School Musashi Kosugi Hospital.
- Leak site (Tor)
- http://netrunrsb3bivj5gnwajzxlig5qkteb6edgthxj7fmsvhkzxtwfxwaad.onion
- Profile
- ransomware.live
Most targeted countries
All countries →Most targeted sectors
- Healthcare 3
- Retail & E-Commerce 2
- Agriculture and Food Production 1
- Manufacturing 1
- Technology 1
- Transportation 1
Netrunner victims per year
All 10 victims
Search every post in the full table.| Victim | Country | Sector | Discovered |
|---|---|---|---|
| Mid Atlantic Gynecologic Oncology and Pelvic Surgery Associates | United States | Healthcare | |
| M** A******* G********** O******* a** P***** S****** A********* | United States | — | |
| Precon Marine Inc | — | Transportation | |
| Main Place Mall | Malaysia | Retail & E-Commerce | |
| Jordan India Fertilizer Company | Jordan | Agriculture and Food Production | |
| Harman Fitness | United States | Retail & E-Commerce | |
| Nippon Medical School Musashi Kosugi Hospital | Japan | Healthcare | |
| Shiraume Hospital | Japan | Healthcare | |
| GEG Telecomunicazioni | Italy | Technology | |
| Seoyon E-Hwa Summit | India | Manufacturing |