Ransomware group
Ralord ransomware: victims and leak site activity
The Ralord ransomware group has listed 19 victims on its leak site since March 2025; its latest post is from 27 April 2025. Most affected countries: Brazil, Spain and Argentina. Most targeted sector: Manufacturing.
Total posts
19
First seen
2025-03-26
Latest post
2025-04-27
Countries hit
12
About Ralord
RALord is a ransomware group identified in March 2025 operating within the NOVA RaaS platform, targeting healthcare, education, hospitality, and IT sectors across multiple continents, using a Rust-based payload with an 85/15 affiliate revenue split; it later rebranded as "Nova."
Most targeted countries
All countries →Most targeted sectors
- Manufacturing 4
- Agriculture and Food Production 3
- Education 3
- Hospitality 2
- Retail & E-Commerce 2
- Technology 2
- Healthcare 1
- Professional Services 1
Ralord victims per year
All 19 victims
Search every post in the full table.| Victim | Country | Sector | Discovered |
|---|---|---|---|
| DIALLOG company | Canada | Technology | |
| HELUKABEL company | Germany | Manufacturing | |
| rawafid company | Saudi Arabia | Other | |
| agromate company | Malaysia | Agriculture and Food Production | |
| bettininformatica - suporteon company | Brazil | Technology | |
| Bio-Clima Service | Italy | Professional Services | |
| ARRCO LSM | Norway | Retail & E-Commerce | |
| NewHotel cloud company | Spain | Hospitality | |
| Al-Hejailan Group | Saudi Arabia | Manufacturing | |
| hasbco Company | United States | Retail & E-Commerce | |
| Tomio Ingeniería | Argentina | Manufacturing | |
| Élan Sportif Nantes | France | Education | |
| Ihara company | Brazil | Agriculture and Food Production | |
| Pere Claver grup | Spain | Healthcare | |
| Formosa Chang | Taiwan | Hospitality | |
| pereclaver.org | Spain | Education | |
| ihara.com.br | Brazil | Agriculture and Food Production | |
| tomioingenieria.com.ar | Argentina | Manufacturing | |
| ec-nantes.fr | France | Education |