Ransomware group

Vect ransomware: victims and leak site activity

The Vect ransomware group has listed 25 victims on its leak site since January 2026; its latest post is from 15 April 2026. Most affected countries: Brazil, United States and India. Most targeted sector: Technology.

Total posts 25
First seen 2026-01-06
Latest post 2026-04-15
Countries hit 12

About Vect

VECT is a RaaS group that launched its affiliate program in December 2025 with a five-tier revenue-sharing model and a formal partnership with BreachForums; its VECT 2.0 payload contains a critical encryption flaw that irreversibly destroys files larger than 128 KB rather than encrypting them.

Leak site (Tor)
http://breach5yz2b5lepmq4gaqwcon3jippw3bislhvvdavem5git55sy2nid.onion

Vect victims per year

25 2026

All 25 victims

Search every post in the full table.
Victim Country Sector Discovered
S&PGLOBAL, LiteLLM/Trivy campaign (TeamPCP) United States Technology
guesty, LITELLM/TRIVY CAMPAIGN (TEAMPCP) Israel Technology
Verlat Energy Peru Energy & Utilities
USHA International Limited India Manufacturing
jdaas India Technology
Casas del Mediterraneo Spain Hospitality
keliweb Italy Technology
Sus Insumos S.A.S Colombia Agriculture and Food Production
Del Rey Brazil Professional Services
Auvo Brazil Technology
Grupo VerdeAzul Namibia Financial Services
Was Madeiras Brazil Manufacturing
Mutualista Imbabura Ecuador Financial Services
EnerTec South Africa Manufacturing
ApexHospitals India Healthcare
MB Contabilidade Brazil Professional Services
s***om****x United States Healthcare
a*f***a Healthcare
****360.com United States Healthcare
***wire United States Professional Services
for******a****ng United States Financial Services
pay*** Egypt Financial Services
Pappytech India Retail & E-Commerce
Federal University of Sergipe Brazil Education
Hytec South Africa South Africa Manufacturing