Ransomware Group intelligence

Black X

Active

Track Black X with 17 published victims and 1 known leak locations in a single intelligence view.

BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Victims 17 Known published victims in this dataset
First discovered 2026-06-02 Earliest victim discovery date
Last discovered 2026-09-01 Latest victim discovery date
Inactive since 11 days Days since the latest known victim
Top country Korea, Republic of 6 victims
Known locations 1 Leak or negotiation infrastructure tracked

Overview

Black X is tracked by Breach House as a ransomware group with 17 published victims.

Korea, Republic of is currently the most targeted country in this dataset.

1 known leak locations are currently associated with this group.

Leak Status Distribution

  • Leaked 3 50.0%
  • Pending 3 50.0%
  • Deleted 0 0.0%

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (1)

    Label Type Availability Links
    Leak location 1 Onion service Down checked 4h ago blackxppq2jvqyg4slyg3sbszv7ib2avaaycvhff5qipgdoepqi57xyd.onion

    Top Activity Sectors (7)

    Victims (17)

    Search, filter and paginate the victim timeline for Black X. Showing 1–17 of 17.

    Type Target Discovered Country Business Category Intel Link Leak status
    Ransomware iwin id32398 View details Korea, Republic of IT pending
    Ransomware iwin id32398 View details Korea, Republic of IT pending
    Ransomware FE CREDIT id32306 View details Viet Nam Finance / Legal / Insurance pending
    Ransomware FE CREDIT id32306 View details Viet Nam Finance / Legal / Insurance pending
    Ransomware i-one id32307 View details Korea, Republic of IT pending
    Ransomware i-one id32307 View details Korea, Republic of IT pending
    Ransomware sanaa hospital id31029 View details Yemen Healthcare / Pharma leaked
    Ransomware sanaa hospital id31029 View details Yemen Healthcare / Pharma leaked
    Ransomware Tong Kong E & E Sdn Bhd (95907X) id31030 View details Malaysia Other leaked
    Ransomware Tong Kong E & E Sdn Bhd (95907X) id31030 View details Malaysia Other leaked
    Ransomware sanaa id30613 View details Yemen Education leaked
    Ransomware sanaa id30613 View details Yemen Education leaked
    Ransomware Daechang Solution id29850 View details Korea, Republic of IT
    Ransomware elektroverband-bayern id29558 View details Germany NGOs / Associations
    Ransomware African National Congress id29559 View details South Africa NGOs / Associations
    Ransomware case.law id29560 View details Philippines NGOs / Associations
    Ransomware Wonjin Plastic Surgery id29561 View details Korea, Republic of Manufacturing / Engineering