Ransomware Group intelligence
Nightspire
ActiveTrack Nightspire with 333 published victims and 11 known leak locations in a single intelligence view.
Overview
Nightspire is tracked by Breach House as a ransomware group with 333 published victims.
United States is currently the most targeted country in this dataset.
11 known leak locations are currently associated with this group.
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (11)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 1 | Onion service | Unknown | nspireyzmvapgiwgtuoznlafqvlyz7ey6himtgn5bdvdcowfyto3yryd.onion |
| Leak location 2 | Onion service | Unknown | nspireyzmvapgiwgtuoznlafqvlyz7ey6himtgn5bdvdcowfyto3yryd.onion |
| Leak location 3 | Onion service | Unknown | nspireyzmvapgiwgtuoznlafqvlyz7ey6himtgn5bdvdcowfyto3yryd.onion |
| Leak location 4 | Onion service | Unknown | a2lyiiaq4n74tlgz4fk3ft4akolapfrzk772dk24iq32cznjsmzpanqd.onion |
| Leak location 5 | Onion service | Unknown | a2lyiiaq4n74tlgz4fk3ft4akolapfrzk772dk24iq32cznjsmzpanqd.onion |
| Leak location 6 | Onion service | Unknown | nspirebcv4sy3yydtaercuut34hwc4fsxqqv4b4ye4xmo6qp3vxhulqd.onion |
| Leak location 7 | Onion service | Unknown | nspirebcv4sy3yydtaercuut34hwc4fsxqqv4b4ye4xmo6qp3vxhulqd.onion |
| Leak location 8 | Onion service | Unknown | nspiremkiq44zcxjbgvab4mdedyh2pzj5kzbmvftcugq3mczx3dqogid.onion |
| Leak location 9 | Onion service | Unknown | nspiremkiq44zcxjbgvab4mdedyh2pzj5kzbmvftcugq3mczx3dqogid.onion |
| Leak location 10 | Onion service | Unknown | nspire7lugml7ybqyjaaxtsgrs4qn3fcon3lrjbih6wamttvdm5ke4qd.onion |
| Leak location 11 | Onion service | Unknown | nspirep7orjq73k2x2fwh2mxgh74vm2now6cdbnnxjk2f5wn34bmdxad.onion |
Top Activity Sectors
No sector intelligence available.
Ransom Notes (0)
▼No ransom notes available for this group.
Tools Used
▼No tools used available.
YARA Rules (0)
▼No YARA rules available.
Indicators of Compromise (0)
▼No IoCs available for this group.
Negotiation Chats (0)
▼No negotiation chats available.
Research Sources
No external research sources linked yet.
Victims (333)
Search, filter and paginate the victim timeline for Nightspire. Showing 101–200 of 333.
| Type | Target | Discovered | Country | Business Category | Intel Link |
|---|---|---|---|---|---|
| Ransomware | The GMP Group id27792 View details | Singapore | Services | — | |
|
- Financial Documents- Salaries Documents- Resumes & CV |
|||||
| Ransomware | S**n* *o**tr***io* id27791 View details | Construction / Real Estate | — | ||
|
Data is not available now. |
|||||
| Ransomware | P**S****E id27790 View details | Manufacturing / Engineering | — | ||
|
Data is not available now. |
|||||
| Ransomware | *ep***e M***a*i***, Inc. id27789 View details | Transportation / Travel / Logistics | — | ||
|
Data is not available now. |
|||||
| Ransomware | T*** Defense id27788 View details | Manufacturing / Engineering | — | ||
|
Data is not available now. |
|||||
| Ransomware | A****ia**on O*A**A id27787 View details | Transportation / Travel / Logistics | — | ||
|
Data is not available now. |
|||||
| Ransomware | CERUMO Co., Ltd id27760 View details | Japan | Manufacturing / Engineering | — | |
|
Data is not accessible for now |
|||||
| Ransomware | Beltran & Garcia Financial Investment SLU id27759 View details | Spain | Finance / Legal / Insurance | — | |
|
Data is not available now. |
|||||
| Ransomware | JT-ATFP, LLC id27758 View details | United States | Manufacturing / Engineering | — | |
|
- Classified Contracts- Employee Information- ATFP Projects- Vulnerability Assessment Docs- FOUO Files- DOD Projects |
|||||
| Ransomware | *d**n*** V**i*l* **s**b***s id27757 View details | Communication / Marketing | — | ||
|
Data is not available now. |
|||||
| Ransomware | D**o*s** Fr**e* *A id27654 View details | Other | — | ||
|
Data is not available now. |
|||||
| Ransomware | S***h***t*** **n**r***e of **v***h-**y A***n***ts id27649 View details | NGOs / Associations | — | ||
|
Data is not available now. |
|||||
| Ransomware | OTNet id27647 View details | Japan | Telecommunications | — | |
|
[AI generated] N/A |
|||||
| Ransomware | Florida Therapy Services id27646 View details | United States | Healthcare / Medicine | — | |
|
[AI generated] Florida Therapy Services is a mental health organization based in Florida, USA. It provides psychiatric services, psychotherapy, and substance abuse counseling, among other services for children, adolescents, adults, and families. The organization specializes in home, school, community, and office-based treatment, aiming to support individuals struggling with various mental health issues. |
|||||
| Ransomware | *h**i **o**e** id27641 View details | Public Sector | — | ||
|
Data is not available now. |
|||||
| Ransomware | *H* G** **O** id27640 View details | IT | — | ||
|
Data is not available now. |
|||||
| Ransomware | A*v**c** *e**c** ***em**i** id27609 View details | Manufacturing / Engineering | — | ||
|
Data is not available now. |
|||||
| Ransomware | Anbogen Therapeutics Inc. id27574 View details | Taiwan, Province of China | Healthcare / Pharma | — | |
|
Data is not available now. |
|||||
| Ransomware | Eastex Environmental Laboratory id27573 View details | United States | Other | — | |
|
- Experimental Reports- Internal Documents- Financial & HR Documents |
|||||
| Ransomware | J***T*P, **C id27572 View details | Transportation / Travel / Logistics | — | ||
|
Data is not available now. |
|||||
| Ransomware | *n**g** T***a**ut*** **c id27571 View details | Taiwan, Province of China | Healthcare / Pharma | — | |
|
Data is not available now. |
|||||
| Ransomware | HLF Heizung-Sanitär GmbH id27570 View details | Germany | Transportation / Travel / Logistics | — | |
|
Data is not available now. |
|||||
| Ransomware | *o**e-*a** du ***n*c**** id27522 View details | Other | — | ||
|
Data is not available now. |
|||||
| Ransomware | *L* **i**n*-**n**** GmbH id27521 View details | Other | — | ||
|
Data is not available now. |
|||||
| Ransomware | **l**a* & ***c** **n*n**** I**e*t**** *L* id27520 View details | Other | — | ||
|
Data is not available now. |
|||||
| Ransomware | Cannavative Group id27508 View details | United States | Other | — | |
|
- QuickBook Files- METRC DB-Employeement & Clients Documents |
|||||
| Ransomware | SAS CAP ESTEL HOTEL id27507 View details | France | Hospitality / Food & Beverage / Tourism | — | |
|
Data is not available now. |
|||||
| Ransomware | Semenya Furumele Consulting Engineers id27506 View details | South Africa | Services | — | |
|
Data is not available now. |
|||||
| Ransomware | **o**d* *h**a*y ***v***s id27505 View details | Other | — | ||
|
Data is not available now. |
|||||
| Ransomware | O**e* id27501 View details | Other | — | ||
|
Data is not available now. |
|||||
| Ransomware | IASMOS id27494 View details | Greece | Other | — | |
|
Data is not available now. |
|||||
| Ransomware | Fidanque Hermanos e Hijos, S.A id27493 View details | Panama | Other | — | |
|
- Financial Documents- Internal Documents- MSSQL Database |
|||||
| Ransomware | **V**C** *E**C** ***EM**I** id27492 View details | Other | — | ||
|
Data is not available now. |
|||||
| Ransomware | GD France id27458 View details | France | Other | — | |
|
Data is not available now. |
|||||
| Ransomware | G* *r**c* id27452 View details | Other | — | ||
|
Data is not available now. |
|||||
| Ransomware | **ste* **vi**n***t** **b**a**** id27385 View details | Other | — | ||
|
Data is not available now. |
|||||
| Ransomware | G* *r**n*e id27377 View details | Other | — | ||
|
Data is not available now. |
|||||
| Ransomware | S*m**y* **ru**l* ***s**t**g **gi****r* id27376 View details | Other | — | ||
|
Data is not available now. |
|||||
| Ransomware | CFTC Metallurgie id27324 View details | France | Manufacturing / Engineering | — | |
|
Data is not available now. |
|||||
| Ransomware | S** *A* ***E* **T*L id27316 View details | Other | — | ||
|
Data is not available now. |
|||||
| Ransomware | **n*a**t** **o*p id27311 View details | Other | — | ||
|
Data is not available now. |
|||||
| Ransomware | Giaroli S.A.S id27286 View details | Italy | Other | — | |
|
Data is not available now. |
|||||
| Ransomware | I**M** id27285 View details | Other | — | ||
|
Data is not available now. |
|||||
| Ransomware | NIXVAL IT Infrastructure id27280 View details | Spain | Construction / Real Estate | — | |
|
Data is not available now. |
|||||
| Ransomware | Taylor County Property Appraiser Office id27275 View details | United States | Communication / Marketing | — | |
|
- SQL Data- All Pics- Scan Files |
|||||
| Ransomware | E-Fci id27269 View details | United States | Other | — | |
|
Data is not available now. |
|||||
| Ransomware | JJR Engineering & Fabrication id27268 View details | United States | Manufacturing / Engineering | — | |
|
Data is not available now. |
|||||
| Ransomware | Big Brothers Big Sisters id27260 View details | United States | Education | — | |
|
- Students List- Background Check Records- Internal Documents |
|||||
| Ransomware | Tecnoedil S.A. Constructora id27259 View details | Paraguay | Communication / Marketing | — | |
|
Data is not available now. |
|||||
| Ransomware | CFTC Métallurgie id27258 View details | France | Manufacturing / Engineering | — | |
|
- Customer Contacts- Internal Documents |
|||||
| Ransomware | Taylor County Property Appraiser's Office id27224 View details | United States | Communication / Marketing | — | |
|
Data is not available now. |
|||||
| Ransomware | T**n*e**l S.A. C***t**c***a id27194 View details | Other | — | ||
|
Data is not available now. |
|||||
| Ransomware | C*T* M**al***g*e id27193 View details | Other | — | ||
|
Data is not available now. |
|||||
| Ransomware | T****r ****t* P**p***y ***r***e*** **f**e id27192 View details | Other | — | ||
|
Data is not available now. |
|||||
| Ransomware | Stalwart Development Group LLC id27175 View details | United States | IT | — | |
|
Data is not available now. |
|||||
| Ransomware | CPG Documentation id27158 View details | United States | Other | — | |
|
Data is not available now. |
|||||
| Ransomware | MAGNETA LOGISTICS, UAB id27156 View details | Lithuania | Transportation / Travel / Logistics | — | |
|
Data is not available now. |
|||||
| Ransomware | 11th Street Veterinary Hospital id27155 View details | United States | Healthcare / Pharma | — | |
|
Data is not available now. |
|||||
| Ransomware | thallos AG id27153 View details | Germany | Other | — | |
|
Data is not available now. |
|||||
| Ransomware | B** *r*t**r* *i* **s***s of ***te** *i**o**i id27130 View details | Other | — | ||
|
Data is not available now. |
|||||
| Ransomware | **a****t ***el*****t Gr*up L** id27091 View details | Other | — | ||
|
Data is not available now. |
|||||
| Ransomware | KLEIN IBERICA SA id27088 View details | Spain | Communication / Marketing | — | |
|
- Internal Documents- Financial Data |
|||||
| Ransomware | N*X*** ** I**r****c**** id27087 View details | Other | — | ||
|
Data is not available now. |
|||||
| Ransomware | AKOL LAW id27048 View details | Türkiye | Finance / Legal / Insurance | — | |
|
- Internal Documents- Financial Documents |
|||||
| Ransomware | K**I* I***I*A *A id27047 View details | Other | — | ||
|
Data is not available now. |
|||||
| Ransomware | Union Laitiere de la Meuse id27017 View details | France | Other | — | |
|
Data is not available now. |
|||||
| Ransomware | IOTA HOTEL TBILISI id26998 View details | Georgia | Hospitality / Food & Beverage / Tourism | — | |
|
- VIP Lists- Invoices, Passport...- Financial Documents |
|||||
| Ransomware | Bain Oil Company id26975 View details | United States | Energy | — | |
|
Data is not available now. |
|||||
| Ransomware | SIMETRI Inc id26974 View details | United States | Services | — | |
|
Data is not available now. |
|||||
| Ransomware | Hicare.net Inc id26929 View details | United States | Services | — | |
|
Data is not available now. |
|||||
| Ransomware | PriceTable id26927 View details | United States | Communication / Marketing | — | |
|
Data is not available now. |
|||||
| Ransomware | hicare id26926 View details | United States | Other | — | |
|
Data is not available now. |
|||||
| Ransomware | GoHighLevel id26925 View details | United States | Other | — | |
|
GoHighLevel, also known as HighLevel, is a Dallas, Texas-based software company in the Other sector that offers an all-in-one sales and marketing platform for agencies and businesses. Its platform combines CRM, landing pages, forms, calendars, marketing automation, email and SMS messaging, and white-label resale features under one system. The company presents itself as a tool for agencies to capture leads, automate follow-up, and manage client workflows from a single dashboard. It was listed as a ransomware victim associated with nightspire. |
|||||
| Ransomware | [Suspended] #2036 id26967 View details | United States | Other | ||
|
We have suspended this notification since we have doubt about the claim |
|||||
| Ransomware | Whipflip id26924 View details | United States | Other | — | |
|
Data is not available now. |
|||||
| Ransomware | US.MAD DOG CONSTRUCTION id26912 View details | United States | Construction / Real Estate | — | |
|
Data is not available now. |
|||||
| Ransomware | **d* **r *e*s id26868 View details | Other | — | ||
|
Data is not available now. |
|||||
| Ransomware | *i***q** **r**n*s * H**o* id26867 View details | Other | — | ||
|
Data is not available now. |
|||||
| Ransomware | OFFICINE FRATELLI AMADORI snc id26838 View details | Italy | Other | — | |
|
Data is not available now. |
|||||
| Ransomware | Vera, spool. s.r.o. id26837 View details | Czechia | Other | — | |
|
Data is not available now. |
|||||
| Ransomware | Regal Building Materials Ltd. id26789 View details | Canada | Construction / Real Estate | — | |
|
Data is not available now. |
|||||
| Ransomware | Pearl Institute for Clinical Research LLC id26689 View details | United States | Healthcare / Pharma | — | |
|
Data is not available for now. |
|||||
| Ransomware | TCPN Inc id26664 View details | United States | Services | — | |
|
Data is not available now. |
|||||
| Ransomware | Fico Ferragens Indústria e Comércio Ltda id26663 View details | Brazil | Services | — | |
|
Data is not available now. |
|||||
| Ransomware | RS Development LLC id26662 View details | United States | IT | — | |
|
Data is not available now. |
|||||
| Ransomware | Ausgewählt Vertriebs GmbH id26661 View details | Germany | Other | — | |
|
Data is not available now. |
|||||
| Ransomware | MD Charts id26659 View details | United States | Other | — | |
|
Data is not available now. |
|||||
| Ransomware | American Piping & Boiler Co id26649 View details | United States | Energy | — | |
|
Data is not available now. |
|||||
| Ransomware | KFZ Sauter GmbH Co. KG id26646 View details | Germany | Finance / Legal / Insurance | — | |
|
- Banking Finance- Accounting Buchhaltung- Contracts Legal- GDPR Personal Data- Documents Images |
|||||
| Ransomware | Wilson Workflow Solutions id26631 View details | United States | Services | — | |
|
Data is not available now. |
|||||
| Ransomware | *m**i**n ***i*g & *o**e* Co id26580 View details | Other | — | ||
|
Data is not available now. |
|||||
| Ransomware | *e**a*c, F**t**i, *il**o id26566 View details | United States | Other | — | |
|
Data is not accessible for now. |
|||||
| Ransomware | *F* *a**e* G**H & Co. *G id26565 View details | Germany | Other | — | |
|
Data is not available now. |
|||||
| Ransomware | **ci**n* *us*i** LLC id26564 View details | United States | Services | — | |
|
Data is not accessible for now |
|||||
| Ransomware | Adirondack Networks id26563 View details | United States | Telecommunications | — | |
|
Internal Documents. |
|||||
| Ransomware | C**U*O Co., Ltd id26562 View details | Japan | Services | — | |
|
Data is not available now. |
|||||
| Ransomware | Z*e***d M**ti* id26561 View details | Germany | Other | — | |
|
Data is not available now. |
|||||
| Ransomware | A.T.I di Zuinisi srl id26560 View details | Italy | Other | — | |
|
[AI generated] N/A |
|||||
| Ransomware | PERLITE, S.L.U id26559 View details | Spain | Other | — | |
|
- Drawings- Customized data according to clients |
|||||
| Ransomware | S.Y.L Pastilhas e Sapatas de Freios id26558 View details | Brazil | Communication / Marketing | — | |
|
[AI generated] "S.Y.L Pastilhas e Sapatas de Freios" is a Brazilian company that specializes in the manufacture and marketing of brake pads and shoes. They provide products for a wide range of vehicles, maintaining focus on quality and performance for its customers. Besides, the company develops and executes technical and commercial training for professionals, promoting expertise in the automotive repair market. |
|||||