Ransomware Group intelligence
Nightspire
ActiveTrack Nightspire with 333 published victims and 11 known leak locations in a single intelligence view.
Overview
Nightspire is tracked by Breach House as a ransomware group with 333 published victims.
United States is currently the most targeted country in this dataset.
11 known leak locations are currently associated with this group.
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (11)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 1 | Onion service | Unknown | nspireyzmvapgiwgtuoznlafqvlyz7ey6himtgn5bdvdcowfyto3yryd.onion |
| Leak location 2 | Onion service | Unknown | nspireyzmvapgiwgtuoznlafqvlyz7ey6himtgn5bdvdcowfyto3yryd.onion |
| Leak location 3 | Onion service | Unknown | nspireyzmvapgiwgtuoznlafqvlyz7ey6himtgn5bdvdcowfyto3yryd.onion |
| Leak location 4 | Onion service | Unknown | a2lyiiaq4n74tlgz4fk3ft4akolapfrzk772dk24iq32cznjsmzpanqd.onion |
| Leak location 5 | Onion service | Unknown | a2lyiiaq4n74tlgz4fk3ft4akolapfrzk772dk24iq32cznjsmzpanqd.onion |
| Leak location 6 | Onion service | Unknown | nspirebcv4sy3yydtaercuut34hwc4fsxqqv4b4ye4xmo6qp3vxhulqd.onion |
| Leak location 7 | Onion service | Unknown | nspirebcv4sy3yydtaercuut34hwc4fsxqqv4b4ye4xmo6qp3vxhulqd.onion |
| Leak location 8 | Onion service | Unknown | nspiremkiq44zcxjbgvab4mdedyh2pzj5kzbmvftcugq3mczx3dqogid.onion |
| Leak location 9 | Onion service | Unknown | nspiremkiq44zcxjbgvab4mdedyh2pzj5kzbmvftcugq3mczx3dqogid.onion |
| Leak location 10 | Onion service | Unknown | nspire7lugml7ybqyjaaxtsgrs4qn3fcon3lrjbih6wamttvdm5ke4qd.onion |
| Leak location 11 | Onion service | Unknown | nspirep7orjq73k2x2fwh2mxgh74vm2now6cdbnnxjk2f5wn34bmdxad.onion |
Top Activity Sectors
No sector intelligence available.
Ransom Notes (0)
▼No ransom notes available for this group.
Tools Used
▼No tools used available.
YARA Rules (0)
▼No YARA rules available.
Indicators of Compromise (0)
▼No IoCs available for this group.
Negotiation Chats (0)
▼No negotiation chats available.
Research Sources
No external research sources linked yet.
Victims (333)
Search, filter and paginate the victim timeline for Nightspire. Showing 301–333 of 333.
| Type | Target | Discovered | Country | Business Category | Intel Link |
|---|---|---|---|---|---|
| Ransomware | Wilmington Personal Injury Lawyer - DPLAW id19236 View details | United States | Finance / Legal / Insurance | — | |
|
Wilmington Personal Injury Lawyer - DPLAW(US) |
|||||
| Ransomware | Compliance Consulting Group id19235 View details | United States | Services | — | |
|
Compliance Consulting Group (US) |
|||||
| Ransomware | Mid-America POOL RENOVATION, Inc id19234 View details | United States | Services | — | |
|
Mid-America POOL RENOVATION, Inc (US) |
|||||
| Ransomware | REFFINDO-PT Pupk Indonesia id19144 View details | Indonesia | Other | — | |
|
REFFINDO-PT Pupk Indonesia (Indonesia) |
|||||
| Ransomware | Tanaka Electronics Taiwan Co., LTD id19138 View details | Taiwan, Province of China | Services | — | |
|
Tanaka Electronics Taiwan Co., LTD |
|||||
| Ransomware | SUMITOMOTOOL id19137 View details | Türkiye | Other | — | |
|
SUMITOMOTOOL(TURKEY) |
|||||
| Ransomware | INI Investments id19136 View details | Egypt | Finance / Legal / Insurance | — | |
|
INI Investments(Egypt) |
|||||
| Ransomware | STORT id19135 View details | Sweden | Other | — | |
|
STORT(Sweden) |
|||||
| Ransomware | Powiatowy Urząd Pracy w Żorach id19134 View details | Poland | Communication / Marketing | — | |
|
Powiatowy Urząd Pracy w Żorach(Poland) |
|||||
| Ransomware | OMCI S.p.a id19133 View details | Italy | Other | — | |
|
OMCI S.p.a(Italy) |
|||||
| Ransomware | Sistel Connections id19132 View details | Italy | Other | — | |
|
Sistel Connections(Italy) |
|||||
| Ransomware | InterLOGIC Inc id19131 View details | United States | Services | — | |
|
InterLOGIC Inc(US) |
|||||
| Ransomware | Secretaria de Educacion de Veracruz, SEV id19130 View details | Mexico | Other | — | |
|
Secretaria de Educacion de Veracruz, SEV(Mexico) |
|||||
| Ransomware | Nicera id19129 View details | Japan | Other | — | |
|
Nicera(Japan) |
|||||
| Ransomware | Emotrans Chile id19128 View details | Chile | Other | — | |
|
Emotrans Chile(Chile) |
|||||
| Ransomware | Zaphira Uniformes id19127 View details | Argentina | Other | — | |
|
Zaphira Uniformes (Argentina) |
|||||
| Ransomware | Audit Accounting Advisory Taxes id19126 View details | Luxembourg | Finance / Legal / Insurance | — | |
|
Audit Accounting Advisory Taxes (Luxemburg) |
|||||
| Ransomware | 6ixty8ight id18683 View details | Hong Kong | Other | — | |
|
6ixty8ight(HongKong) |
|||||
| Ransomware | Sanyo Special Steel India Pvt. Ltd. id18682 View details | India | Manufacturing / Engineering | — | |
|
Sanyo Special Steel India Pvt. Ltd.(India) |
|||||
| Ransomware | KHAZMODAN STUDIOS id18681 View details | Korea, Republic of | Other | — | |
|
KHAZMODAN STUDIOS(Korea) |
|||||
| Ransomware | MISR AL MAHABA HOSPITAL id18680 View details | Egypt | Healthcare / Pharma | — | |
|
MISR AL MAHABA HOSPITAL(Egypt) |
|||||
| Ransomware | Far East Consortium id18482 View details | Hong Kong | Other | — | |
|
Far East Consortium (Hong Kong) |
|||||
| Ransomware | Views: 17 id18480 View details | Other | — | ||
|
Views: 17 appears as an organization in the Other sector with a United States location in threat-intelligence victim listings. Publicly available intelligence does not provide reliable detail on its offerings, so it is best described generically as an entity operating outside a more specific industry classification. The listing is used as a catalog entry for ransomware monitoring rather than as proof of compromise or disclosure. Views: 17 was listed as a ransomware victim associated with nightspire. |
|||||
| Ransomware | Bridgewater Retirement Community id18481 View details | United States | Public Sector | ||
|
Bridgewater Retirement Community(United States) |
|||||
| Ransomware | Tanaka Electronics Taiwan Co.,LTD id18436 View details | Taiwan, Province of China | Services | — | |
|
Tanaka Electronics Taiwan Co.,LTD (Taiwan) |
|||||
| Ransomware | Waihong Environmental Services Limited id18435 View details | Hong Kong | Services | — | |
|
Waihong Environmental Services Limited (Hong Kong) |
|||||
| Ransomware | Wilson Re Limited id18434 View details | Taiwan, Province of China | Other | — | |
|
Wilson Re (Taiwan) Limited (Taiwan) |
|||||
| Ransomware | Raja Ferry Port Public Company Limited id18379 View details | Thailand | Public Sector | — | |
|
Raja Ferry Port Public Company Limited (Thailand) |
|||||
| Ransomware | Far East Consortium International Limited id18378 View details | Hong Kong | Services | — | |
|
Far East Consortium International Limited (Hong Kong) |
|||||
| Ransomware | Business Ledger Limited id18377 View details | United Kingdom | Services | — | |
|
Business Ledger Limited(United Kingdom) |
|||||
| Ransomware | Tohpe Corporation id18376 View details | Japan | Services | — | |
|
Tohpe Corporation (Japan) |
|||||
| Ransomware | Baily International of Atlanta id18375 View details | United States | Public Sector | — | |
|
Baily International of Atlanta(United States) |
|||||
| Ransomware | Hydro-Vacuum S.A. id18374 View details | Poland | Other | — | |
|
Hydro-Vacuum S.A.(Poland) |
|||||