Back to Threat Groups

clop

ACTIVE

ransomware group

🇷🇺Russia

Clop (also spelled Cl0p) is a financially motivated ransomware group attributed to the FIN11/TA505 threat cluster with assessed ties to Russia and Ukraine. The group pioneered mass exploitation of file-transfer vulnerabilities, most notably Accellion FTA (2020), GoAnywhere MFT (2023), and MOVEit Transfer (2023), the latter affecting over 2,700 organizations worldwide in what became one of the largest data-theft campaigns in history. Clop primarily relies on data extortion rather than encryption in recent campaigns.

Victims
1,317
records
First Discovered
Mar 13, 2020
victim
Last Discovered
Sep 23, 2026
victim
Inactive Since
7
days
Countries
60
hit
Avg Discount
—
no settlements

Group Activity

Last 12 months
13
Oct
2025
98
Nov
2025
1
Dec
2025
46
Jan
2026
79
Feb
2026
2
Mar
2026
1
Apr
2026
1
May
2026
Jun
2026
1
Jul
2026
45
Aug
2026
8
Sep
2026

Victims (1317)

ARCHIVE14

clop🇺🇸 US
7d ago

Back BOYDEN.COM INJURYLAWYERS.COM SOLUTIONSINSAFETY.COM FISHWINDOWCLEANING.COM THEMORTGAGEFIRM.COM DAD-CO.TH KCDWORLDWIDE.COM EXCELAS1.COM MCMATHLAW.COM

Business Services3.0Published
boyden.com

ELANDRETAIL.COM-KMALL24.COM

clop
7d ago
Published
elandretail.com-kmall24.com

KSS-ARCHITECTS-LLP

clop
7d ago
Published

VALLEY-TRUCK-AND-TRACTOR

clop
7d ago
Published

PALIG.COM

clop🇺🇸 US
7d ago
HealthcarePublished
palig.com

SWEETLAKE-LAND-AND-OIL-CO-INC

clop
7d ago
Published

HARLEY-DAVIDSON.COM

clop🇺🇸 US
20d ago

[AI generated] Harley-Davidson is an American iconic motorcycle manufacturer headquartered in Milwaukee, Wisconsin, USA. Founded in 1903, the company designs, m...

Manufacturing1.0Published
harley-davidson.com

HENRYPRATT.COM

clop🇺🇸 US
20d ago

[AI generated] Henry Pratt Company is a US-based manufacturer specializing in industrial valves, including butterfly valves, gate valves, and check valves. Oper...

Manufacturing1.5Published
henrypratt.com

ZEBRA.COM

clop🇺🇸 US
Aug 13, 2026

Data exfiltrated included the following: Database, Project - files, CAD - files Total size: 8Tb Revenue: $5,600,000,000

Manufacturing8 TB1.0Published
zebra.com

NUVITIA.COM

clop🇪🇸 ES
Aug 12, 2026

Data exfiltrated included the following: Project, Soft Total size: 89.8Gb Revenue: $5,000,000

Technology89.8 GB1.0Published
nuvitia.com

IPMSOLUTIONS.SK

clop🇸🇰 SK
Aug 12, 2026

Data exfiltrated included the following: PDF files, Cad-files, Soft Total size: 253Gb Revenue: $5,000,000

Professional Services253 GB1.0Published
ipmsolutions.sk

ECCELLENT.COM

clop🇮🇹 IT
Aug 12, 2026

Data exfiltrated included the following: DBF files, Cad-files, Project, Soft, Backups Total size: 241Gb Revenue: $5,000,000

Other241 GB1.0Published
eccellent.com

STNET.IT

clop🇮🇹 IT
Aug 12, 2026

Data exfiltrated included the following: Database, Project Total size: 13.2Gb Revenue: $5,000,000

Technology13.2 GB1.0Published
stnet.it

QCPL.IN

clop🇮🇳 IN
Aug 12, 2026

Data exfiltrated included the following: Database, Project Total size: 501Gb Revenue: $5,000,000

Manufacturing501 GB1.0Published
qcpl.in

FLUIDLOGIC.COM

clop🇺🇸 US
Aug 12, 2026

Data exfiltrated included the following: Database, Project,Cad-files Total size: 26.4Gb Revenue: $5,000,000

Technology26.4 GB1.0Published
fluidlogic.com

MIDLANDIND.COM.AU

clop🇦🇺 AU
Aug 12, 2026

Data exfiltrated included the following: Database, Project Total size: 0.5Gb Revenue: $5,000,000

Manufacturing0.5 GB1.0Published
midlandind.com.au

ITKHOLDING.HU

clop🇭🇺 HU
Aug 12, 2026

Data exfiltrated included the following: Database, Projects Total size: 40,7Gb Revenue: $1,700,000,000

Technology40.7 GB1.0Published
itkholding.hu

G3AEROSPACE.COM

clop🇺🇸 US
Aug 12, 2026

Data exfiltrated included the following: Database, Projects Total size: 319Gb Revenue: $1,000,000

Government & Defense319 GB1.0Published
g3aerospace.com

ARCHERGREY.COM

clop🇺🇸 US
Aug 12, 2026

Data exfiltrated included the following: Database, Projects Total size: 1,84Gb Revenue: <$5,000,000

Other1.84 GB1.0Published
archergrey.com

OMNITANKER.COM

clop🇺🇸 US
Aug 12, 2026

Data exfiltrated included the following: Database, Projects, SQL Backups, Soft installers, Jpeg, Png, PDF - files Total size: 83Gb Revenue: $10,000,000

Transportation83 GB1.0Published
omnitanker.com

LIFESTRAW.COM

clop🇺🇸 US
Aug 12, 2026

Data exfiltrated included the following: Database, Projects, Backups, Logs, Soft installers, PDF, TXT, XML - files Total size: 168Gb Revenue: $200,000,000

Retail & E-Commerce168 GB1.0Published
lifestraw.com

SPKAA.COM

clop🇰🇿 KZ
Aug 12, 2026

Data exfiltrated included the following: Database, Projects Total size: 581Gb Revenue: $7,600,000

581 GB1.0Published
spkaa.com

IVALUESYS.COM

clop🇺🇸 US
Aug 12, 2026

Data exfiltrated included the following: Database, Projects, Backups Total size: 109Gb Revenue: $8,100,000

Technology109 GB1.0Published
ivaluesys.com

NUOVACMM.COM

clop🇮🇹 IT
Aug 12, 2026

Data exfiltrated included the following: Database, Projects, Soft installers Total size: 279Gb Revenue: $6,600,000

Other279 GB1.0Published
nuovacmm.com

THERMOS.COM

clop🇺🇸 US
Aug 12, 2026

Data exfiltrated included the following: Database, Projects, Soft installers Total size: 285Gb Revenue: $9,000,000

Retail & E-Commerce285 GB1.0Published
thermos.com

WATERLANDPE.COM

clop🇵🇪 PE
Aug 12, 2026

Data exfiltrated included the following: Database, Projects, Project Backups, SQL Database Backup Total size: 382Gb Revenue: $5,800,000

Other382 GB1.0Published
waterlandpe.com

9ALTITUDES.COM

clop🇮🇳 IN
Aug 12, 2026

Data exfiltrated included the following: Database, Projects, Project Backups, SQL Database Backup Total size: 382Gb Revenue: $15,000,000

Technology382 GB1.0Published
9altitudes.com

INTELLIHOT.COM

clop🇺🇸 US
Aug 12, 2026

Data exfiltrated included the following: Database, Projects, Backups, Soft installers, Updates, XML - files Total size: 271Gb Revenue: $27,000,000

Hospitality271 GB1.0Published
intellihot.com

INTELLIGENTGROWTHSOLUTIONS.COM

clop🇺🇸 US
Aug 12, 2026

Data exfiltrated included the following: Database, Project, PDF, XLSX, XLS, DOCX - files Total size: 261Gb Revenue: $31,000,000

Professional Services261 GB1.0Published
intelligentgrowthsolutions.com

HONGHE-TECH.COM

clop🇨🇳 CN
Aug 12, 2026

Data exfiltrated included the following: Database, Project - files Total size: 1,588Gb Revenue: $470,000,000

Technology1.588 GB1.0Published
honghe-tech.com

ATOMBERG.COM

clop🇮🇳 IN
Aug 12, 2026

Data exfiltrated included the following: Database, Project - files Total size: 980Gb Revenue: $68,000,000

Manufacturing980 GB1.0Published
atomberg.com

CLOVER.COM

clop🇺🇸 US
Aug 12, 2026

Data exfiltrated included the following: Database, Project - files Total size: 651Gb Revenue: $400,000,000

Retail & E-Commerce651 GB1.0Published
clover.com

JPMGROUP.CO.IN

clop🇮🇳 IN
Aug 12, 2026

Data exfiltrated included the following: Database, Project - files Total size: 75,4Gb Revenue: $400,000,000

Financial Services75.4 GB1.0Published
jpmgroup.co.in

BRILLONCONSUMER.COM(BRILLONCONSUMER.COM)

clop🇲🇽 MX
Aug 12, 2026

Data exfiltrated included the following: Database, Project - files Total size: 22,4Gb Revenue: $100,000,000

Retail & E-Commerce22.4 GB1.0Published
brillonconsumer.com

SUUNTO.CN(SUUNTO.COM)

clop🇨🇳 CN
Aug 12, 2026

Data exfiltrated included the following: Database, Project - files Total size: 1470Gb Revenue: $111,000,000

Retail & E-Commerce1470 GB1.0Published
suunto.cn

SMAPCENTER-UAH.EDU

clop🇺🇸 US
Aug 12, 2026

Data exfiltrated included the following: Database, Project - files Total size: 6,08Gb Revenue: $113,000,000

Education6.08 GB1.0Published
smapcenter-uah.edu

TRISTAR.COM

clop🇺🇸 US
Aug 12, 2026

Data exfiltrated included the following: Database, Project - files Total size: 1579,9Gb Revenue: $1,000,000,000

1579.9 GB1.0Published
tristar.com

MAMASANDPAPAS.COM

clop🇬🇧 GB
Aug 12, 2026

Data exfiltrated included the following: Database, Project - files Total size: 1,18Gb Revenue: $131,000,000

Retail & E-Commerce1.18 GB1.0Published
mamasandpapas.com

CORNELIUS.COM

clop🇺🇸 US
Aug 12, 2026

Data exfiltrated included the following: Database, Project, PDF, TXT, DOC - files Total size: 3684Gb Revenue: $269,800,000

3684 GB1.0Published
cornelius.com

MAMMUT.COM

clop🇨🇭 CH
Aug 12, 2026

Data exfiltrated included the following: .png files, files Windchil Total size: 136Gb Revenue: $281,000,000

Consumer Services136 GB1.0Published
mammut.com

PARTECH.COM

clop🇺🇸 US
Aug 12, 2026

Data exfiltrated included the following: Database, Project, Cad-files, Backups Total size: 24Gb Revenue: $475,700,000

Technology24 GB1.0Published
partech.com

STARKEY.COM

clop🇺🇸 US
Aug 12, 2026

Data exfiltrated included the following: Database, Project Total size: 3030Gb Revenue: $939,200,000

Healthcare3030 GB1.0Published
starkey.com

LARGAN.COM.TW

clop🇹🇼 TW
Aug 12, 2026

Data exfiltrated included the following: Project, Soft Total size: 56Gb Revenue: $1,700,000,000

Manufacturing56 GB1.0Published
largan.com.tw

TOASTTAB.COM

clop🇺🇸 US
Aug 12, 2026

Data exfiltrated included the following: project, backup database, logs Total size: 215Gb Revenue: $6,400,000,000

Hospitality215 GB1.0Published
toasttab.com

IRCO.COM

clop🇮🇷 IR
Aug 12, 2026

Data exfiltrated included the following: Cad-files, PDF drawings, diagrams, product presentations, specifications, manuals and instructions Total size: 5564Gb ...

Manufacturing5564 GB1.0Published
irco.com

ALDOGROUP.COM(ALDOSHOES.COM)

clop🇨🇦 CA
Aug 12, 2026

Data exfiltrated included the following: TSV files, soft, Projects, Cad-files Total size: 424Gb Revenue: $14,800,000,000

Retail & E-Commerce424 GB1.0Published
aldogroup.com

PHILIPS.COM

clop🇳🇱 NL
Aug 12, 2026

Data exfiltrated included the following: PDF drawings, diagrams, blueprints Total size: 13.5Gb Revenue: $20,700,000,000

Healthcare13.5 GB1.0Published
philips.com

FISERV.COM

clop🇺🇸 US
Aug 12, 2026

Data exfiltrated included the following: Projects, Cad-files, files Windchil, Soft Total size: 874Gb Revenue: $21,200,000,000

Financial Services874 GB1.0Published
fiserv.com

GE.COM

clop🇺🇸 US
Aug 12, 2026

Data exfiltrated included the following: Software backups, system files, projects Total size: 391Gb Revenue: $113,000,000,000

Technology391 GB1.0Published
ge.com

SHELL.COM (August 2026)

clop🇬🇧 GB
Aug 12, 2026

Data exfiltrated included the following: Engineering drawings, photos of the facilities, scans of facility testing reports, project plans Total size: 89Gb Rev...

Energy & Utilities89 GB1.0Published
shell.com

Infrastructure

leak site
ONLINE
http://clopofffr7tth6hsvxx3cys4qkshrbbiitnxfwts6hj64mtnaovjieyd.onion

2130ms

47m ago

leak site
ONLINE

seized

http://santat7kpllt6iyvqbr7q4amdv6dzrh6paatvyrzl7ry3zm72zigf4ad.onion/

1185ms

4d ago

leak site
OFFLINE

unreachable

http://frgp3f3u2ddafv4ny7tqn6tc674m6fyymyywoaxot7xskbjmiyhhsyqd.onion/

2112ms

2h ago

leak site
OFFLINE

unreachable

http://6v4q5w7di74grj2vtmikzgx2tnq5eagyg2cubpcnqrvvee2ijpmprzqd.onion/remote0/

8772ms

5h ago

leak site
OFFLINE

malformed url

http://ekbgzchl6x2ias37.onion

3d ago

leak site
OFFLINE

unreachable

http://2vi357dgf4246nvrcsavrt5jsrm7pfqim4t2n3ykzedjim5bzqezmlyd.onion

8718ms

6h ago

leak site
OFFLINE

unreachable

http://npkoxkuygikbkpuf5yxte66um727wmdo2jtpg2djhb2e224i4r25v7ad.onion

2672ms

5h ago

leak site
OFFLINE

unreachable

http://l4rdimrqyonulqjttebry4t6wuzgjv5m62rnpjho3q22a6maf6d5evyd.onion/

8754ms

1h ago

leak site
OFFLINE

unreachable

http://toznnag5o3ambca56s2yacteu7q7x2avrfherzmz4nmujrjuib4iusad.onion

4505ms

1h ago

leak site
OFFLINE

unreachable

http://3ws3t4uo7fehnn4qpmadk3zjrxta5xlt3gsc5mx4sztrsy7ficuz5ayd.onion/

8638ms

4h ago

leak site
OFFLINE

unreachable

http://amnwxasjtjc6e42siac6t45mhbkgtycrx5krv7sf5festvqxmnchuayd.onion/

2935ms

3h ago

leak site
OFFLINE

unreachable

http://qahjimrublt35jlv4teesicrw6zhpwhkb6nhtonwxuqafmjhr7hax2id.onion/

3943ms

3h ago

leak site
OFFLINE

http error

http://htmxyptur5wfjrd7uvg23snupub2pbtlfelk45n37b3augl2w4eearid.onion/remote0/

3361ms

47m ago