Back to Threat Groups

clop

ACTIVE

ransomware group

🇷🇺Russia

Clop (also spelled Cl0p) is a financially motivated ransomware group attributed to the FIN11/TA505 threat cluster with assessed ties to Russia and Ukraine. The group pioneered mass exploitation of file-transfer vulnerabilities, most notably Accellion FTA (2020), GoAnywhere MFT (2023), and MOVEit Transfer (2023), the latter affecting over 2,700 organizations worldwide in what became one of the largest data-theft campaigns in history. Clop primarily relies on data extortion rather than encryption in recent campaigns.

Victims
1,309
records
First Discovered
Mar 13, 2020
victim
Last Discovered
Aug 13, 2026
victim
Inactive Since
2
days
Countries
57
hit
Avg Discount
—
no settlements

Group Activity

Last 12 months
Sep
2025
13
Oct
2025
98
Nov
2025
1
Dec
2025
46
Jan
2026
79
Feb
2026
2
Mar
2026
1
Apr
2026
1
May
2026
Jun
2026
1
Jul
2026
45
Aug
2026

Victims (1309)

ZEBRA.COM

clop
2d ago

Data exfiltrated included the following: Database, Project - files, CAD - files Total size: 8Tb Revenue: $5,600,000,000

Published
zebra.com

NUVITIA.COM

clop
4d ago

Data exfiltrated included the following: Project, Soft Total size: 89.8Gb Revenue: $5,000,000

Published
nuvitia.com

IPMSOLUTIONS.SK

clop🇸🇰 SK
4d ago

Data exfiltrated included the following: PDF files, Cad-files, Soft Total size: 253Gb Revenue: $5,000,000

Published
ipmsolutions.sk

ECCELLENT.COM

clop
4d ago

Data exfiltrated included the following: DBF files, Cad-files, Project, Soft, Backups Total size: 241Gb Revenue: $5,000,000

Published
eccellent.com

STNET.IT

clop🇮🇹 IT
4d ago

Data exfiltrated included the following: Database, Project Total size: 13.2Gb Revenue: $5,000,000

Published
stnet.it

QCPL.IN

clop🇮🇳 IN
4d ago

Data exfiltrated included the following: Database, Project Total size: 501Gb Revenue: $5,000,000

Published
qcpl.in

FLUIDLOGIC.COM

clop
4d ago

Data exfiltrated included the following: Database, Project,Cad-files Total size: 26.4Gb Revenue: $5,000,000

Published
fluidlogic.com

MIDLANDIND.COM.AU

clop🇦🇺 AU
4d ago

Data exfiltrated included the following: Database, Project Total size: 0.5Gb Revenue: $5,000,000

Published
midlandind.com.au

ITKHOLDING.HU

clop🇭🇺 HU
4d ago

Data exfiltrated included the following: Database, Projects Total size: 40,7Gb Revenue: $1,700,000,000

Published
itkholding.hu

G3AEROSPACE.COM

clop
4d ago

Data exfiltrated included the following: Database, Projects Total size: 319Gb Revenue: $1,000,000

Published
g3aerospace.com

ARCHERGREY.COM

clop
4d ago

Data exfiltrated included the following: Database, Projects Total size: 1,84Gb Revenue: <$5,000,000

Published
archergrey.com

OMNITANKER.COM

clop
4d ago

Data exfiltrated included the following: Database, Projects, SQL Backups, Soft installers, Jpeg, Png, PDF - files Total size: 83Gb Revenue: $10,000,000

Published
omnitanker.com

LIFESTRAW.COM

clop
4d ago

Data exfiltrated included the following: Database, Projects, Backups, Logs, Soft installers, PDF, TXT, XML - files Total size: 168Gb Revenue: $200,000,000

Published
lifestraw.com

SPKAA.COM

clop
4d ago

Data exfiltrated included the following: Database, Projects Total size: 581Gb Revenue: $7,600,000

Published
spkaa.com

IVALUESYS.COM

clop
4d ago

Data exfiltrated included the following: Database, Projects, Backups Total size: 109Gb Revenue: $8,100,000

Published
ivaluesys.com

NUOVACMM.COM

clop
4d ago

Data exfiltrated included the following: Database, Projects, Soft installers Total size: 279Gb Revenue: $6,600,000

Published
nuovacmm.com

THERMOS.COM

clop
4d ago

Data exfiltrated included the following: Database, Projects, Soft installers Total size: 285Gb Revenue: $9,000,000

Published
thermos.com

WATERLANDPE.COM

clop
4d ago

Data exfiltrated included the following: Database, Projects, Project Backups, SQL Database Backup Total size: 382Gb Revenue: $5,800,000

Published
waterlandpe.com

9ALTITUDES.COM

clop
4d ago

Data exfiltrated included the following: Database, Projects, Project Backups, SQL Database Backup Total size: 382Gb Revenue: $15,000,000

Published
9altitudes.com

INTELLIHOT.COM

clop
4d ago

Data exfiltrated included the following: Database, Projects, Backups, Soft installers, Updates, XML - files Total size: 271Gb Revenue: $27,000,000

Published
intellihot.com

INTELLIGENTGROWTHSOLUTIONS.COM

clop
4d ago

Data exfiltrated included the following: Database, Project, PDF, XLSX, XLS, DOCX - files Total size: 261Gb Revenue: $31,000,000

Published
intelligentgrowthsolutions.com

HONGHE-TECH.COM

clop
4d ago

Data exfiltrated included the following: Database, Project - files Total size: 1,588Gb Revenue: $470,000,000

Published
honghe-tech.com

ATOMBERG.COM

clop
4d ago

Data exfiltrated included the following: Database, Project - files Total size: 980Gb Revenue: $68,000,000

Published
atomberg.com

CLOVER.COM

clop
4d ago

Data exfiltrated included the following: Database, Project - files Total size: 651Gb Revenue: $400,000,000

Published
clover.com

JPMGROUP.CO.IN

clop🇮🇳 IN
4d ago

Data exfiltrated included the following: Database, Project - files Total size: 75,4Gb Revenue: $400,000,000

Published
jpmgroup.co.in

BRILLONCONSUMER.COM (BRILLONCONSUMER.COM)

clop
4d ago

Data exfiltrated included the following: Database, Project - files Total size: 22,4Gb Revenue: $100,000,000

Published
brillonconsumer.com

SUUNTO.CN (SUUNTO.COM)

clop
4d ago

Data exfiltrated included the following: Database, Project - files Total size: 1470Gb Revenue: $111,000,000

Published
suunto.cn

SMAPCENTER.UAH.EDU

clop🇺🇸 US
4d ago

Data exfiltrated included the following: Database, Project - files Total size: 6,08Gb Revenue: $113,000,000

Published
smapcenter.uah.edu

TRISTAR.COM

clop
4d ago

Data exfiltrated included the following: Database, Project - files Total size: 1579,9Gb Revenue: $1,000,000,000

Published
tristar.com

MAMASANDPAPAS.COM

clop
4d ago

Data exfiltrated included the following: Database, Project - files Total size: 1,18Gb Revenue: $131,000,000

Published
mamasandpapas.com

CORNELIUS.COM

clop
4d ago

Data exfiltrated included the following: Database, Project, PDF, TXT, DOC - files Total size: 3684Gb Revenue: $269,800,000

Published
cornelius.com

MAMMUT.COM

clop🇨🇭 CH
4d ago

Data exfiltrated included the following: .png files, files Windchil Total size: 136Gb Revenue: $281,000,000

Consumer ServicesPublished
mammut.com

PARTECH.COM

clop
4d ago

Data exfiltrated included the following: Database, Project, Cad-files, Backups Total size: 24Gb Revenue: $475,700,000

Published
partech.com

STARKEY.COM

clop
4d ago

Data exfiltrated included the following: Database, Project Total size: 3030Gb Revenue: $939,200,000

Published
starkey.com

LARGAN.COM.TW

clop🇹🇼 TW
4d ago

Data exfiltrated included the following: Project, Soft Total size: 56Gb Revenue: $1,700,000,000

Published
largan.com.tw

TOASTTAB.COM

clop
4d ago

Data exfiltrated included the following: project, backup database, logs Total size: 215Gb Revenue: $6,400,000,000

Published
toasttab.com

IRCO.COM

clop
4d ago

Data exfiltrated included the following: Cad-files, PDF drawings, diagrams, product presentations, specifications, manuals and instructions Total size: 5564Gb ...

ManufacturingPublished
irco.com

ALDOGROUP.COM (ALDOSHOES.COM)

clop
4d ago

Data exfiltrated included the following: TSV files, soft, Projects, Cad-files Total size: 424Gb Revenue: $14,800,000,000

Published
aldogroup.com

PHILIPS.COM

clop
4d ago

Data exfiltrated included the following: PDF drawings, diagrams, blueprints Total size: 13.5Gb Revenue: $20,700,000,000

Published
philips.com

FISERV.COM

clop🇺🇸 US
4d ago

Data exfiltrated included the following: Projects, Cad-files, files Windchil, Soft Total size: 874Gb Revenue: $21,200,000,000

Financial ServicesPublished
fiserv.com

GE.COM

clop
4d ago

Data exfiltrated included the following: Software backups, system files, projects Total size: 391Gb Revenue: $113,000,000,000

Published
ge.com

SHELL.COM (August 2026)

clop
4d ago

Data exfiltrated included the following: Engineering drawings, photos of the facilities, scans of facility testing reports, project plans Total size: 89Gb Rev...

Published
shell.com

NETPOWER.COM

clop
4d ago

Data exfiltrated included the following: Projects, Cad-files, Backup files Windchil Total size: 230Gb Revenue: $370,900,000

Published
netpower.com

MINDRAY.COM

clop🇨🇳 CN
9d ago

[AI generated] Mindray is a Chinese medical device company headquartered in Shenzhen, China. It deve…

HealthcarePublished
mindray.com

CONTINENTAL.AERO

clop🇺🇸 US
9d ago

[AI generated] N/A…

ManufacturingPublished
continental.aero

BLUEVISTALLC.COM

clop
16d ago
Published
bluevistallc.com

INTEGRALIFE.COM

clop🇺🇸 US
May 1, 2026

[AI generated] Integra LifeSciences, operating under integralife.com, is a US-based medical technology company headquartered in Princeton, New Jersey. It specia...

Healthcare1.0Published
integralife.com

INJURYLAWYERS.COM

clop🇺🇸 US
Apr 28, 2026

[AI generated] INJURYLAWYERS.COM is a US-based legal services platform that connects individuals who have suffered personal injuries with qualified attorneys. O...

Other1.0Published
injurylawyers.com

AIGHEALTHCARE.IN

clop🇮🇳 IN
Mar 30, 2026

[AI generated] N/A

Healthcare1.0Published
aighealthcare.in

CLOUD.CLEARWAYGROUP.COM

clop
Mar 30, 2026

[AI generated] N/A

Technology1.0Published
cloud.clearwaygroup.com

Infrastructure

leak site
ONLINE
http://santat7kpllt6iyvqbr7q4amdv6dzrh6paatvyrzl7ry3zm72zigf4ad.onion

1690ms

6m ago

leak_site
OFFLINE

unreachable

http://santat7kpllt6iyvqbr7q4amdv6dzrh6paatvyrzl7ry3zm72zigf4ad.onion/

8296ms

15h ago

leak site
OFFLINE

unreachable

http://6v4q5w7di74grj2vtmikzgx2tnq5eagyg2cubpcnqrvvee2ijpmprzqd.onion/remote0/

8761ms

5h ago

leak site
OFFLINE

unreachable

http://npkoxkuygikbkpuf5yxte66um727wmdo2jtpg2djhb2e224i4r25v7ad.onion

8150ms

1h ago

leak site
OFFLINE

malformed url

http://ekbgzchl6x2ias37.onion

3d ago

leak site
OFFLINE

unreachable

http://qahjimrublt35jlv4teesicrw6zhpwhkb6nhtonwxuqafmjhr7hax2id.onion/

2641ms

4h ago

leak site
OFFLINE

unreachable

http://l4rdimrqyonulqjttebry4t6wuzgjv5m62rnpjho3q22a6maf6d5evyd.onion/

4021ms

18m ago

leak site
OFFLINE

http error

http://htmxyptur5wfjrd7uvg23snupub2pbtlfelk45n37b3augl2w4eearid.onion/remote0/

6065ms

5h ago

leak site
OFFLINE

unreachable

http://frgp3f3u2ddafv4ny7tqn6tc674m6fyymyywoaxot7xskbjmiyhhsyqd.onion/

4646ms

54m ago

leak site
OFFLINE

unreachable

http://3ws3t4uo7fehnn4qpmadk3zjrxta5xlt3gsc5mx4sztrsy7ficuz5ayd.onion/

8625ms

2h ago

leak site
OFFLINE

unreachable

http://amnwxasjtjc6e42siac6t45mhbkgtycrx5krv7sf5festvqxmnchuayd.onion/

2047ms

1h ago

leak site
OFFLINE

unreachable

http://2vi357dgf4246nvrcsavrt5jsrm7pfqim4t2n3ykzedjim5bzqezmlyd.onion

4462ms

2h ago