Back to Threat Groups

devman

INACTIVERansomware-as-a-Service

ransomware group

🇷🇺Russia

Devman is a former RansomHub and INC Ransom affiliate that began operating independently as a ransomware-as-a-service platform. The group offers its own platform for affiliates who previously worked with larger operations. Devman's connections to established RaaS ecosystems give it experienced affiliates with proven access methodologies.

Victims
114
records
First Discovered
Apr 6, 2025
victim
Last Discovered
Feb 4, 2026
victim
Inactive Since
142
days
Countries
37
hit
Avg Discount
no settlements

Group Activity

Last 12 months
9
Jul
2025
2
Aug
2025
9
Sep
2025
7
Oct
2025
7
Nov
2025
24
Dec
2025
16
Jan
2026
2
Feb
2026
Mar
2026
Apr
2026
May
2026
Jun
2026

Victims (114)

Crystal Coast Pain Management

devman🇺🇸 US
Feb 4, 2026

SSN, medical data, medical cards

Healthcare7.0Published
crystalcoastpm.com

ENCOMPASS-INC

devman🇺🇸 US
Feb 2, 2026

Finance documents, clients PII

Financial Services5.0Published
encompass-inc.com

woodwardoralsurgery.com

devman🇸🇯 SJ
Jan 30, 2026

Patient data, med cards

Healthcare7.0Published
woodwardoralsurgery.com

wjnklaw.com

devman🇺🇸 US2 groups: lockbit5
Jan 30, 2026

[AI generated] N/A

Business Services1.0Published
wjnklaw.com

consultaegis.com

devman🇺🇸 US
Jan 29, 2026

The data contains materials of national security including BIO laboratory facilities blue prints, and infromation regardless US army nitroglycerin supply chain.

Public Sector9.0Published
consultaegis.com

zallc.org

devman🇺🇸 US
Jan 29, 2026

PII data, SSN´s financial and audit reports.

Financial Services6.0Published
zallc.org

***vandenberg.com

devman🇺🇸 US
Jan 28, 2026

Client data, HR data

5.0Published
vandenberg.com

tiw-group.com

devman🇸🇯 SJ
Jan 28, 2026

[AI generated] TIW Group is a specialist software firm with over 30 years of experience in developing solutions for the insurance industry. Their flagship produ...

Technology1.0Published
tiw-group.com

twi-group.com

devman🇺🇸 US
Jan 27, 2026

[AI generated] TWI Group is a specialized freight forwarder and logistics provider that primarily focuses on the trade show industry. The company provides a wid...

Transportation/Logistics2.0Published
twi-group.com

cs.at

devman🇦🇹 AT2 groups: lockbit5
Jan 26, 2026

Insurance data, Hr data, client data

Technology5.0Published
cs.at

automax.com

devman🇮🇳 IN
Jan 21, 2026

[AI generated] AutoMax.com is a leading used car dealership group in the US. Known for its wide range of high-quality pre-owned vehicles, AutoMax.com provides a...

Consumer Services1.0Published
automax.com

Syrmasgs

devman🇮🇳 IN
Jan 21, 2026

[AI generated] N/A

Business Services1.0Published
syrmasgs.com

Tvgoiania

devman🇧🇷 BR
Jan 20, 2026

[AI generated] Tvgoiania is a media and news company based in Goiânia, Brazil. It provides a platform for local news, events, and updates significant to the Goi...

Consumer Services1.0Published
tvgoiania.com.br

klhindustries.com

devman🇺🇸 US
Jan 12, 2026

[AI generated] N/A

Manufacturing1.0Published
klhindustries.com

pronaca.com

devman🇸🇯 SJ
Jan 12, 2026

Financial, contracts HR data

Agriculture and Food Production5.0Published
pronaca.com

consigaz.com.br

devman🇧🇷 BR
Jan 12, 2026

[AI generated] Consigaz is a Brazilian company that specializes in the distribution of Liquefied Petroleum Gas (LPG) for both industrial and residential use. Th...

Energy1.0Published
consigaz.com.br

sealbeachca.gov

devman🇺🇸 US
Jan 12, 2026

Datatheft 300gb of data stollen includes gov documents, deeds and much more

Public Sector5.0Published
sealbeachca.gov

sealbeachpd.com

devman🇺🇸 US
Jan 12, 2026

data theft, evidence, officers personal information police reports, DEA open cases information

Public Sector5.0Published
sealbeachpd.com

Intonu.com

devman🇺🇸 US
Dec 28, 2025

Financial, Hr documents, claims

Financial Services5.0Published
intonu.com

Jennings SD

devman🇺🇸 US
Dec 28, 2025

Financial data, HR data

Financial Services5.0Published

sharinc.org

devman🇺🇸 US
Dec 28, 2025

Financial, Custommer data

Business Services5.0Published
sharinc.org

kavi.fi

devman🇫🇮 FI
Dec 25, 2025

HR data

Business Services1.0Published
kavi.fi

Clínica Dávila

devman🇨🇱 CL
Dec 22, 2025

Patients' full records, HIV test results, IDs. Throughout a long waiting period, and despite a vast number of phone calls and emails sent by our team to the ho...

Healthcare7.0Published
davila.cl

transrocamar.com

devman🇪🇸 ES
Dec 22, 2025

Financial, Client IDS

Financial Services5.0Published
transrocamar.com

British Holiday & Home Parks Association Ltd

devman🇬🇧 GB
Dec 22, 2025

Passport scans, Financial

Hospitality and Tourism7.0Published
bhhpa.org.uk

Culinary Jet Concierge

devman🇫🇷 FR
Dec 19, 2025

[AI generated] N/A

Hospitality and Tourism1.0Published
culinaryjetconcierge.com

beausejourco-op.crs

devman🇨🇦 CA
Dec 18, 2025

Financial, HR

Agriculture and Food Production1.0Published
beausejourco-op.crs

Axion50plus

devman🇨🇦 CA
Dec 17, 2025

Financial, HR data, Client data

Financial Services6.0Published
axion50plus.org

Productos Lácteos Flor de Aragua CA

devman🇻🇪 VE
Dec 16, 2025

HR data, clients data, Financial data

Agriculture and Food Production5.0Published
unre.com

DXS SYSTEMS

devman🇬🇧 GB
Dec 15, 2025

[AI generated] N/A

Technology1.0Published
dxs-systems.co.uk

CANCER

devman🇧🇷 BR
Dec 14, 2025

Financial data, clients data

Financial Services5.0Published
cancer.org.br

Quezon Power

devman🇵🇭 PH
Dec 12, 2025

Employee data, hr info, projects, Work logs of the power plants, Scada SRC

Energy5.0Published
qpl.com.ph

Hopital La Rabta

devman🇹🇳 TN2 groups: qilin
Dec 12, 2025

[AI generated] Hopital La Rabta is a major hospital located in Tunis, Tunisia. It provides a wide array of medical services to the Tunisian population. The hosp...

Healthcare1.0Published
chularabta.tn

Village Santé Saint Joseph Hospital

devman🇫🇷 FR
Dec 9, 2025

patient data

Healthcare1.0Published
fassic.org

fassic.org

devman🇫🇷 FR
Dec 9, 2025

Financial Records, Med cards, Hr documents

Healthcare6.0Published
fassic.org

Inter care

devman🇺🇸 US
Dec 9, 2025

Full quickbooks dump, patients data, and financial data

Healthcare7.0Published
theintracare.com

solidere

devman🇱🇧 LB
Dec 7, 2025

[AI generated] Solidere, short for Société Libanaise de Développement et Reconstruction, is a Lebanese joint stock company responsible for the reconstruction, d...

Construction2.0Published

arko.no

devman🇳🇴 NO
Dec 7, 2025

Datatheft Client DB

1.0Published
arko.no

cpasch.com

devman🇺🇸 US
Dec 3, 2025

Ransom: 200gb 150k

Business Services1.0Published
cpasch.com

ravand.com

devman🇨🇦 CA
Dec 2, 2025

Ransom: 75k 50gb

Technology1.0Published
ravand.com

Abdulhadi Hospital

devman🇯🇴 JO
Dec 1, 2025

Ransom: ecaretest.com 350k 246gb

Healthcare5.0Published
ecaretest.com

newhorizonsmedical.org

devman🇺🇸 US3 groups: dispossessor, lockbit3
Dec 1, 2025

Ransom: 90k 236gb

Healthcare1.0Published
newhorizonsmedical.org

gsccca.org

devman🇺🇸 US
Nov 21, 2025

Ransom: 500gb 400k

Public Sector1.0Published
gsccca.org

procure.com

devman🇺🇸 US
Nov 21, 2025

Ransom: data theft 40gb 120K

Business Services5.0Published
procure.com

future.com.bo

devman🇧🇴 BO
Nov 19, 2025

Ransom: 200k 120gb

1.0Published
future.com.bo

MCC

devman🇺🇸 US
Nov 19, 2025

Ransom: 200k 80gb

Manufacturing1.0Published
mcchemical.com

ctfc.cat

devman🇪🇸 ES
Nov 12, 2025

Ransom: 248000 30gb of files exfiltrated

3.0Published
ctfc.cat

omniumint

devman🇺🇸 US
Nov 11, 2025

Ransom: 1.2million 1.2 tb and one very interesting email

3.0Published
omniumint.com

juntalocal.cdmx.gob.mx

devman🇲🇽 MX
Nov 1, 2025

Ransom: 60gb 300k

Public Sector1.0Published
juntalocal.cdmx.gob.mx

fhw.org

devman🇺🇸 US
Oct 28, 2025

Ransom: 700k 120gb

Healthcare1.0Published
fhw.org

Infrastructure

No sites tracked