Back to Threat Groups

falcon

ransomware group

Victims
5
records
First Discovered
Aug 28, 2026
victim
Last Discovered
Aug 29, 2026
victim
Inactive Since
43
days
Countries
1
hit
Avg Discount
—
no settlements

Group Activity

Last 12 months
Nov
2025
Dec
2025
Jan
2026
Feb
2026
Mar
2026
Apr
2026
May
2026
Jun
2026
Jul
2026
5
Aug
2026
Sep
2026
Oct
2026

Victims (5)

DistributionNOW (DNOW Inc.)

falcon🇺🇸 US
Aug 29, 2026

Energy & industrial distribution · NYSE: DNOW — 182 GB compressed, 344 GB uncompressed

Manufacturing182 GB1.0Published
dnow.com

Hayward Holdings

falcon🇺🇸 US
Aug 29, 2026

Our 848 GB extraction includes your Salesforce, 1+ million of each business and customer records with PII, distributor pricing lists, margin structures, detaile...

Manufacturing561 GB1.0Published
hayward.com

Globus Medical

falcon🇺🇸 US
Aug 29, 2026

Medical devices · NYSE: GMED — 2.38 TB compressed, 2.96 TB uncompressed

Healthcare2.38 TB1.0Published
globusmedical.com

Verification

falcon
Aug 28, 2026

Identity verification is mandatory. No negotiation proceeds without it. Every communication bearing the FALCON name must be checked against our published key . ...

1.0Published

Entities

falcon
Aug 28, 2026

DistributionNOW 182 GB → 344 GB Globus Medical 2.38 TB → 2.96 TB

182 GB1.0Published

Infrastructure

leak site
OFFLINE

unreachable

http://i7loab6thvz4lb7jdr3qoeumbvilwhbgnwsctnlfmvsv7g5s3vsiw6yd.onion/companies

8397ms

5d ago