Back to Threat Groups

netwalker

INACTIVE

ransomware group

🇨🇦Canada

NetWalker (also known as Mailto) was a ransomware operation active from 2019 to January 2021, when US and Bulgarian authorities disrupted its infrastructure. A Canadian national was charged in connection with NetWalker attacks in January 2021. The group transitioned from targeted attacks to a RaaS model in 2020 and was known for attacking healthcare organizations during the COVID-19 pandemic.

Victims
26
records
First Discovered
Jan 31, 2020
victim
Last Discovered
Dec 12, 2020
victim
Inactive Since
2,023
days
Countries
6
hit
Avg Discount
—
no settlements

Group Activity

Last 12 months
Jul
2025
Aug
2025
Sep
2025
Oct
2025
Nov
2025
Dec
2025
Jan
2026
Feb
2026
Mar
2026
Apr
2026
May
2026
Jun
2026

Victims (26)

Nygard International

netwalker🇨🇦 CA
Dec 12, 2020
Commercial Facilities1.0Published

CSAT Solutions

netwalker
Dec 1, 2020
Information Technology1.0Published

Enel Group

netwalker
Oct 19, 2020
Energy1.0Published

Wilmington Surgical Associates

netwalker🇺🇸 US
Oct 1, 2020
Healthcare and Public Health1.0Published

KYB Corporation

netwalker🇺🇸 US
Oct 1, 2020
Critical Manufacturing1.0Published

K-Electric (electric utility supplier)

netwalker🇵🇰 PK
Sep 7, 2020
Energy1.0Published

Equinix

netwalker🇺🇸 US
Sep 7, 2020
Information Technology1.0Published

Cygilant (threat detection cybersecurity company)

netwalker
Sep 1, 2020
Information Technology1.0Published

Jands

netwalker🇦🇺 AU
Sep 1, 2020
Critical Manufacturing1.0Published

Direccion Nacional de Migraciones (Argentina's official immigration agency)

netwalker🇦🇷 AR
Aug 27, 2020
Government Facilities1.0Published

Entrust Energy

netwalker🇺🇸 US
Aug 5, 2020
Energy1.0Published

Olympia House (Petaluma)

netwalker🇺🇸 US
Aug 1, 2020
Healthcare and Public Health1.0Published

Forsee Power

netwalker
Aug 1, 2020
Critical Manufacturing1.0Published

Center for Fertility and Gynecology (Los Angeles)

netwalker🇺🇸 US
Aug 1, 2020
Healthcare and Public Health1.0Published

Canadian Tire

netwalker🇨🇦 CA
Aug 1, 2020
Commercial Facilities1.0Published

Alfanar

netwalker
Jul 9, 2020
Critical Manufacturing1.0Published

Trinity Metro (Fort Worth transit agency)

netwalker🇺🇸 US
Jul 1, 2020
Transportation Systems1.0Published

Lorien Health Services

netwalker🇺🇸 US
Jun 6, 2020
Healthcare and Public Health1.0Published

Columbia College of Chicago

netwalker🇺🇸 US
Jun 3, 2020
Education Facilities1.0Published

University of San Francisco

netwalker🇺🇸 US
Jun 1, 2020
Education Facilities1.0Published

Michigan State University

netwalker🇺🇸 US
May 27, 2020
Education Facilities1.0Published

Network of Village of Weiz

netwalker🇦🇹 AT
May 1, 2020
Government Facilities1.0Published

Spectra Logic

netwalker🇺🇸 US2 groups: qilin
May 1, 2020
Information Technology1.0Published
spectralogic.com

Northwest Territories Power Corporation

netwalker🇨🇦 CA
Apr 30, 2020
Energy1.0Published

Champaign-Urbana Public Health District

netwalker🇺🇸 US
Mar 10, 2020
Healthcare and Public Health1.0Published
c-uphd.org

Toll Group

netwalker🇦🇺 AU2 groups: nefilim
Jan 31, 2020
Transportation Systems1.0Published

Infrastructure

leak site
OFFLINE

unreachable

http://rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion

5415ms

10m ago