Back to Threat Groups

stormous

INACTIVE

ransomware group

🇤🇤??

Stormous is a pro-Russian hacktivist and ransomware group that emerged around mid-2021, believed to include members from Middle Eastern countries who are ideologically aligned with Russian interests, publicly declaring support for Russia following its 2022 invasion of Ukraine. The group has targeted organizations in the United States, Ukraine, and Western-aligned nations and has operated joint operations with the GhostSec hacktivist collective under the "Five Families" banner. Stormous launched a RaaS operation and has claimed attacks against organizations including Epic Games and Ukrainian government entities, though some victim claims have been disputed for authenticity.

Victims
192
records
First Discovered
Mar 22, 2022
victim
Last Discovered
Jun 28, 2026
victim
Inactive Since
93
days
Countries
44
hit
Avg Discount
—
no settlements

Group Activity

Last 12 months
3
Oct
2025
Nov
2025
Dec
2025
Jan
2026
1
Feb
2026
2
Mar
2026
Apr
2026
6
May
2026
39
Jun
2026
Jul
2026
Aug
2026
Sep
2026

Victims (192)

maglificioliliana.com UPDATE-FULL DATA DUMP FREE PART1

stormous
Jun 28, 2026

Over +10GB GB of data has been accessed and exfiltrated. This includes product designs, historical fashion lines, and technical specifications for garments. Fur...

1.0Published
maglificioliliana.com

monoprix.tn

stormous🇹🇳 TN
Jun 28, 2026

Data description: Pending update

Retail & E-Commerce2.0Published
monoprix.tn

eshacloudqa.com

stormous🇺🇸 US
Jun 28, 2026

We have breached ESHA Research / ESHA Cloud Services and compromised their core product development databases. The exfiltrated data includes highly confidential...

Technology1.0Published
eshacloudqa.com

eogb.co.uk

stormous🇬🇧 GB
Jun 28, 2026

Deep access to Microsoft Dynamics GP containing complete corporate accounting, invoices, vendor details, and commercial transactions.Access to internal legal do...

Energy & Utilities1.0Published
eogb.co.uk

HIGUCHI USA, INC

stormous🇺🇸 US
Jun 28, 2026

(Dallas - HongKong - LosAngeles ) Comprehensive financial statements including Balance Sheets, Asset records, Liabilities, Capital, Accounts Receivable (A/R), a...

Manufacturing1.0Published
higuchiinc.com

BN: higuchi-inc Report Error & Data

stormous🇯🇵 JP
Jun 28, 2026

(Dallas - HongKong - LosAngeles ) Comprehensive financial statements including Balance Sheets, Asset records, Liabilities, Capital, Accounts Receivable (A/R), a...

Manufacturing102 GB6.0Published
higuchi-inc.co.jp

montechiaro-store.com UPDATE-FULL DATA DUMP FREE PART1

stormous
Jun 28, 2026

Over +10GB GB of data has been accessed and exfiltrated. This includes product designs, historical fashion lines, and technical specifications for garments. Fur...

10 GB1.0Published
maglificioliliana.com

impulso-store.com

stormous🇲🇽 MX
Jun 24, 2026

Complete data belonging to customers and buyers has been accessed, along with designs, orders, and other assets. This includes all domains associated with the p...

Retail & E-Commerce1.0Published
impulso-store.com

montechiaro-store.com

stormous🇮🇹 IT
Jun 24, 2026

Complete data belonging to customers and buyers has been accessed, along with designs, orders, and other assets. This includes all domains associated with the p...

Retail & E-Commerce1.0Published
montechiaro-store.com

lorenzoni-store.com

stormous🇮🇹 IT
Jun 24, 2026

Complete data belonging to customers and buyers has been accessed, along with designs, orders, and other assets. This includes all domains associated with the p...

Retail & E-Commerce400 GB1.0Published
lorenzoni-store.com

jaggroup.com

stormous🇲🇾 MY
Jun 20, 2026

Full database containing corporate emails (⁠@jaggroup.com⁠), Active Directory domain logins, and clear plain-text passwords.Complete Microsoft Dynamics GP datab...

7.0Published
jaggroup.com

novelis

stormous🇺🇸 US
Jun 19, 2026

Novelis is an aluminum company created by Alcan's spin-off in 2005. It was acquired by Hindalco in 2007.

Manufacturing1.0Published
novelis.com

casioindia

stormous🇮🇳 IN
Jun 19, 2026

casio india 2024-05-03 casio-india Leaked

1.0Published
casio.co.in

berjayaclubs

stormous🇲🇾 MY
Jun 19, 2026

berjayaclubs 2024-05-03 berjayaclubs Leaked

Hospitality and Tourism1.0Published
berjayaclubs.com

Acuity Advisor

stormous🇺🇸 US
Jun 19, 2026

Acuity Advisor 2024-10-01 acuity-advisor Leaked

1.0Published

AOSense/NASA

stormous🇺🇸 US
Jun 19, 2026

AOSense/NASA 2024-10-05 AOSense/NASA Leaked

1.0Published

ascires

stormous🇪🇸 ES
Jun 19, 2026

ascires.com/

Healthcare1.0Published
ascires.com

vouch.co.uk + KYC UK

stormous🇬🇧 GB
Jun 19, 2026

Vouch does not protect its customers' data at all and stores it poorly. Many users' data, including KYC information, UK ID cards, email addresses, phone numbers...

3 GB1.0Published
vouch.co.uk

americanadecolchones

stormous🇨🇴 CO
Jun 19, 2026

VPN access to the company's internal network is provided.

1.0Published

visioninksltd

stormous🇬🇧 GB
Jun 19, 2026

Vision Inks and Resins Limited (previously known as Vision Inks & Resins) is established in May 1999 with Factory at MIDC, Murbad, Maharashtra INDIA...

1.0Published

Sincroslab Sas

stormous🇮🇹 IT
Jun 19, 2026

Sincroslab Sas is a company in Colombia, with a head office in Bogota D.C.. It operates in the Miscellaneous Nondurable Goods Merchant Wholesalers industry.

2.0Published

bulentklise

stormous🇹🇷 TR
Jun 19, 2026

Customer names, identification numbers, production orders, client records, delivery tracking data, customer information, logos, and more

1.0Published

thewatermansarms

stormous🇬🇧 GB
Jun 19, 2026

CVs - Bank - VCF - Business accounts - image - SCAN - Passport Details - ID Card -......

1.0Published

atolon-parkhotel

stormous🇩🇪 DE
Jun 19, 2026

CVs - FACTURES - Hwawei.com - AA GROUPE 2025 - RESERVATION 2025 - PERSONNELS - INFOS - STAGIAIRES.....

1.0Published
hwawei.com

Hy-Vee

stormous🇺🇸 US
Jun 19, 2026

Hy-Vee refuses to pay, and we are proceeding to leak all the data that was extracted. Internal documents, infrastructure diagrams, employee data, training mater...

1.0Published

crystalhotels

stormous🇹🇷 TR
Jun 19, 2026

Full names of hotel guests, Email addresses (internal and external), Customer complaints and feedback content, Booking or reference numbers, Internal hotel comm...

1.0Published

jparkislandresort

stormous🇵🇭 PH
Jun 19, 2026

Full reservation databases Booking platform references (including HeyTripGo) Payment Data PDF files containing credit card numbers, expiration dates and CVV cod...

1.0Published

regencyrestors

stormous🇬🇧 GB
Jun 19, 2026

Full customer reservation databases (names, phones, emails, addresses, booking dates) Scanned ID documents (passports, national IDs) Internal emails via OWA Emp...

1.0Published

regencycountryclub

stormous🇪🇸 ES
Jun 19, 2026

Full customer reservation databases (names, phones, emails, addresses, booking dates) Scanned ID documents (passports, national IDs) Internal emails via OWA Emp...

1.0Published

regencytorviscas

stormous🇪🇸 ES
Jun 19, 2026

Full customer reservation databases (names, phones, emails, addresses, booking dates) Scanned ID documents (passports, national IDs) Internal emails via OWA Emp...

1.0Published

enersolcr

stormous🇨🇷 CR
Jun 19, 2026

Internal Data - System Data - 73 Partner Data - Customer Data (Email, Name, Phone Number) - Admin Data and Their Roles, etc....

1.0Published

acuity

stormous🇺🇸 US
Jun 19, 2026

This includes important legal documents such as drafts of non-disclosure agreements (NDA) pertaining to the company and strategic partners like Bosch, detailed ...

1.0Published

French Government

stormous🇫🇷 FR
Jun 19, 2026

Stealer-type breach Valid credentials, sensitive access

Public Sector1.0Published

bkcolombia

stormous🇨🇴 CO
Jun 19, 2026

(Folders/Files) Email/Communication/System/Application Data AYEAPLICACIONES database/Log Data BDATOSFITCLOD, Software/Installation/Program Files AUTOBOU, Person...

1.0Published

katholiekamersfoort.nl

stormous🇳🇱 NL
Jun 19, 2026

The church website's network (katholiekamersfoort.nl/) has been breached, resulting in the exfiltration of over 10 GB of data. This data pertains to donors, sta...

Education10 GB1.0Published
katholiekamersfoort.nl

ascires.com

stormous🇪🇸 ES
Jun 19, 2026

Client Data - Medical Reports - Financial Status (Bank reports, taxes, and more) - Annual Accounts - Personal Information - New Projects - Large amounts of pati...

Healthcare700 GB1.0Published
ascires.com

mlit.com.my

stormous🇲🇾 MY
Jun 12, 2026

FULL DATA DUMP . The compromised data includes highly sensitive internal operations and financial records. Among the leaked files are complete individual Campai...

Public Sector10 GB1.0Published
mlit.com.my

sa2000.com

stormous🇸🇦 SA
Jun 4, 2026

150 GB of data has been extracted, including: COMPTABILITÉ - FACTURES ACHAT / FACTURES À PAYER / FACTURES MODIFIÉES - Banking Informations SA2000 - PAIEMENTS CL...

150 GB1.0Published
sa2000.com

holidaypalace

stormous
Jun 2, 2026

All of this data is offered for sale (user information: email, phone number, full name, date of birth / payment and booking data / ID cards and passports used i...

10 GB1.0Published

Data

stormous🇦🇺 AU
May 13, 2026

+40G Full Financial Backups (Quickbooks & Reckon)-Email Archives & Staff Personal Folders-Customer/Client Databases (Installers & Integrators nationwide)-Shipme...

Business Services1.0Published
vspsolutions.com.au

ams-group.co.uk

stormous🇬🇧 GB
May 10, 2026

The extracted data comprises administrative and financial records, payroll sheets, and client and partner directories, alongside technical and engineering speci...

Business Services33 GB1.0Published
ams-group.co.uk

ttt.vn

stormous🇻🇳 VN
May 6, 2026

$900k to Solve the Problem 5TB — While TTT Company was preoccupied with designing luxurious interiors and architectural masterpieces, they completely overlooked...

5 TB1.0Published
ttt.vn

or-technology.com

stormous🇮🇱 IL
May 3, 2026

Financial & Sales Intelligence ، Sales Statistics by Quarter (Q1, Q2, Q3, Q4)، Corporate & Strategic Planning ، SQL ، Project Reports

Technology1.0Published
or-technology.com

cgcsa.co.za

stormous🇿🇦 ZA
May 3, 2026

We releasing the databases of CGCSA.CO.ZA (Consumer Goods Council of South Africa) for free. This comes after the company failed to reach a resolution and publi...

Business Services20 GB1.0Published
cgcsa.co.za

arc-reins.com + fidelityunited.ae

stormous🇦🇪 AE
May 2, 2026

We have gained full control over 700 GB of data, which includes: meticulous compliance audit data, complete Bank details for ARC, legal licenses, tax documents,...

Financial Services700 GB1.0Published
arc-reins.com

Initial Access Brokers - Long-Term Collaboration

stormous
Mar 28, 2026

We are currently seeking reliable Initial Access Brokers for long-term collaboration. ** Please do not waste time attempting complex exploit development or dire...

1.0Published

Stormous.

stormous
Mar 14, 2026
Published

Data Publication Portal

stormous
Feb 22, 2026

The following entities have failed to secure their infrastructure. Their data is being prepared for public release. We provide a window for negotiation before t...

1.0Published

FRANCE TRAVAIL DATA BREACH - 2025

stormous
Oct 27, 2025

Plaintext authentication credentials (usernames/passwords)-(full names, dates of birth, gender)-(addresses, phone numbers, emails)-Employment history and profes...

5.0Published

Volkswagen

stormous🇩🇪 DE
Oct 27, 2025

CarNet system breach Internal data accessed

Manufacturing3.0Published
volkswagen-group.com

Infrastructure

leak site
OFFLINE
http://zib7duoiglvzvnpjs5faly6bio4xhwiby2lupsnxrkjnx46gmwdfyrid.onion/

never crawled

leak site
OFFLINE
http://h3reihqb2y7woqdary2g3bmk3apgtxuyhx4j2ftovbhe3l5svev7bdyd.onion/stm.html

never crawled

leak site
OFFLINE

unreachable

http://pdcizqzjitsgfcgqeyhuee5u6uki6zy5slzioinlhx6xjnsw25irdgqd.onion

2581ms

2d ago

leak site
OFFLINE

unreachable

http://6sf5xa7eso3e3vk46i5tpcqhnlayczztj7zjktzaztlotyy75zs6j7qd.onion

3798ms

23h ago

leak site
OFFLINE
http://3slz4povugieoi3tw7sblxoowxhbzxeju427cffsst5fo2tizepwatid.onion/datashop.html

never crawled

leak site
OFFLINE

unreachable

http://stmxylixiz4atpmkspvhkym4xccjvpcv3v67uh3dze7xwwhtnz4faxid.onion

3419ms

23h ago