Back to Threat Groups

stormous

ACTIVE

ransomware group

🇤🇤??

Stormous is a pro-Russian hacktivist and ransomware group that emerged around mid-2021, believed to include members from Middle Eastern countries who are ideologically aligned with Russian interests, publicly declaring support for Russia following its 2022 invasion of Ukraine. The group has targeted organizations in the United States, Ukraine, and Western-aligned nations and has operated joint operations with the GhostSec hacktivist collective under the "Five Families" banner. Stormous launched a RaaS operation and has claimed attacks against organizations including Epic Games and Ukrainian government entities, though some victim claims have been disputed for authenticity.

Victims
187
records
First Discovered
Mar 22, 2022
victim
Last Discovered
Jun 24, 2026
victim
Inactive Since
2
days
Countries
42
hit
Avg Discount
no settlements

Group Activity

Last 12 months
1
Jul
2025
Aug
2025
Sep
2025
3
Oct
2025
Nov
2025
Dec
2025
Jan
2026
1
Feb
2026
2
Mar
2026
Apr
2026
6
May
2026
34
Jun
2026

Victims (187)

impulso-store.com

stormous
2d ago

Complete data belonging to customers and buyers has been accessed, along with designs, orders, and other assets. This includes all domains associated with the p...

Published
impulso-store.com

montechiaro-store.com

stormous
2d ago

Complete data belonging to customers and buyers has been accessed, along with designs, orders, and other assets. This includes all domains associated with the p...

Published
montechiaro-store.com

lorenzoni-store.com

stormous
2d ago

Complete data belonging to customers and buyers has been accessed, along with designs, orders, and other assets. This includes all domains associated with the p...

Published
lorenzoni-store.com

maglificioliliana.com

stormous
2d ago

Over 400 GB of data has been accessed and exfiltrated. This includes product designs, historical fashion lines, and technical specifications for garments. Furth...

400 GBPublished
maglificioliliana.com

mlit.com.my UPDATE-FULL DATA DUMP NEW LINK 10GB

stormous🇲🇾 MY
2d ago

FULL DATA DUMP . The compromised data includes highly sensitive internal operations and financial records. Among the leaked files are complete individual Campai...

Public Sector10 GBPublished
mlit.com.my

jaggroup.com UPDATE-FULL DATA DUMP NEW LINK

stormous🇲🇾 MY
6d ago

Full database containing corporate emails (⁠@jaggroup.com⁠), Active Directory domain logins, and clear plain-text passwords.Complete Microsoft Dynamics GP datab...

Published
jaggroup.com

novelis

stormous🇺🇸 US
7d ago

Novelis is an aluminum company created by Alcan's spin-off in 2005. It was acquired by Hindalco in 2007.

ManufacturingPublished
novelis.com

casioindia

stormous🇮🇳 IN
7d ago

casio india 2024-05-03 casio-india Leaked

Published
casio.co.in

berjayaclubs

stormous🇲🇾 MY
7d ago

berjayaclubs 2024-05-03 berjayaclubs Leaked

Hospitality and TourismPublished
berjayaclubs.com

Acuity Advisor

stormous🇺🇸 US
7d ago

Acuity Advisor 2024-10-01 acuity-advisor Leaked

Published

AOSense/NASA

stormous🇺🇸 US
7d ago

AOSense/NASA 2024-10-05 AOSense/NASA Leaked

Published

ascires

stormous🇪🇸 ES
7d ago

ascires.com/

HealthcarePublished
ascires.com

vouch.co.uk + KYC UK

stormous🇬🇧 GB
7d ago

Vouch does not protect its customers' data at all and stores it poorly. Many users' data, including KYC information, UK ID cards, email addresses, phone numbers...

3 GBPublished
vouch.co.uk

americanadecolchones

stormous🇨🇴 CO
7d ago

VPN access to the company's internal network is provided.

Published

visioninksltd

stormous🇬🇧 GB
7d ago

Vision Inks and Resins Limited (previously known as Vision Inks & Resins) is established in May 1999 with Factory at MIDC, Murbad, Maharashtra INDIA...

Published

Sincroslab Sas

stormous🇮🇹 IT
7d ago

Sincroslab Sas is a company in Colombia, with a head office in Bogota D.C.. It operates in the Miscellaneous Nondurable Goods Merchant Wholesalers industry.

Published

bulentklise

stormous🇹🇷 TR
7d ago

Customer names, identification numbers, production orders, client records, delivery tracking data, customer information, logos, and more

Published

thewatermansarms

stormous🇬🇧 GB
7d ago

CVs - Bank - VCF - Business accounts - image - SCAN - Passport Details - ID Card -......

Published

atolon-parkhotel

stormous🇩🇪 DE
7d ago

CVs - FACTURES - Hwawei.com - AA GROUPE 2025 - RESERVATION 2025 - PERSONNELS - INFOS - STAGIAIRES.....

Published
hwawei.com

Hy-Vee

stormous🇺🇸 US
7d ago

Hy-Vee refuses to pay, and we are proceeding to leak all the data that was extracted. Internal documents, infrastructure diagrams, employee data, training mater...

Published

crystalhotels

stormous🇹🇷 TR
7d ago

Full names of hotel guests, Email addresses (internal and external), Customer complaints and feedback content, Booking or reference numbers, Internal hotel comm...

Published

jparkislandresort

stormous🇵🇭 PH
7d ago

Full reservation databases Booking platform references (including HeyTripGo) Payment Data PDF files containing credit card numbers, expiration dates and CVV cod...

Published

regencyrestors

stormous🇬🇧 GB
7d ago

Full customer reservation databases (names, phones, emails, addresses, booking dates) Scanned ID documents (passports, national IDs) Internal emails via OWA Emp...

Published

regencycountryclub

stormous🇪🇸 ES
7d ago

Full customer reservation databases (names, phones, emails, addresses, booking dates) Scanned ID documents (passports, national IDs) Internal emails via OWA Emp...

Published

regencytorviscas

stormous🇪🇸 ES
7d ago

Full customer reservation databases (names, phones, emails, addresses, booking dates) Scanned ID documents (passports, national IDs) Internal emails via OWA Emp...

Published

enersolcr

stormous🇨🇷 CR
7d ago

Internal Data - System Data - 73 Partner Data - Customer Data (Email, Name, Phone Number) - Admin Data and Their Roles, etc....

Published

acuity

stormous🇺🇸 US
7d ago

This includes important legal documents such as drafts of non-disclosure agreements (NDA) pertaining to the company and strategic partners like Bosch, detailed ...

Published

French Government

stormous🇫🇷 FR
7d ago

Stealer-type breach Valid credentials, sensitive access

Public SectorPublished

bkcolombia

stormous🇨🇴 CO
7d ago

(Folders/Files) Email/Communication/System/Application Data AYEAPLICACIONES database/Log Data BDATOSFITCLOD, Software/Installation/Program Files AUTOBOU, Person...

Published

katholiekamersfoort.nl

stormous🇳🇱 NL
7d ago

The church website's network (katholiekamersfoort.nl/) has been breached, resulting in the exfiltration of over 10 GB of data. This data pertains to donors, sta...

Education10 GBPublished
katholiekamersfoort.nl

ascires.com

stormous🇪🇸 ES
7d ago

Client Data - Medical Reports - Financial Status (Bank reports, taxes, and more) - Annual Accounts - Personal Information - New Projects - Large amounts of pati...

Healthcare700 GBPublished
ascires.com

mlit.com.my

stormous🇲🇾 MY
14d ago

FULL DATA DUMP . The compromised data includes highly sensitive internal operations and financial records. Among the leaked files are complete individual Campai...

Public Sector10 GBPublished
mlit.com.my

sa2000.com

stormous🇸🇦 SA
22d ago

150 GB of data has been extracted, including: COMPTABILITÉ - FACTURES ACHAT / FACTURES À PAYER / FACTURES MODIFIÉES - Banking Informations SA2000 - PAIEMENTS CL...

150 GBPublished
sa2000.com

holidaypalace

stormous
24d ago

All of this data is offered for sale (user information: email, phone number, full name, date of birth / payment and booking data / ID cards and passports used i...

10 GBPublished

Data

stormous🇦🇺 AU
May 13, 2026

+40G Full Financial Backups (Quickbooks & Reckon)-Email Archives & Staff Personal Folders-Customer/Client Databases (Installers & Integrators nationwide)-Shipme...

Business Services1.0Published
vspsolutions.com.au

ams-group.co.uk

stormous🇬🇧 GB
May 10, 2026

The extracted data comprises administrative and financial records, payroll sheets, and client and partner directories, alongside technical and engineering speci...

Business Services33 GB1.0Published
ams-group.co.uk

ttt.vn UPDATE-FULL DATA DUMP

stormous🇻🇳 VN
May 6, 2026

ttt.vn UPDATE-FULL DATA DUMP 2026-05-13 ttt.vn UPDATE-FULL DATA DUMP $900k to Solve the Problem 5TB — While TTT Company was preoccupied with designing luxurious...

5TB1.0Published
ttt.vn

or-technology.com

stormous🇮🇱 IL
May 3, 2026

Financial & Sales Intelligence ، Sales Statistics by Quarter (Q1, Q2, Q3, Q4)، Corporate & Strategic Planning ، SQL ، Project Reports

Technology1.0Published
or-technology.com

cgcsa.co.za

stormous🇿🇦 ZA
May 3, 2026

We releasing the databases of CGCSA.CO.ZA (Consumer Goods Council of South Africa) for free. This comes after the company failed to reach a resolution and publi...

Business Services20 GB1.0Published
cgcsa.co.za

arc-reins.com + fidelityunited.ae

stormous🇦🇪 AE
May 2, 2026

We have gained full control over 700 GB of data, which includes: meticulous compliance audit data, complete Bank details for ARC, legal licenses, tax documents,...

Financial Services700 GB1.0Published
arc-reins.com

Initial Access Brokers - Long-Term Collaboration

stormous
Mar 28, 2026

We are currently seeking reliable Initial Access Brokers for long-term collaboration. ** Please do not waste time attempting complex exploit development or dire...

1.0Published

Stormous.

stormous
Mar 14, 2026
Published

Data Publication Portal

stormous
Feb 22, 2026

The following entities have failed to secure their infrastructure. Their data is being prepared for public release. We provide a window for negotiation before t...

1.0Published

FRANCE TRAVAIL DATA BREACH - 2025

stormous
Oct 27, 2025

Plaintext authentication credentials (usernames/passwords)-(full names, dates of birth, gender)-(addresses, phone numbers, emails)-Employment history and profes...

5.0Published

Volkswagen

stormous🇩🇪 DE
Oct 27, 2025

CarNet system breach Internal data accessed

Manufacturing3.0Published
volkswagen-group.com

usbmemorydirect.com

stormous🇺🇸 US
Oct 27, 2025

Personal data (individual names, photos, etc.), company/business data (company names, services, tools, equipment), backup copies, system archive compressed file...

Technology5.0Published
usbmemorydirect.com

North Country HealthCare

stormous🇺🇸 US
Jul 13, 2025

Health information for 600,000 patients has been accessed from the North Country Health (NCH) care

Healthcare7.0Published
nch.org

hy-vee.com

stormous🇺🇸 US
Jun 23, 2025

Access to Hy-Vee's environment was obtained through compromised Atlassian accounts, including tools such as Confluence and Jira. Internal documents, infrastruct...

Agriculture and Food Production5.0Published
hy-vee.com

bulentklise.com.tr

stormous🇹🇷 TR
Jun 14, 2025

Customer names, identification numbers, production orders, client records, delivery tracking data, customer information, logos, and more

Manufacturing7.0Published
bulentklise.com.tr

French Gov "PYV S"

stormous🇫🇷 FR
Jun 12, 2025

Stealer-type breach — enjoy!

Public Sector1.0Published

Infrastructure

leak_site
ONLINE
http://pdcizqzjitsgfcgqeyhuee5u6uki6zy5slzioinlhx6xjnsw25irdgqd.onion

4548ms

3m ago

leak site
OFFLINE

render failed

http://h3reihqb2y7woqdary2g3bmk3apgtxuyhx4j2ftovbhe3l5svev7bdyd.onion/stm.html

3343ms

4h ago

leak site
OFFLINE

render failed

http://6sf5xa7eso3e3vk46i5tpcqhnlayczztj7zjktzaztlotyy75zs6j7qd.onion

4923ms

3h ago

leak site
OFFLINE

render failed

http://stmxylixiz4atpmkspvhkym4xccjvpcv3v67uh3dze7xwwhtnz4faxid.onion

45626ms

4h ago

leak site
OFFLINE

render failed

http://3slz4povugieoi3tw7sblxoowxhbzxeju427cffsst5fo2tizepwatid.onion/datashop.html

3921ms

4h ago

leak site
OFFLINE

render failed

http://h3reihqb2y7woqdary2g3bmk3apgtxuyhx4j2ftovbhe3l5svev7bdyd.onion

7410ms

2h ago