abyss
Activity analysis
HackerFeeds has tracked 91 victims claimed by abyss since March 2023, most recently in August 2026 — ranking #79 of 332 groups (0.3% of all tracked ransomware victims). It posted 1 victims in the last 90 days, down 67% on the previous 90 days (3). Its most-targeted sector is Business Services (19 victims), followed by Healthcare (13). The United States accounts for 43 victims (66% of those with a known location); 26 victims did not disclose a location.
Victims per year
- 202329
- 202443
- 202513
- 20266
Top sectors
- Business Services19
- Healthcare13
- Technology12
- Manufacturing10
- Agriculture and Food Production8
- Financial Services6
Top countries
Computed from victims claimed on the group's leak site as collected by HackerFeeds; claims are not independently verified. Monthly reports · Methodology
Group profile
Abyss (also known as Abyss Locker) is a ransomware operation first identified in March 2023, derived from the Babuk source code, that targets Windows and Linux/VMware ESXi systems using double-extortion tactics across healthcare, manufacturing, finance, and technology sectors — predominantly in North America.
Recent victims
No victims tracked yet.