arvinclub
Activity analysis
HackerFeeds has tracked 35 victims claimed by arvinclub since September 2021, most recently in October 2023 — ranking #135 of 332 groups (0.1% of all tracked ransomware victims). No new victims have been posted in the last 180 days; the most recent claim was in October 2023. Its most-targeted sector is Financial Services (4 victims), followed by Education (4). Iran accounts for 8 victims (57% of those with a known location); 21 victims did not disclose a location.
Victims per year
- 202113
- 20224
- 202318
Top sectors
- Financial Services4
- Education4
- Agriculture and Food Production4
- Consumer Services3
- Business Services2
- Transportation/Logistics1
Top countries
Computed from victims claimed on the group's leak site as collected by HackerFeeds; claims are not independently verified. Monthly reports · Methodology
Group profile
Arvin Club is a threat actor with hacktivist leanings that first appeared in May 2021, primarily publishing stolen data via a TOR site and Telegram rather than deploying file-encrypting ransomware, targeting government, education, and banking sectors globally including Iranian government entities.
Recent victims
No victims tracked yet.

