bert
Activity analysis
HackerFeeds has tracked 7 victims claimed by bert since April 2025, most recently in June 2025 — ranking #239 of 332 groups (0% of all tracked ransomware victims). No new victims have been posted in the last 180 days; the most recent claim was in June 2025. Its most-targeted sector is Technology (3 victims), followed by Transportation/Logistics (1). The United States accounts for 2 victims (29% of those with a known location).
Victims per year
- 20257
Top sectors
- Technology3
- Transportation/Logistics1
- Healthcare1
- Construction1
- Business Services1
Top countries
Computed from victims claimed on the group's leak site as collected by HackerFeeds; claims are not independently verified. Monthly reports · Methodology
Group profile
BERT is a newly emerged ransomware group first identified in mid-2025, targeting Windows and Linux platforms across healthcare, technology, and event services sectors in Asia, Europe, and the US, with ransomware derived from a Linux variant of REvil using AES encryption and multi-threaded file locking.
Recent victims
| Date | Website / victim | Sector | Country |
|---|---|---|---|
| 2025-06-10 |  S5 Agency Worlds5agencyworld.com | Transportation | GB |
| 2025-06-05 |  Columbia TIcolumbiati.com.br | Technology | CO |
| 2025-05-22 |  Wawasan Dengkil Sdn Bhdwawasandengkil.com.my | Other | MY |
| 2025-05-16 |  ALL RING TECH CO., LTD.allringtech.com | Technology | TW |
| 2025-04-30 |  SIMCO Electronicssimco.com | Technology | US |
| 2025-04-09 |  Yozgat City Hospitalyozgatsehir.saglik.gov.tr | Healthcare | TR |
| 2025-04-04 |  National Ticket Companynationalticket.com | Professional Services | US |