HackerFeeds
All ransomware groups

blackwater

11 tracked victims
·first seen 2026-04-17·last activity 2026-08-24

Activity analysis

HackerFeeds has tracked 12 victims claimed by blackwater since March 2026, most recently in August 2026 — ranking #210 of 332 groups (0% of all tracked ransomware victims). It posted 3 victims in the last 90 days, level with the previous 90 days. Its most-targeted sector is Manufacturing (2 victims), followed by Healthcare (2). China accounts for 3 victims (27% of those with a known location); 1 victims did not disclose a location.

Victims per year

  • 202612

Top sectors

  • Manufacturing2
  • Healthcare2
  • Public Sector1
  • Professional Services1
  • Hospitality and Tourism1
  • Energy & Utilities1

Computed from victims claimed on the group's leak site as collected by HackerFeeds; claims are not independently verified. Monthly reports · Methodology

Group profile

Blackwater is a ransomware group that first surfaced in early 2026, combining file encryption with data theft and targeting healthcare organizations, with known victims including Minidoka Memorial Hospital in Idaho.

Recent victims

DateWebsite / victimSectorCountry
2026-08-24
ptesm.com
www.ptesm.comwww.ptesm.com
Not FoundPT
2026-08-15
amca.org.ar
www.amca.org.arwww.amca.org.ar
Professional ServicesAR
2026-08-15
shalina.com
www.shalina.comwww.shalina.com
Not FoundIN
2026-07-25
msgas.com.br
msgas.com.brmsgas.com.br
Energy & UtilitiesBR
2026-07-10
txdkj.com
txdkj.comtxdkj.com
Not FoundCN
2026-06-06
utourworld.com
www.utourworld.comwww.utourworld.com
Hospitality
2026-04-17
minidokamemorial.org
Minidoka Memorial Hospitalminidokamemorial.org
HealthcareUS
2026-04-17Professional ServicesBR
2026-04-29
twsz.com
Shenzhen Gongjin Electronicstwsz.com
ManufacturingCN
2026-04-30
compasshousingalliance.org
Compass Housing Alliancecompasshousingalliance.org
Government & DefenseUS
2026-05-02ManufacturingCN