All ransomware groups
datacarry
16 tracked victims
·first seen 2024-06-26·last activity 2025-12-06Group profile
DataCarry is a ransomware and data-extortion operation first observed in May 2025, operating a double-extortion model with a Tor-hosted leak portal and claiming victims across insurance, healthcare, aerospace, legal, and retail sectors in at least six countries.
Recent victims
| Date | Website / victim | Sector | Country |
|---|---|---|---|
| 2025-12-06 |  Camomillacamomilla.com | Retail & E-Commerce | IT |
| 2025-11-21 | U UAM | Transportation | ES |
| 2025-09-13 | M Miljödata (1 day left) | Agriculture and Food Production | SE |
| 2025-09-13 |  Miljödatamiljodata.se | Agriculture and Food Production | SE |
| 2025-08-15 |  Peggy Sagepeggysage.com | Retail & E-Commerce | FR |
| 2025-06-07 |  Món Sant Benetmonsantbenet.com | Hospitality | ES |
| 2025-05-28 |  V² Developmentvsquared2.com | Technology | GR |
| 2025-05-29 |  Alliance Healthcare ITalliancehealthcareit.com | Healthcare | IT |
| 2025-05-26 |  La Maison Liégeoisemaisonliegeoise.be | Retail & E-Commerce | BE |
| 2025-01-30 |  Executive Jet Supportejs.aero | Transportation | GB |
| 2025-05-26 |  alles Lægehusalleslaegehus.dk | Healthcare | DK |
| 2024-09-27 |  Mammut Sports Groupmammut.com | Retail & E-Commerce | CH |
| 2024-11-12 |  FrontierCofrontierco.co.za | Retail & E-Commerce | ZA |
| 2025-01-12 |  Étude Bordetetudebordet.com | Professional Services | BE |
| 2024-10-25 |  ALB Forexalb.com | Financial Services | TR |
| 2024-06-26 |  Balcia Insurancebalcia.com | Financial Services | LV |