groove
Activity analysis
HackerFeeds has tracked 13 victims claimed by groove since September 2021, most recently in October 2021 — ranking #204 of 332 groups (0% of all tracked ransomware victims). No new victims have been posted in the last 180 days; the most recent claim was in October 2021. Its most-targeted sector is Healthcare (2 victims), followed by Technology (1).
Victims per year
- 202113
Top sectors
- Healthcare2
- Technology1
- Public Sector1
- Manufacturing1
Top countries
Computed from victims claimed on the group's leak site as collected by HackerFeeds; claims are not independently verified. Monthly reports · Methodology
Group profile
Groove emerged in mid-2021 as a loose criminal collective linked to former Babuk gang members, known for publicly leaking Fortinet VPN credentials to attract affiliates and calling for attacks on US government and financial targets; the group later claimed its entire operation was a hoax to mislead security researchers.
Recent victims
| Date | Website / victim | Sector | Country |
|---|---|---|---|
| 2021-10-30 | Я Я не пью виски но с ним бы выпил | Not Found | |
| 2021-10-23 | E episcopalretirement.com Возможна утечка | Healthcare | |
| 2021-10-23 | П Про русских в США | Not Found | |
| 2021-10-23 | T therecord.media 30k USD | Technology | |
| 2021-10-22 |  hagerstownpd.orghagerstownpd.org | Government & Defense | |
| 2021-10-22 |  trivalleypc.comtrivalleypc.com | Technology | |
| 2021-09-13 |  robinwoodortho.comrobinwoodortho.com | Healthcare | |
| 2021-09-10 | О Одно интервью | Not Found | |
| 2021-09-10 | У Украина и экстрадиции в США | Not Found | |
| 2021-09-09 | L ludofact.de 50 GB data stolen | Manufacturing | |
| 2021-09-09 | М Мысли о смысле | Not Found | |
| 2021-09-09 | З Запатченные fortinet точки входа | Not Found | |
| 2021-09-09 | М Мы можем просто договориться | Not Found |