ms13089
Activity analysis
HackerFeeds has tracked 5 victims claimed by ms13089 since December 2025, most recently in August 2026 — ranking #259 of 332 groups (0% of all tracked ransomware victims). It posted 1 victims in the last 90 days, with no victims in the 90 days before that. Its most-targeted sector is Business Services (2 victims), followed by Other (1). The United States accounts for 1 victims (20% of those with a known location).
Victims per year
- 20252
- 20263
Top sectors
- Business Services2
- Other1
- Healthcare1
- Consumer Services1
Top countries
Computed from victims claimed on the group's leak site as collected by HackerFeeds; claims are not independently verified. Monthly reports · Methodology
Group profile
MS13089 is a newly emerged ransomware group (first observed December 2025) that named itself after a 2013 Microsoft Security Bulletin, claiming a handful of victims including a law firm, operating primarily as a double-extortion actor.
Recent victims
No victims tracked yet.