orca
Activity analysis
HackerFeeds has tracked 5 victims claimed by orca since September 2024, most recently in April 2026 — ranking #259 of 332 groups (0% of all tracked ransomware victims). No new victims have been posted in the last 180 days; the most recent claim was in April 2026. Its most-targeted sector is Technology (2 victims), followed by Transportation/Logistics (1). Tunisia accounts for 1 victims (20% of those with a known location).
Victims per year
- 20243
- 20251
- 20261
Top sectors
- Technology2
- Transportation/Logistics1
- Manufacturing1
- Agriculture and Food Production1
Top countries
Computed from victims claimed on the group's leak site as collected by HackerFeeds; claims are not independently verified. Monthly reports · Methodology
Group profile
Orca is a ransomware group that emerged in September 2024, identified as a variant of the Zeppelin malware family, targeting organizations in manufacturing and logistics across Taiwan, Tunisia, Austria, and France, claiming to avoid hospitals, government institutions, and non-profits.
Recent victims
| Date | Website / victim | Sector | Country |
|---|---|---|---|
| 2026-04-27 |  Casale Del Gigliowww.casaledelgiglio.it | Agriculture and Food Production | IT |
| 2025-05-07 |  Transport Lutztullntransport.lutztulln.com | Transportation | AT |
| 2024-10-04 |  Transtec SAStranstec.com.co | Technology | CO |
| 2024-09-18 |  Chernan Technologychernan.com | Technology | CN |
| 2024-09-16 |  ExcelPlast Tunisieexcelplastunisie.com | Manufacturing | TN |