runsomewares
Activity analysis
HackerFeeds has tracked 7 victims claimed by runsomewares since June 2024, most recently in October 2026 — ranking #239 of 332 groups (0% of all tracked ransomware victims). It posted 1 victims in the last 90 days, with no victims in the 90 days before that. Its most-targeted sector is Financial Services (3 victims), followed by Healthcare (2). The United States accounts for 5 victims (71% of those with a known location).
Victims per year
- 20241
- 20255
- 20261
Top sectors
- Financial Services3
- Healthcare2
- Transportation/Logistics1
- Manufacturing1
Top countries
Computed from victims claimed on the group's leak site as collected by HackerFeeds; claims are not independently verified. Monthly reports · Methodology
Group profile
RunSomeWares is an emerging ransomware group that surfaced in February 2025 with initial victims across supply-chain services, financial services, accounting, and manufacturing, with unclear deployment of an encryptor vs. pure data-theft extortion.
Recent victims
| Date | Website / victim | Sector | Country |
|---|---|---|---|
| 2026-10-08 | M Morton LTC Pharmacy | Healthcare | US |
| 2025-07-10 |  Coös County Family Healthcoosfamilyhealth.org | Healthcare | US |
| 2025-04-10 |  HarvestHarvest.fr | Financial Services | FR |
| 2025-02-27 |  Donna G. Rogers, CPA, P.A.dgrogerscpa.com | Financial Services | US |
| 2025-02-27 |  Thai Metal Aluminium Co., Ltdthaimetal.co | Manufacturing | TH |
| 2025-01-01 |  F&V Capital Management, LLC (FVCM)fvcapital.us | Financial Services | US |
| 2024-06-22 |  Gilbertgilbertusa.com | Transportation | US |