Orion — Ransomware Profile
Orion is a ransomware operation first observed in October 2025 that listed 13 alleged victims on a dark web leak site across financial services, manufacturing, and healthcare, though analysts determined its victim list was recycled from prior LockBit and BlackCat disclosures rather than fresh compromises.IntelFusions coverage (1)
- Nova ransomware outpaces rivals with a global wave of leak claims 2026-07-22 · Ransomware
Recent claimed victims
- huntongroup.com 2026-08-05
- hphood.com 2026-08-05
- bridgestoneamericas.com 2026-08-05
- albanybank.com 2026-08-05
- ipsenlogistics.com 2026-08-05
- hetero.com 2026-08-05
- sitrack.com 2026-08-05
- kioti.com 2026-08-05
- udhaiyamdhall.com 2026-08-05
- emanic.net 2026-08-05
- daubertchemical.com 2026-08-05
- morrisgroupint.com 2026-08-05
- pricemodern.com 2026-08-05
- Nitrex Chemicals India 2026-08-05