http://www.kcac.com ransomware attack (BlackSuit, 2025)
http://www.kcac.com was named on the BlackSuit ransomware data-leak (extortion) site on 2025-06-02.
- Victim
- http://www.kcac.com
Incidents attributed to:
BlackSuit
Related incidents
http://metromont.com ransomware attack (BlackSuit, 2025)
http://metromont.com was named on the BlackSuit ransomware data-leak (extortion) site on 2025-05-29.
- Victim
- http://metromont.com
http://www.innsofaurora.com ransomware attack (BlackSuit, 2025)
http://www.innsofaurora.com was named on the BlackSuit ransomware data-leak (extortion) site on 2025-05-29.
- Victim
- http://www.innsofaurora.com
http://www.gloucesterva.gov ransomware attack (BlackSuit, 2025)
http://www.gloucesterva.gov was named on the BlackSuit ransomware data-leak (extortion) site on 2025-05-15.
- Victim
- http://www.gloucesterva.gov
https://fortunesociety.org/ ransomware attack (BlackSuit, 2025)
https://fortunesociety.org/ was named on the BlackSuit ransomware data-leak (extortion) site on 2025-04-24.
- Victim
- https://fortunesociety.org/
https://www.pacmet.com ransomware attack (BlackSuit, 2025)
https://www.pacmet.com was named on the BlackSuit ransomware data-leak (extortion) site on 2025-04-24.
- Victim
- https://www.pacmet.com
https://www.mmwec.org ransomware attack (BlackSuit, 2025)
https://www.mmwec.org was named on the BlackSuit ransomware data-leak (extortion) site on 2025-04-05.
- Victim
- https://www.mmwec.org
https://www.orangeville.ca ransomware attack (BlackSuit, 2025)
https://www.orangeville.ca was named on the BlackSuit ransomware data-leak (extortion) site on 2025-03-21.
- Victim
- https://www.orangeville.ca
https://www.dapope.com/ ransomware attack (BlackSuit, 2025)
https://www.dapope.com/ was named on the BlackSuit ransomware data-leak (extortion) site on 2025-02-17.
- Victim
- https://www.dapope.com/
CDK Global BlackSuit ransomware (2024)
BlackSuit operators encrypted CDK Global's dealer-management platform, knocking ~15,000 North American car dealerships offline for nearly two weeks. A second attack hit on day two of recovery. Industry losses estimated at over $1 billion; CDK reportedly paid a $25 million ransom.
- Victim
- CDK Global
- Loss
- $1.00B
KADOKAWA / Niconico BlackSuit ransomware (2024)
Phishing access let BlackSuit (Russian-linked) encrypt KADOKAWA's infrastructure and the Niconico video-sharing platform, taking services offline for two months. KADOKAWA paid ~$2.9M in cryptocurrency — and BlackSuit leaked the stolen 1.5 TB anyway.
- Victim
- KADOKAWA Corporation
- Loss
- $2.9M
- Records
- 254.2K