Search Ransomware Intelligence
Jump to a group, country, industry or search victims.
Alp-001
As of Oct 19, 2026, Alp-001 has listed 17 confirmed victims on its leak site since Mar 31, 2025, 0.1% of all victims tracked by Brandefense. Its most targeted country is France (17.6% of its victims) and its most targeted sector is Technology.
⚠️ Verification Notice: Claims published by ALP-001 have not been independently verified. This group is believed to be an established Initial Access Broker (IAB) transitioning into extortion operations. While network access to listed victims may be genuine, there is currently no confirmed evidence of large-scale data exfiltration. No proof files, screenshots, or data samples have been validated at this time. Treat all ALP-001 victim listings as unconfirmed pending independent corroboration.
Follow and IOC feeds are part of the Brandefense platform.
- Confirmed Victims
- 17
- Rank By Victims
- #183
- Last Leak-Site Post
- Apr 8, 2026
- Top Country
- France
- Top Sector
- Technology
Victims Posted Per Month.
| Month | Confirmed victims |
|---|---|
| May 2026 | 0 |
| June 2026 | 0 |
| July 2026 | 0 |
| August 2026 | 0 |
| September 2026 | 0 |
| October 2026 (month in progress) | 0 |
| Month | Confirmed victims |
|---|---|
| November 2025 | 0 |
| December 2025 | 0 |
| January 2026 | 1 |
| February 2026 | 0 |
| March 2026 | 10 |
| April 2026 | 5 |
| May 2026 | 0 |
| June 2026 | 0 |
| July 2026 | 0 |
| August 2026 | 0 |
| September 2026 | 0 |
| October 2026 (month in progress) | 0 |
| Month | Confirmed victims |
|---|---|
| March 2025 | 1 |
| April 2025 | 0 |
| May 2025 | 0 |
| June 2025 | 0 |
| July 2025 | 0 |
| August 2025 | 0 |
| September 2025 | 0 |
| October 2025 | 0 |
| November 2025 | 0 |
| December 2025 | 0 |
| January 2026 | 1 |
| February 2026 | 0 |
| March 2026 | 10 |
| April 2026 | 5 |
| May 2026 | 0 |
| June 2026 | 0 |
| July 2026 | 0 |
| August 2026 | 0 |
| September 2026 | 0 |
| October 2026 (month in progress) | 0 |
Latest Alp-001 Victims.
Search all 17 →| Victim | Country | Industry | Data claimed | Posted |
|---|---|---|---|---|
| inatech.com inatech.com | GBUnited Kingdom | Technology | 51 GB | |
| nepgroup.com nepgroup.com | USUnited States | Media and Entertainment | 70 GB | |
| aviwest.com aviwest.com | FRFrance | Retail | 118 GB | |
| artmotion.net artmotion.net | CHSwitzerland | Technology | 600 GB | |
| asseco-ce.com asseco-ce.com | PLPoland | Technology | 230 GB | |
| irco.com irco.com | USUnited States | Manufacturing | 5.9 TB |
How They Operate.
Alp-001's threat actor profile lists 1 ATT&CK techniques, 1 malware and tools, with its targets and related actors.
TTPs, CVEs and malware →Who Alp-001 Targets.
Sectors
History.
First confirmed victim listed on its leak site
Busiest month on record: 10 confirmed victims
First seen in Brandefense data
Most recent leak-site post
Get Real-Time Alerts, IOC Feeds And Takedowns.
The Brandefense platform watches every leak site for your company, vendors and executives, and acts on what it finds.