Search Ransomware Intelligence
Jump to a group, country, industry or search victims.
DataCarry
As of Oct 19, 2026, DataCarry has listed 15 confirmed victims on its leak site since May 26, 2025, 0.0% of all victims tracked by Brandefense. Its most targeted country is Belgium (13.3% of its victims) and its most targeted sector is Financial Services.
DataCarry is a ransomware and data-extortion operation first observed in May 2025, operating a double-extortion model with a Tor-hosted leak portal and claiming victims across insurance, healthcare, aerospace, legal, and retail sectors in at least six countries.
Follow and IOC feeds are part of the Brandefense platform.
- Confirmed Victims
- 15
- Rank By Victims
- #192
- Last Leak-Site Post
- Dec 6, 2025
- Top Country
- Belgium
- Top Sector
- Financial Services
Victims Posted Per Month.
| Month | Confirmed victims |
|---|---|
| May 2026 | 0 |
| June 2026 | 0 |
| July 2026 | 0 |
| August 2026 | 0 |
| September 2026 | 0 |
| October 2026 (month in progress) | 0 |
| Month | Confirmed victims |
|---|---|
| November 2025 | 1 |
| December 2025 | 1 |
| January 2026 | 0 |
| February 2026 | 0 |
| March 2026 | 0 |
| April 2026 | 0 |
| May 2026 | 0 |
| June 2026 | 0 |
| July 2026 | 0 |
| August 2026 | 0 |
| September 2026 | 0 |
| October 2026 (month in progress) | 0 |
| Month | Confirmed victims |
|---|---|
| May 2025 | 9 |
| June 2025 | 2 |
| July 2025 | 0 |
| August 2025 | 1 |
| September 2025 | 1 |
| October 2025 | 0 |
| November 2025 | 1 |
| December 2025 | 1 |
| January 2026 | 0 |
| February 2026 | 0 |
| March 2026 | 0 |
| April 2026 | 0 |
| May 2026 | 0 |
| June 2026 | 0 |
| July 2026 | 0 |
| August 2026 | 0 |
| September 2026 | 0 |
| October 2026 (month in progress) | 0 |
Latest DataCarry Victims.
Search all 15 →| Victim | Country | Industry | Data claimed | Posted |
|---|---|---|---|---|
| Camomilla camomillaitalia.com | ITItaly | Unknown | Not stated | |
| UAM uam.es | ESSpain | Unknown | Not stated | |
| Miljödata miljodata.se | SESweden | Technology | Not stated | |
| Peggy Sage peggysage.com | FRFrance | Retail | Not stated | |
| Món Sant Benet monstbenet.com | ESSpain | Hospitality and Tourism | Not stated | |
| V2 Performance v2performance.com | USUnited States | Unknown | Not stated |
How They Operate.
DataCarry's threat actor profile lists 1 malware and tools, with its targets and related actors.
TTPs, CVEs and malware →Who DataCarry Targets.
Sectors
History.
Busiest month on record: 9 confirmed victims
First seen in Brandefense data
First confirmed victim listed on its leak site
Most recent leak-site post
Get Real-Time Alerts, IOC Feeds And Takedowns.
The Brandefense platform watches every leak site for your company, vendors and executives, and acts on what it finds.