Search Ransomware Intelligence
Jump to a group, country, industry or search victims.
Exitium
As of Oct 19, 2026, Exitium has listed 7 confirmed victims on its leak site since Mar 17, 2026, 0.0% of all victims tracked by Brandefense. Its most targeted country is United States (42.9% of its victims) and its most targeted sector is Government and Public Sector.
Exitium is a data extortion group first observed in early 2026, operating a Tor-based double extortion site and targeting victims via bulk data exfiltration followed by public naming-and-shaming, with known victims including a Brazilian agro-industrial firm and a US county appraisal district.
Follow and IOC feeds are part of the Brandefense platform.
- Confirmed Victims
- 7
- Rank By Victims
- #248
- Last Leak-Site Post
- Oct 10, 2026
- Top Country
- United States
- Top Sector
- Government and Public Sector
Victims Posted Per Month.
| Month | Confirmed victims |
|---|---|
| May 2026 | 0 |
| June 2026 | 0 |
| July 2026 | 0 |
| August 2026 | 0 |
| September 2026 | 0 |
| October 2026 (month in progress) | 1 |
| Month | Confirmed victims |
|---|---|
| March 2026 | 5 |
| April 2026 | 1 |
| May 2026 | 0 |
| June 2026 | 0 |
| July 2026 | 0 |
| August 2026 | 0 |
| September 2026 | 0 |
| October 2026 (month in progress) | 1 |
| Month | Confirmed victims |
|---|---|
| March 2026 | 5 |
| April 2026 | 1 |
| May 2026 | 0 |
| June 2026 | 0 |
| July 2026 | 0 |
| August 2026 | 0 |
| September 2026 | 0 |
| October 2026 (month in progress) | 1 |
Latest Exitium Victims.
Search all 7 →| Victim | Country | Industry | Data claimed | Posted |
|---|---|---|---|---|
| KOIKE Sanso Kogoyo Co. Ltd. koike-japan.com | JPJapan | Manufacturing | 5.8 TB | |
| Gastroenterology & Hepatology of CNY gandhofcny.com | USUnited States | Healthcare | 400 GB | |
| Ming Hwei Energy | TWTaiwan | Energy and Utilities | Not stated | |
| IKRON | USUnited States | Unknown | 278 GB | |
| Marborges Agroindustria | BRBrazil | Agriculture | Not stated | |
| Fannin CAD | USUnited States | Government and Public Sector | 400 GB |
How They Operate.
Exitium's threat actor profile lists 1 malware and tools, with its targets and related actors.
TTPs, CVEs and malware →Who Exitium Targets.
Sectors
History.
Busiest month on record: 5 confirmed victims
First seen in Brandefense data
First confirmed victim listed on its leak site
Most recent leak-site post
Get Real-Time Alerts, IOC Feeds And Takedowns.
The Brandefense platform watches every leak site for your company, vendors and executives, and acts on what it finds.