Search Ransomware Intelligence
Jump to a group, country, industry or search victims.
Active · #193 by victimsRansomware group
Helix
As of Oct 19, 2026, Helix has listed 15 confirmed victims on its leak site since Aug 7, 2026, 0.0% of all victims tracked by Brandefense. Its most targeted country is United States (86.7% of its victims) and its most targeted sector is Construction.
Also known asUNC7761
Is My Company Listed?Follow HelixRequest IOC Feed
Follow and IOC feeds are part of the Brandefense platform.
- Confirmed Victims
- 15
- Rank By Victims
- #193
- Last Leak-Site Post
- Oct 19, 2026
- Top Country
- United States
- Top Sector
- Construction
Victims Posted Per Month.
8
0
7
| Month | Confirmed victims |
|---|---|
| August 2026 | 8 |
| September 2026 | 0 |
| October 2026 (month in progress) | 7 |
8
0
7
| Month | Confirmed victims |
|---|---|
| August 2026 | 8 |
| September 2026 | 0 |
| October 2026 (month in progress) | 7 |
8
0
7
| Month | Confirmed victims |
|---|---|
| August 2026 | 8 |
| September 2026 | 0 |
| October 2026 (month in progress) | 7 |
Latest Helix Victims.
Search all 15 →| Victim | Country | Industry | Data claimed | Posted |
|---|---|---|---|---|
| American Campus americancampus.com | USUnited States | Construction | Not stated | |
| Southwire southwire.com | USUnited States | Technology | Not stated | |
| Quikrete quikrete.com | USUnited States | Retail | Not stated | |
| Personify Health personifyhealth.com | USUnited States | Hospitality and Tourism | Not stated | |
| Bay Alarm bayalarm.com | USUnited States | Technology | Not stated | |
| Smith Douglas Homes smithdouglas.com | USUnited States | Construction | Not stated |
Who Helix Targets.
Sectors
Countries
History.
Busiest month on record: 8 confirmed victims
First confirmed victim listed on its leak site
First seen in Brandefense data
Most recent leak-site post
Get Real-Time Alerts, IOC Feeds And Takedowns.
The Brandefense platform watches every leak site for your company, vendors and executives, and acts on what it finds.