Search Ransomware Intelligence
Jump to a group, country, industry or search victims.
LV
As of Oct 19, 2026, LV has listed 76 confirmed victims on its leak site since Jul 11, 2025, 0.2% of all victims tracked by Brandefense. Its most targeted country is United States (3.9% of its victims) and its most targeted sector is Technology.
LV ransomware group main message: "Here are companies which didn't meet consumer data protection obligations. They rejected to fix their mistakes, they rejected to protect this data in the case when they could and had to ptotect it. These companies prefered to sell their private information, their employees' and customers' personal data". Security researchers claim that the LV group is utilizing the REvil ransomware group malware. The LV group claim to have compromised the corporate network of Groupe Reorev.
Follow and IOC feeds are part of the Brandefense platform.
- Confirmed Victims
- 76
- Rank By Victims
- #86
- Last Leak-Site Post
- Jul 11, 2025
- Top Country
- United States
- Top Sector
- Technology
Victims Posted Per Month.
| Month | Confirmed victims |
|---|---|
| May 2026 | 0 |
| June 2026 | 0 |
| July 2026 | 0 |
| August 2026 | 0 |
| September 2026 | 0 |
| October 2026 (month in progress) | 0 |
| Month | Confirmed victims |
|---|---|
| November 2025 | 0 |
| December 2025 | 0 |
| January 2026 | 0 |
| February 2026 | 0 |
| March 2026 | 0 |
| April 2026 | 0 |
| May 2026 | 0 |
| June 2026 | 0 |
| July 2026 | 0 |
| August 2026 | 0 |
| September 2026 | 0 |
| October 2026 (month in progress) | 0 |
| Month | Confirmed victims |
|---|---|
| July 2025 | 76 |
| August 2025 | 0 |
| September 2025 | 0 |
| October 2025 | 0 |
| November 2025 | 0 |
| December 2025 | 0 |
| January 2026 | 0 |
| February 2026 | 0 |
| March 2026 | 0 |
| April 2026 | 0 |
| May 2026 | 0 |
| June 2026 | 0 |
| July 2026 | 0 |
| August 2026 | 0 |
| September 2026 | 0 |
| October 2026 (month in progress) | 0 |
Latest LV Victims.
Search all 76 →| Victim | Country | Industry | Data claimed | Posted |
|---|---|---|---|---|
| Oklahoma Ordnance Works Authority maip.com | USUnited States | Unknown | Not stated | |
| SCHIFFMANS schiffmans.com | USUnited States | Retail | Not stated | |
| Capecodrta capecodrta.org | USUnited States | Hospitality and Tourism | Not stated | |
| STUDIO TERUZZI studioteruzzi.com | ITItaly | Unknown | 80 GB | |
| kinetic kinetic.ph | PHPhilippines | Unknown | 200 GB | |
| subcarnechevarria subcarnechevarria.com | ESSpain | Unknown | 200 GB |
How They Operate.
LV's threat actor profile lists 5 ATT&CK techniques, 1 malware and tools, with its targets and related actors.
TTPs, CVEs and malware →Who LV Targets.
Sectors
History.
First seen in Brandefense data
Busiest month on record: 76 confirmed victims
First confirmed victim listed on its leak site
Most recent leak-site post
Get Real-Time Alerts, IOC Feeds And Takedowns.
The Brandefense platform watches every leak site for your company, vendors and executives, and acts on what it finds.