Search Ransomware Intelligence
Jump to a group, country, industry or search victims.
M3rx
As of Oct 19, 2026, M3rx has listed 45 confirmed victims on its leak site since Apr 29, 2026, 0.1% of all victims tracked by Brandefense. Its most targeted country is United States (28.9% of its victims) and its most targeted sector is Consulting.
M3rx is a small ransomware group first observed in 2025, using AES-CTR/AES-GCM encryption and targeting organizations in England, the US, Australia, Germany, Italy, and Switzerland, with around eight claimed victims including a Sydney-based property firm.
Follow and IOC feeds are part of the Brandefense platform.
- Confirmed Victims
- 45
- Rank By Victims
- #110
- Last Leak-Site Post
- Sep 29, 2026
- Top Country
- United States
- Top Sector
- Consulting
Victims Posted Per Month.
| Month | Confirmed victims |
|---|---|
| May 2026 | 12 |
| June 2026 | 6 |
| July 2026 | 10 |
| August 2026 | 2 |
| September 2026 | 7 |
| October 2026 (month in progress) | 0 |
| Month | Confirmed victims |
|---|---|
| April 2026 | 8 |
| May 2026 | 12 |
| June 2026 | 6 |
| July 2026 | 10 |
| August 2026 | 2 |
| September 2026 | 7 |
| October 2026 (month in progress) | 0 |
| Month | Confirmed victims |
|---|---|
| April 2026 | 8 |
| May 2026 | 12 |
| June 2026 | 6 |
| July 2026 | 10 |
| August 2026 | 2 |
| September 2026 | 7 |
| October 2026 (month in progress) | 0 |
Latest M3rx Victims.
Search all 45 →| Victim | Country | Industry | Data claimed | Posted |
|---|---|---|---|---|
| intense.pl intense.pl | PLPoland | Technology | Not stated | |
| oterolaw.com oterolaw.com | USUnited States | Consulting | 82.5 GB | |
| somasolucoes.com somasolucoes.com | BRBrazil | Consulting | Not stated | |
| noonsugar.com noonsugar.com | AEUnited Arab Emirates | Retail | Not stated | |
| iccsi.com iccsi.com | CNChina | Unknown | 434 GB | |
| cpacb.com cpacb.com | USUnited States | Consulting | 446 GB |
How They Operate.
M3rx's threat actor profile lists 1 malware and tools, with its targets and related actors.
TTPs, CVEs and malware →Who M3rx Targets.
Sectors
History.
First confirmed victim listed on its leak site
First seen in Brandefense data
Busiest month on record: 12 confirmed victims
Most recent leak-site post
Get Real-Time Alerts, IOC Feeds And Takedowns.
The Brandefense platform watches every leak site for your company, vendors and executives, and acts on what it finds.