Skip to content

Search Ransomware Intelligence

Jump to a group, country, industry or search victims.

Inactive · #272 by victimsRansomware group

Minteye

As of Oct 19, 2026, Minteye has listed 5 confirmed victims on its leak site since Dec 7, 2025, 0.0% of all victims tracked by Brandefense. Its most targeted country is United States (80.0% of its victims).

MintEye is a ransomware group with concentrated activity in North America, targeting professional services, construction, engineering, architecture, and logistics sectors, with victims documented in the US and Chile; limited public technical analysis is available.

Is My Company Listed?Follow MinteyeRequest IOC FeedTTPs, CVEs and malware →

Follow and IOC feeds are part of the Brandefense platform.

Confirmed Victims
5
Rank By Victims
#272
Last Leak-Site Post
Dec 12, 2025
Top Country
United States
Top Sector
Unknown

Victims Posted Per Month.

Minteye confirmed victims per month
MonthConfirmed victims
December 20255
January 20260
February 20260
March 20260
April 20260
May 20260
June 20260
July 20260
August 20260
September 20260
October 2026 (month in progress)0
Updated continuously · figures as of Oct 19, 2026

Latest Minteye Victims.

Search all 5 →
Latest confirmed leak-site victims claimed by Minteye
VictimCountryIndustryData claimedPosted
Keylogistics Chile SA
keylogistics.cl
CLChileUnknownNot stated
Inter-American Tropical Tuna Commission (IATTC)
iattc.org
USUnited StatesUnknownNot stated
Sponseller Group, Inc.
sponsellergroup.com
USUnited StatesUnknownNot stated
Cranford, Buckley, Schultze, Tomchin, Allen & Buie, P.A.
southcharlottelawfirm.com
USUnited StatesUnknownNot stated
David M. Schwarz Architects
dmsas.com
USUnited StatesUnknownNot stated

How They Operate.

Minteye's threat actor profile lists 1 malware and tools, with its targets and related actors.

TTPs, CVEs and malware →

Who Minteye Targets.

Sectors

No data for this window right now.

Shares are of this group's confirmed victims.

History.


  1. Busiest month on record: 5 confirmed victims

  2. First confirmed victim listed on its leak site

  3. First seen in Brandefense data

  4. Most recent leak-site post

Get Real-Time Alerts, IOC Feeds And Takedowns.

The Brandefense platform watches every leak site for your company, vendors and executives, and acts on what it finds.

Figures as of Oct 19, 2026. Confirmed leak-site claims collected by Brandefense technologies and validated by Brandefense analysts.

Listed on a leak site means a ransomware group has claimed the company; it is not a confirmed breach. To request a correction or removal, contact Brandefense.