Search Ransomware Intelligence
Jump to a group, country, industry or search victims.
Payoutsking
As of Oct 19, 2026, Payoutsking has listed 79 confirmed victims on its leak site since Jun 27, 2025, 0.2% of all victims tracked by Brandefense. Its most targeted country is United States (58.2% of its victims) and its most targeted sector is Manufacturing.
PayoutsKing is an active ransomware group observed through at least 2026 that has claimed attacks against a wide range of industries internationally, including Del Monte Foods and V. FRAAS, across the US, UK, Germany, and Ireland using standard double-extortion tactics.
Follow and IOC feeds are part of the Brandefense platform.
- Confirmed Victims
- 79
- Rank By Victims
- #84
- Last Leak-Site Post
- Oct 13, 2026
- Top Country
- United States
- Top Sector
- Manufacturing
Victims Posted Per Month.
| Month | Confirmed victims |
|---|---|
| May 2026 | 0 |
| June 2026 | 2 |
| July 2026 | 1 |
| August 2026 | 5 |
| September 2026 | 0 |
| October 2026 (month in progress) | 2 |
| Month | Confirmed victims |
|---|---|
| November 2025 | 12 |
| December 2025 | 0 |
| January 2026 | 8 |
| February 2026 | 11 |
| March 2026 | 8 |
| April 2026 | 7 |
| May 2026 | 0 |
| June 2026 | 2 |
| July 2026 | 1 |
| August 2026 | 5 |
| September 2026 | 0 |
| October 2026 (month in progress) | 2 |
| Month | Confirmed victims |
|---|---|
| June 2025 | 9 |
| July 2025 | 9 |
| August 2025 | 2 |
| September 2025 | 1 |
| October 2025 | 2 |
| November 2025 | 12 |
| December 2025 | 0 |
| January 2026 | 8 |
| February 2026 | 11 |
| March 2026 | 8 |
| April 2026 | 7 |
| May 2026 | 0 |
| June 2026 | 2 |
| July 2026 | 1 |
| August 2026 | 5 |
| September 2026 | 0 |
| October 2026 (month in progress) | 2 |
Latest Payoutsking Victims.
Search all 79 →| Victim | Country | Industry | Data claimed | Posted |
|---|---|---|---|---|
| Morrow Meadows Corporation morrow-meadows.com | USUnited States | Construction | Not stated | |
| Merrill Iron & Steel merrillfabe.com | Unknown | Unknown | Not stated | |
| H.W. Lochner egis-usa.com | USUnited States | Consulting | Not stated | |
| Watermark Retirement Communities watermarkcommunities.com | USUnited States | Healthcare | Not stated | |
| Proliance Surgeons proliancesurgeons.com | USUnited States | Healthcare | Not stated | |
| Merrill Iron & Steel merrillsteel.com | USUnited States | Manufacturing | Not stated |
How They Operate.
Payoutsking's threat actor profile lists 7 ATT&CK techniques, 3 malware and tools, with its targets and related actors.
TTPs, CVEs and malware →Who Payoutsking Targets.
History.
First seen in Brandefense data
First confirmed victim listed on its leak site
Busiest month on record: 12 confirmed victims
Most recent leak-site post
Get Real-Time Alerts, IOC Feeds And Takedowns.
The Brandefense platform watches every leak site for your company, vendors and executives, and acts on what it finds.