Search Ransomware Intelligence
Jump to a group, country, industry or search victims.
Quantum
As of Oct 19, 2026, Quantum has listed 79 confirmed victims on its leak site since Feb 14, 2024, 0.2% of all victims tracked by Brandefense. Its most targeted country is United States (35.4% of its victims) and its most targeted sector is Consulting.
Quantum ransomware, active from mid-2021 through 2022, was a rebrand of the MountLocker/AstroLocker/XingLocker lineage that operated as RaaS, known for extremely fast attack timelines (under four hours from initial access to encryption) and ransom demands ranging from $150,000 to multi-million dollars.
Follow and IOC feeds are part of the Brandefense platform.
- Confirmed Victims
- 79
- Rank By Victims
- #83
- Last Leak-Site Post
- Jul 12, 2025
- Top Country
- United States
- Top Sector
- Consulting
Victims Posted Per Month.
| Month | Confirmed victims |
|---|---|
| May 2026 | 0 |
| June 2026 | 0 |
| July 2026 | 0 |
| August 2026 | 0 |
| September 2026 | 0 |
| October 2026 (month in progress) | 0 |
| Month | Confirmed victims |
|---|---|
| November 2025 | 0 |
| December 2025 | 0 |
| January 2026 | 0 |
| February 2026 | 0 |
| March 2026 | 0 |
| April 2026 | 0 |
| May 2026 | 0 |
| June 2026 | 0 |
| July 2026 | 0 |
| August 2026 | 0 |
| September 2026 | 0 |
| October 2026 (month in progress) | 0 |
| Month | Confirmed victims |
|---|---|
| February 2024 | 2 |
| March 2024 | 6 |
| April 2024 | 1 |
| May 2024 | 5 |
| June 2024 | 0 |
| July 2024 | 0 |
| August 2024 | 0 |
| September 2024 | 0 |
| October 2024 | 0 |
| November 2024 | 0 |
| December 2024 | 0 |
| January 2025 | 0 |
| February 2025 | 0 |
| March 2025 | 0 |
| April 2025 | 0 |
| May 2025 | 0 |
| June 2025 | 0 |
| July 2025 | 65 |
| August 2025 | 0 |
| September 2025 | 0 |
| October 2025 | 0 |
| November 2025 | 0 |
| December 2025 | 0 |
| January 2026 | 0 |
| February 2026 | 0 |
| March 2026 | 0 |
| April 2026 | 0 |
| May 2026 | 0 |
| June 2026 | 0 |
| July 2026 | 0 |
| August 2026 | 0 |
| September 2026 | 0 |
| October 2026 (month in progress) | 0 |
Latest Quantum Victims.
Search all 79 →| Victim | Country | Industry | Data claimed | Posted |
|---|---|---|---|---|
| Lewis & Clark College lclark.edu | USUnited States | Education and Research | Not stated | |
| Midland Cogeneration Venture midcodegen.com | USUnited States | Unknown | 150 GB | |
| Rosenblatt Securities rblt.com | USUnited States | Financial Services | 20 GB | |
| Shaw & Slavsky shawandslavsky.com | USUnited States | Unknown | 6 GB | |
| Freyr Solutions freyrsolutions.com | USUnited States | Healthcare | Not stated | |
| Delon Hampton & Associates delonhampton.com | USUnited States | Unknown | Not stated |
How They Operate.
Quantum's threat actor profile lists 1 ATT&CK techniques, 1 malware and tools, with its targets and related actors.
TTPs, CVEs and malware →Who Quantum Targets.
Sectors
History.
First seen in Brandefense data
First confirmed victim listed on its leak site
Busiest month on record: 65 confirmed victims
Most recent leak-site post
Get Real-Time Alerts, IOC Feeds And Takedowns.
The Brandefense platform watches every leak site for your company, vendors and executives, and acts on what it finds.