Skip to content

Search Ransomware Intelligence

Jump to a group, country, industry or search victims.

Active · #79 by victimsRansomware group

Storm

As of Oct 19, 2026, Storm has listed 88 confirmed victims on its leak site since Aug 3, 2026, 0.3% of all victims tracked by Brandefense. Its most targeted country is United States (70.5% of its victims) and its most targeted sector is Financial Services.

Is My Company Listed?Follow StormRequest IOC Feed

Follow and IOC feeds are part of the Brandefense platform.

Confirmed Victims
88
Rank By Victims
#79
Last Leak-Site Post
Oct 19, 2026
Top Country
United States
Top Sector
Financial Services

Victims Posted Per Month.

Storm confirmed victims per month
MonthConfirmed victims
August 202641
September 202636
October 2026 (month in progress)11
Updated continuously · figures as of Oct 19, 2026

Latest Storm Victims.

Search all 88 →
Latest confirmed leak-site victims claimed by Storm
VictimCountryIndustryData claimedPosted
Baltimore Tank Lines
baltimoretanklines.com
USUnited StatesTransportation and LogisticsNot stated
Merit Financial Group
meritfinancialadvisors.com
USUnited StatesFinancial ServicesNot stated
Patriot Maritime
patriotships.com
USUnited StatesTransportation and LogisticsNot stated
R. A. Wood Associates
rawood.com
USUnited StatesAerospace and DefenseNot stated
Tech Electronics
techelectronics.com
USUnited StatesGovernment and Public SectorNot stated
Cooperative Des Techniciens Ambulanciers De La Monte
cotam.ca
CACanadaEducation and ResearchNot stated

Who Storm Targets.

Shares are of this group's confirmed victims.

History.


  1. Busiest month on record: 41 confirmed victims

  2. First confirmed victim listed on its leak site

  3. First seen in Brandefense data

  4. Most recent leak-site post

Get Real-Time Alerts, IOC Feeds And Takedowns.

The Brandefense platform watches every leak site for your company, vendors and executives, and acts on what it finds.

Figures as of Oct 19, 2026. Confirmed leak-site claims collected by Brandefense technologies and validated by Brandefense analysts.

Listed on a leak site means a ransomware group has claimed the company; it is not a confirmed breach. To request a correction or removal, contact Brandefense.