everest
Known ransomware group ACTIVE Currently active
Everest is a Russian-speaking extortion group active since 2020 that combines ransomware with initial-access brokering, sometimes selling network access rather than deploying encryptors. It has targeted government, healthcare, and industrial victims.
22
Total Claims
10
Critical
—
Records Claimed
11
Industries Hit
Active span: Apr 13, 2026 – Oct 22, 2026 · 22 organizations targeted
Currently active
Actor Threat Profile
Activity Timeline
Peak: May 2026 (10)Apr 2026
LessMore
Oct 2026Share this profile
Top Targeted Industries
Healthcare 5
Financial Services 4
Business Services 4
Transportation 2
Professional Services 1
Education 1
Tradecraft & Infrastructure
0
Documented tools
5 / 17
MITRE tactics / techniques
8
Known leak sites
Targeted Organizations
PWCBrenner Base TunnelFlydubaiMorula IVFETSL&P AestheticsAdvanced Psychiatry AssociatesSidra Kuwait HospitalVVO FinanceRehab Clinics Group LtdStudio Marchi - Studio Professionale AssociatoFiservTSYSEpiq GlobalSymcorSuper AICitizens BankComplete Aircraft GroupNutrabioTokopartsUmiles GroupK Subsea Group
Claims by everest
Low
Ransomware Claim: PWC
PWC
everest
Ransomware Professional Services
Oct 23, 2026 Low
Ransomware Claim: Brenner Base Tunnel
Brenner Base Tunnel
everest
Ransomware Transportation
Oct 17, 2026 Low
Ransomware Claim: Flydubai
Flydubai
everest
Ransomware Transportation
Oct 7, 2026 Critical
Ransomware Claim: Morula IVF
Morula IVF
everest
Ransomware Healthcare
Sep 27, 2026 Low
Ransomware Claim: ETS
ETS
everest
Ransomware Education
Sep 27, 2026 Critical
Ransomware Claim: L&P Aesthetics
L&P Aesthetics
everest
Ransomware Healthcare
Jun 2, 2026 Critical
Ransomware Claim: Advanced Psychiatry Associates
Advanced Psychiatry Associates
everest
Ransomware Healthcare
May 29, 2026 Critical
Ransomware Claim: Sidra Kuwait Hospital
Sidra Kuwait Hospital
everest
Ransomware Healthcare
May 29, 2026 Critical
Ransomware Claim: VVO Finance
VVO Finance
everest
Ransomware Financial Services
May 29, 2026 Critical
Ransomware Claim: Rehab Clinics Group Ltd
Rehab Clinics Group Ltd
everest
Ransomware Healthcare
May 8, 2026 High
Ransomware Claim: Studio Marchi - Studio Professionale Associato
Studio Marchi - Studio Professionale Associato
everest
Ransomware Business Services
May 5, 2026 Critical
Ransomware Claim: Fiserv
Fiserv
everest
Ransomware Financial Services
May 3, 2026 Critical
Ransomware Claim: TSYS
TSYS
everest
Ransomware Financial Services
May 2, 2026 High
Ransomware Claim: Epiq Global
Epiq Global
everest
Ransomware Business Services
May 2, 2026 High
Ransomware Claim: Symcor
Symcor
everest
Ransomware Business Services
May 2, 2026 High
Ransomware Claim: Super AI
Super AI
everest
Ransomware Technology
Apr 28, 2026 Critical
Ransomware Claim: Citizens Bank
Citizens Bank
everest
Ransomware Financial Services
Apr 20, 2026 High
Ransomware Claim: Complete Aircraft Group
Complete Aircraft Group
everest
Ransomware Manufacturing
Apr 20, 2026 High
Ransomware Claim: Nutrabio
Nutrabio
everest
Ransomware Agriculture and Food Production
Apr 20, 2026 High
Ransomware Claim: Tokoparts
Tokoparts
everest
Ransomware Consumer Services
Apr 20, 2026 High
Ransomware Claim: Umiles Group
Umiles Group
everest
Ransomware Business Services
Apr 20, 2026 Critical
Ransomware Claim: K Subsea Group
K Subsea Group
everest
Ransomware Energy
Apr 13, 2026