everest
Known ransomware group ACTIVE Currently active
Everest is a Russian-speaking extortion group active since 2020 that combines ransomware with initial-access brokering, sometimes selling network access rather than deploying encryptors. It has targeted government, healthcare, and industrial victims.
19
Total Claims
10
Critical
—
Records Claimed
9
Industries Hit
Active span: Apr 13, 2026 – Sep 25, 2026 · 19 organizations targeted
Currently active
Actor Threat Profile
Activity Timeline
Peak: May 2026 (10)Apr 2026
LessMore
Sep 2026Share this profile
Top Targeted Industries
Healthcare 5
Financial Services 4
Business Services 4
Education 1
Technology 1
Manufacturing 1
Tradecraft & Infrastructure
0
Documented tools
5 / 17
MITRE tactics / techniques
8
Known leak sites
Targeted Organizations
Claims by everest
Critical
Ransomware Claim: Morula IVF
Morula IVF
everest
Ransomware Healthcare
Sep 27, 2026 Low
Ransomware Claim: ETS
ETS
everest
Ransomware Education
Sep 27, 2026 Critical
Ransomware Claim: L&P Aesthetics
L&P Aesthetics
everest
Ransomware Healthcare
Jun 2, 2026 Critical
Ransomware Claim: Advanced Psychiatry Associates
Advanced Psychiatry Associates
everest
Ransomware Healthcare
May 29, 2026 Critical
Ransomware Claim: Sidra Kuwait Hospital
Sidra Kuwait Hospital
everest
Ransomware Healthcare
May 29, 2026 Critical
Ransomware Claim: VVO Finance
VVO Finance
everest
Ransomware Financial Services
May 29, 2026 Critical
Ransomware Claim: Rehab Clinics Group Ltd
Rehab Clinics Group Ltd
everest
Ransomware Healthcare
May 8, 2026 High
Ransomware Claim: Studio Marchi - Studio Professionale Associato
Studio Marchi - Studio Professionale Associato
everest
Ransomware Business Services
May 5, 2026 Critical
Ransomware Claim: Fiserv
Fiserv
everest
Ransomware Financial Services
May 3, 2026 Critical
Ransomware Claim: TSYS
TSYS
everest
Ransomware Financial Services
May 2, 2026 High
Ransomware Claim: Epiq Global
Epiq Global
everest
Ransomware Business Services
May 2, 2026 High
Ransomware Claim: Symcor
Symcor
everest
Ransomware Business Services
May 2, 2026 High
Ransomware Claim: Super AI
Super AI
everest
Ransomware Technology
Apr 28, 2026 Critical
Ransomware Claim: Citizens Bank
Citizens Bank
everest
Ransomware Financial Services
Apr 20, 2026 High
Ransomware Claim: Complete Aircraft Group
Complete Aircraft Group
everest
Ransomware Manufacturing
Apr 20, 2026 High
Ransomware Claim: Nutrabio
Nutrabio
everest
Ransomware Agriculture and Food Production
Apr 20, 2026 High
Ransomware Claim: Tokoparts
Tokoparts
everest
Ransomware Consumer Services
Apr 20, 2026 High
Ransomware Claim: Umiles Group
Umiles Group
everest
Ransomware Business Services
Apr 20, 2026 Critical
Ransomware Claim: K Subsea Group
K Subsea Group
everest
Ransomware Energy
Apr 13, 2026