lapsus$
Known ransomware group Dormant / low-volume
Lapsus$ is an internationally composed data extortion group most active from mid-2021 through 2022, executing high-profile breaches against Microsoft, Nvidia, Samsung, Okta, and Uber by stealing source code and threatening leaks rather than encrypting files; several members — predominantly teenagers — were arrested in the UK.
1
Total Claims
0
Critical
—
Records Claimed
1
Industries Hit
Active span: May 28, 2026 – May 28, 2026 · 1 organizations targeted
Dormant / low-volume
Actor Threat Profile
Activity Timeline
Peak: May 2026 (1)May 2026
LessMore
May 2026Share this profile
Top Targeted Industries
Telecommunication 1
Tradecraft & Infrastructure
4
Documented tools
0 / 0
MITRE tactics / techniques
3
Known leak sites
CredentialTheftDiscoveryEnumLOLBASRMM-Tools
Full intelligence profile on ransomware.live →