Threat group
Organisations Vortex has claimed on its leak site or that reporting links to it, newest first. A claim stays a claim until the organisation or a regulator says otherwise, and 1 organisation has so far.
Organisations linked, last 12 months
Updated 13 Nov 2026, 11:01 UTC, 33 of 36 sources answering. History from 13 Nov 2025.
Where a group operates from is rarely sourced, so the map never draws a line from one.
Leak-site claims tracked by RansomLook (ransomlook.io), CC BY 4.0, enriched by Black Shard. Data security breach notices from the California Department of Justice.
Spotted an error? Report a correction. Is your organisation listed? Send us a statement.
Black Shard's team can check your exposure, take a fix off your plate or step in on a live incident.