Sanrio Hong Kong Co., Ltd

Sanrio Hong Kong Co., Ltd was compromised in a ransomware attack attributed to Orova in August 2026. The organization, operating in the Retail & E-Commerce sector in HK, was added to the group's data leak site as part of an extortion campaign.

Orova operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

Sanrio is the global lifestyle brand best known for Hello Kitty who was created in 1974, and home to many other beloved character brands such as My Melody, Kuromi, Little Twin Stars, Cinnamoroll, Pompompurin, gudetama, Aggretsuko, Chococat, Bad Badtz-Maru and Kerokerokeroppi.