RANSOMWARE VICTIMOTHER
The Mountain
NIGHTSPIRE📍 United Kingdom (GB)📅 July 27, 2026
8
same group
Attack Intelligence
The Mountain was compromised in a ransomware attack attributed to NIGHTSPIRE in July 2026. The organization, operating in the Other sector in United Kingdom, was added to the group's data leak site as part of an extortion campaign.
NIGHTSPIRE operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.
- HR & Payroll Data- Financial & Accounting Records- Payment & Credit Card Data- Customer & CRM Data- Orders & Supply Chain Data- SharePoint & Business Application Data
Additional Details
Other Victims — NIGHTSPIRE (8)
K. Venkatesh, Co
IN · Not Found
Jul 2026
KSL Dirtworks LLC
US · Manufacturing
Jul 2026
MKS Transformator
TR · Manufacturing
Jul 2026
Akribis Systems Pte Ltd
SG · Technology
Jul 2026
Wings Argo Private Limited
IN · Other
Jul 2026
Diffusion de Produits Inoxydables
FR · Manufacturing
Jul 2026
Thai Seng International Co. Ltd
TH · Manufacturing
Jul 2026
TFG Benefits, Inc.
US · Financial Services
Jul 2026
Quick Facts
CountryUnited Kingdom (GB)
SectorOther
Attack DateJul 27, 2026
Intel Sourceransomware.live
Threat Group
External Links
Data sourced from Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Victim listing does not imply confirmed breach — intelligence based on group claims.