RANSOMWARE VICTIMEDUCATION⚠ DUPLICATE CLAIM
primaria ungheni
primaria-ungheni.ro
killsec📍 RO (RO)📅 February 25, 2026
8
same group
Attack Intelligence
primaria ungheni was compromised in a ransomware attack attributed to killsec in February 2026. The organization, operating in the Education sector in RO, was added to the group's data leak site as part of an extortion campaign.
killsec operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.
Price ??? Disclosures 0/1
Additional Details
Other Victims — killsec (8)
cashcowboy
US · Financial Services
Jul 2026
Bulwark Exterminating
US · Other
Jul 2026
origins ivf
IN · Healthcare
Jul 2026
acehospital.in
IN · Healthcare
Jun 2026
csinsurance.mx
MX · Financial Services
Jun 2026
NextCapitalTrust
CA · Financial Services
Mar 2026
meena health
CA · Healthcare
Mar 2026
yurdriversnetwork
US · —
Mar 2026
Quick Facts
CountryRO (RO)
SectorEducation
Attack DateFeb 25, 2026
Domainprimaria-ungheni.ro
Intel Sourceransomware.live
StatusDUPLICATE CLAIM
Threat Group
External Links
Data sourced from Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Victim listing does not imply confirmed breach — intelligence based on group claims.