RANSOMWARE VICTIMDUPLICATE CLAIM

Avalon Hills

sinobi📅 January 18, 2026
8
same group

Attack Intelligence

Avalon Hills was compromised in a ransomware attack attributed to sinobi in January 2026. The organization, operating in an undisclosed sector in Unknown, was added to the group's data leak site as part of an extortion campaign.

sinobi operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

The Avalon Hills business staff work behind the scenes to help manage all aspects of the program. They route calls, assist with travel plans for clients and families, track all things financial, keep all of the technical machines purring and whatever else it takes to keep a busy program in business! The financial office and utilization review team partners with families to help them access and maximize their insurance benefits. This requires the dedication of families to expand the financial resources available to them for treatment. We help those struggling with an eating disorder recover through a combination of the best, tried-and-true traditional psychotherapies and applied neuroscience, including the latest discoveries about human brain plasticity. Prior to arriving at Avalon Hills, our 21 year-old daughter struggled with a life-threatening eating disorder for over 4 years.

Additional Details

Other Victims — sinobi (8)

Quick Facts

Attack DateJan 18, 2026
Intel Sourceransomware.live
StatusDUPLICATE CLAIM

Threat Group

sinobi
Motivation: financial
View group profile →

External Links

Data sourced from Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Victim listing does not imply confirmed breach — intelligence based on group claims.