RANSOMWARE VICTIMMANUFACTURINGDUPLICATE CLAIM

Don-Nan

payload📍 United States (US)📅 March 28, 2026
8
same group

Attack Intelligence

Don-Nan was compromised in a ransomware attack attributed to payload in March 2026. The organization, operating in the Manufacturing sector in United States, was added to the group's data leak site as part of an extortion campaign.

payload operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

Q2 Artificial Lift Services specializes in the sales, service, engineering, and manufacturing of down hole rod pumps, positioning itself as a leader in artificial lift technology. The company operates from a state-of-the-art 118,000 sq. ft. facility and boasts over 40 service and repair locations across Canada and the USA. Q2 offers a comprehensive range of products, including API pumps, specialty tubing, and production tools, combined with supportive engineering and technical services. Their commitment to quality and innovation enables them to provide tailored solutions that maximize productivity for their clients in the oilfield sector.

Additional Details

data_size
80 GB

Other Victims — payload (8)

Quick Facts

CountryUnited States (US)
SectorManufacturing
Attack DateMar 28, 2026
Intel Sourceransomlook
StatusDUPLICATE CLAIM

Threat Group

payload
Motivation: financial
View group profile →

External Links

Data sourced from Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Victim listing does not imply confirmed breach — intelligence based on group claims.