RANSOMWARE VICTIMMANUFACTURING
KOLORKIM KIMYA
doommageddon📍 TR (TR)📅 July 3, 2026
7
same group
Attack Intelligence
KOLORKIM KIMYA was compromised in a ransomware attack attributed to doommageddon in July 2026. The organization, operating in the Manufacturing sector in TR, was added to the group's data leak site as part of an extortion campaign.
doommageddon operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.
LEAKED | 1GB | 1 files
Additional Details
Other Victims — doommageddon (7)
iw steelTEC Makine San. ve Tic. A.Ş.
TR · Manufacturing
Jul 2026
Reni Farmácias Associadas
BR · Healthcare
Jul 2026
Hospital Di Camp
Healthcare
Jul 2026
Innovano
IN · Technology
Jul 2026
Mercedes-Benz Turk
TR · Manufacturing
Jul 2026
Solventa & Riskmetrica | Calificadora de Riesgos
PY · Financial Services
Jul 2026
Francisco Imóveis
BR · Consumer Services
Jul 2026
Quick Facts
CountryTR (TR)
SectorManufacturing
Attack DateJul 3, 2026
Intel Sourceransomlook
Threat Group
External Links
Data sourced from Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Victim listing does not imply confirmed breach — intelligence based on group claims.