GreenValley International
Attack Intelligence
GreenValley International was compromised in a ransomware attack attributed to sinobi in January 2026. The organization, operating in an undisclosed sector in Canada, was added to the group's data leak site as part of an extortion campaign.
sinobi operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.
GreenValley International Inc (GVI), based in Berkeley, California, is a leading innovator in 3D mapping technologies, offering a diverse range of aerial, terrestrial, and mobile LiDAR survey and mapping hardware systems along with advanced software solutions. Their product lineup includes various laser scanning platforms and the LiDAR360 data processing platform, catering to industries such as forestry, power line inspection, mining, and utilities. GVI specializes in LiDAR and image fusion technology, focusing on achieving precise digital representations of three-dimensional spaces. Committed to innovation, GVI continues to expand its technological capabilities in the LiDAR sector.