Sourced from leak-site trackers — reflects the group's claim of a victim, not a confirmed breach.
Stormous is a ransomware and extortion group with hacktivist framing, a member of the 'Five Families' collective, that ran joint ransomware-as-a-service operations with GhostSec and has repeatedly claimed victims across the Middle East.
Stormous appeared around 2021-2022, presenting a pro-Russia, hacktivist-flavored brand while conducting financially motivated extortion. It is a member of the self-styled 'Five Families' collective (alongside GhostSec, ThreatSec, SiegedSec and Blackforums). In February 2024 Stormous and GhostSec announced a joint RaaS program, 'STMX_GhostLocker', and in May 2024 GhostSec reportedly handed GhostLocker to Stormous while returning to hacktivism; Stormous continued operating the RaaS into 2025.
Talos and others documented joint GhostSec/Stormous ransomware operations spanning more than 15 countries, including a claimed attack on an Egyptian private healthcare firm using GhostLocker to encrypt EMR systems with claims of over 250,000 patient files.
Stormous has claimed victims across Egypt, Saudi Arabia, Lebanon, Israel, Qatar, Turkey and the UAE. Given the group's hacktivist framing and history of exaggeration, these leak-site and Telegram claims should be treated as unverified allegations rather than confirmed breaches unless independently corroborated.
Leak-site postings via ransomware.live — claimed by the group, not confirmed breaches. Metadata only. MENA Ransomware Watch →
| Date | Victim | Country | Sector |
|---|---|---|---|
| 2026-06-29 | higuchi-inc.co.jp | JP | Manufacturing |
| 2026-06-28 | HIGUCHI USA, INC | US | Manufacturing |
| 2026-06-28 | eogb.co.uk | GB | Energy & Utilities |
| 2026-06-28 | eshacloudqa.com | US | Technology |
| 2026-06-28 | monoprix.tn | Tunisia | Retail & E-Commerce |
| 2026-06-28 | Official Statement: Protecting palatineschool.org Infrastructure | — | Education |
| 2026-06-24 | maglificioliliana.com | — | — |
| 2026-06-24 | lorenzoni-store.com | IT | Retail & E-Commerce |
| 2026-06-24 | montechiaro-store.com | IT | Retail & E-Commerce |
| 2026-06-24 | impulso-store.com | MX | Retail & E-Commerce |
| 2026-06-20 | jaggroup.com UPDATE-FULL DATA DUMP | — | — |
| 2026-06-12 | mlit.com.my | MY | Government & Defense |