Sourced from leak-site trackers — reflects the group's claim of a victim, not a confirmed breach.
Trigona was a ransomware operation active from late 2022 until October 2023, when the pro-Ukraine Ukrainian Cyber Alliance breached its infrastructure via a Confluence exploit and wiped its servers; the group has remained dormant/defunct since.
Trigona emerged in late 2022 as a double-extortion ransomware operation, encrypting victims and threatening to publish stolen data via a Tor leak site. Researchers documented reasonably capable tooling and some reporting associated its activity with prior CryLock ransomware and access-broker ecosystems.
In October 2023 the Ukrainian Cyber Alliance (UCA), a pro-Ukraine hacktivist group, announced it had compromised Trigona's environment by exploiting CVE-2023-22515 in Atlassian Confluence Data Center and Server. On 17 October 2023 the UCA reported exfiltrating data and then wiping Trigona's infrastructure, including its administrative panel, blog, internal and developer servers, and cryptocurrency wallets.
Trigona has remained dormant with no credible resurgence since the 2023 takedown and is generally assessed defunct as of 2025, though its codebase influenced later families (see BlackNevas, a Trigona-family variant). Its MENA-relevant claim includes Oman. Any pre-takedown victim listings are extortion claims and should be treated as unverified unless confirmed by a reputable source.
Leak-site postings via ransomware.live — claimed by the group, not confirmed breaches. Metadata only. MENA Ransomware Watch →
| Date | Victim | Country | Sector |
|---|---|---|---|
| 2024-03-30 | Claro | MX | Professional Services |
| 2024-03-20 | South Star Electronics | CN | Technology |
| 2024-03-16 | Indoarsip | ID | Professional Services |
| 2024-03-16 | Bwizer | PT | Healthcare |
| 2024-03-16 | Topa Partners | NZ | Professional Services |
| 2024-02-28 | Dinamic Oil | IT | Manufacturing |
| 2024-02-28 | Hotel Avenida, Hostal Espoz y Mina, Hostal Arriazu, Pension Alemana | ES | Hospitality |
| 2024-02-21 | ATMCo | US | Technology |
| 2024-01-30 | FALCO Electronics | MX | Technology |
| 2024-01-30 | CMG Drainage Engineering | US | Professional Services |
| 2024-01-30 | Daher Contracting | US | Professional Services |
| 2024-01-29 | Genesis Motors | AU | Manufacturing |