Threat Group Profile
blackout
● Active — last 30 days
Victim claims
3
First seen
Jul 2026
Last activity
19 Jul 2026
Tracked since
—
Group overview
Blackout is a ransomware group that first appeared in early 2024, initially claiming attacks against healthcare entities in Canada, France, and Germany before expanding to telecommunications, mining, and manufacturing sectors, operating a double-extortion model with a data leak site.
Preferred targets
Technology · 2
Most targeted countries
JP · 1
US · 1
GB · 1
