Threat Group Profile
exitium
Dormant / historical
Victim claims
1
First seen
Apr 2026
Last activity
14 Apr 2026
Tracked since
Mar 2026
Group overview
Exitium is a data extortion group first observed in early 2026, operating a Tor-based double extortion site and targeting victims via bulk data exfiltration followed by public naming-and-shaming, with known victims including a Brazilian agro-industrial firm and a US county appraisal district.
Preferred targets
Healthcare · 1
Most targeted countries
US · 1
