Threat Group Profile
insomnia
● Active — last 30 days
Victim claims
5
First seen
Apr 2026
Last activity
19 Aug 2026
Tracked since
Feb 2026
Group overview
Insomnia is a data-theft and extortion group that emerged in October 2025, targeting primarily US-based healthcare organizations — stealing patient files and threatening public exposure rather than encrypting files — and avoiding former Soviet states, consistent with Russian-speaking cybercrime norms.
Preferred targets
Business Services · 2
Healthcare · 1
Most targeted countries
US · 5