Threat actors
Per-actor home pages for the threat actors named in our CVE corpus — MITRE-tracked groups plus MISP / LLM-extracted actors with at least one attributed CVE. 501 actors indexed. · 56 campaigns → · Browse by sector → · Browse by victim →
Find actors who…
Catalogue
Active in:
Motivation:
Sponsor:
Victim selection:
Target sector:
Target sector:
| Name | Category | Sponsor | Vendor names | Target sectors | Named victims | CVEs | Techniques | IDF score | Specificity | Last active |
|---|---|---|---|---|---|---|---|---|---|---|
| APT-C-23 (G1028) aka APT-C-23, Mantis, Arid Viper… | state | 🌍 PS | — | National Security | — | 0 | 0 | 0.0 | — | — |
| APT-C-36 (G0099) aka APT-C-36, Blind Eagle, TAG-144… | state | — | — | Finance & InsuranceUtilitiesManufacturingPublic Administration | — | 0 | 54 | 0.0 | — | — |
| APT1 (G0006) aka APT1, Comment Crew, Comment Group… | state | 🇨🇳 CN | CSComment PandaMandAPT1 | Computer & Electronic Product ManufacturingAerospace Product & Parts ManufacturingTelecommunicationsSoftware PublishersNational Security | — | 2 | 36 | 4.4 | — | 2021 |
| APT12 (G0005) aka APT12, IXESHE, DynCalc… | state | 🇨🇳 CN | MSHexagon TyphoonCSNumbered PandaMandAPT12 | Publishing Industries (Including Software)Computer & Electronic Product ManufacturingNational SecurityBroadcasting | — | 1 | 9 | 1.2 | — | 2026 |
| APT16 (G0023) aka APT16, SVCMONDR, G0023… | state | 🇨🇳 CN | MandAPT16 | — | — | 0 | 2 | 0.0 | — | — |
| APT17 (G0025) aka APT17, Deputy Dog, Group 8… | state | 🇨🇳 CN | MSHeart TyphoonCSAURORA PANDACSHidden LynxMandAPT17 | Public AdministrationAerospace Product & Parts ManufacturingProfessional, Scientific & Technical ServicesSoftware PublishersMining (except Oil & Gas)+2 more | — | 0 | 3 | 0.0 | — | — |
| APT18 (G0026) aka APT18, TG-0416, Dynamite Panda… | state | 🇨🇳 CN | MSSatin TyphoonMSSalmon TyphoonCSDynamite PandaCSSAMURAI PANDACSMAVERICK PANDAMandAPT18 | ManufacturingHealth Care & Social AssistancePublic AdministrationInformation | — | 0 | 18 | 0.0 | — | — |
| APT19 (G0073) aka APT19, Codoso, C0d0so0… | unknown | — | MandAPT19 | National SecuritySecurities, Commodity Contracts & Other Financial InvestmentsOil & Gas ExtractionChemical ManufacturingTelecommunications+7 more | — | 3 | 32 | 8.7 | — | 2021 |
| APT28 (G0007) aka APT28, IRON TWILIGHT, SNAKEMACKEREL… | state | 🇷🇺 RU | MSPawn StormMSForest BlizzardMSSTRONTIUMCSFancy BearMandAPT28SWIRON TWILIGHT | Electric Power Generation, Transmission & DistributionExecutive, Legislative & Other General Government SupportInternational AffairsChemical ManufacturingNational Security | World Anti-Doping Agency (WADA)US Anti-Doping AgencyOrganization for the Prohibition of Chemical Weapons (OPCW)+4 more ⇄1 | 1 | 129 | 1.2 | 1.4 | 2026 |
| APT29 (G0016) aka APT29, IRON RITUAL, IRON HEMLOCK… | state | 🇷🇺 RU | MSMidnight BlizzardCSCozy BearMandAPT29MandUNC2452MandUNC3524SWIRON HEMLOCK | Public AdministrationProfessional, Scientific & Technical ServicesNational SecurityEducational ServicesOther Services (except Public Administration) | 3 | 96 | 9.1 | 0.2 | 2026 | |
| APT3 (G0022) aka APT3, Gothic Panda, Pirpi… | state-contractor | 🇨🇳 CN | CSGothic PandaMandAPT3 | — | — | 2 | 69 | 4.4 | — | 2021 |
| APT30 (G0013) aka APT30, G0013… | state | 🇨🇳 CN | MandAPT30 | Public Administration | — | 0 | 4 | 0.0 | — | — |
| APT32 (G0050) aka APT32, SeaLotus, OceanLotus… | state | 🇻🇳 VN | MSCanvas CycloneCSOcean BuffaloMandAPT32 | Broadcasting | — | 0 | 106 | 0.0 | — | — |
| APT33 (G0064) aka APT33, HOLMIUM, Elfin… | state | 🇮🇷 IR | MSPeach SandstormMSHOLMIUMCSRefined KittenMandAPT33 | Air TransportationOil & Gas ExtractionUtilities | — | 0 | 47 | 0.0 | — | — |
| APT37 (G0067) aka APT37, InkySquid, ScarCruft… | state | 🇰🇵 KP | CSRicochet ChollimaMandAPT37MandTEMP.ReaperCscoGroup123 | — | — | 4 | 40 | 17.2 | — | 2016 |
| APT38 (G0082) aka APT38, NICKEL GLADSTONE, BeagleBoyz… | state | 🇰🇵 KP | MSSapphire SleetCSStardust ChollimaMandAPT38CISABeagleBoyz | Credit Intermediation & Related Activities (Banking)Securities, Commodity Contracts & Other Financial InvestmentsArts, Entertainment & RecreationFinance & Insurance | Bank of BangladeshBancomextBanco de Chile | 2 | 77 | 5.5 | 0.8 | 2026 |
| APT39 (G0087) aka APT39, ITG07, Chafer… | state | 🇮🇷 IR | MSBurgundy SandstormCSRemix KittenMandAPT39 | Air TransportationAccommodation & Food ServicesEducational ServicesTelecommunications | — | 0 | 72 | 0.0 | — | — |
| APT41 (G0096) aka APT41, Wicked Panda, Brass Typhoon… | state-contractor | 🇨🇳 CN | MSBrass TyphoonCSWicked PandaMandAPT41 | Health Care & Social AssistanceTelecommunicationsSoftware PublishersFinance & InsuranceEducational Services+2 more | — | 2 | 115 | 4.4 | — | 2021 |
| APT42 (G1044) aka APT42, UNC788, CALANQUE… | state | 🇮🇷 IR | MandAPT42 | Software Publishers | — | 0 | 47 | 0.0 | — | — |
| APT5 (G1023) aka APT5, Mulberry Typhoon, MANGANESE… | state | 🇨🇳 CN | MSMulberry TyphoonCSKeyhole PandaMandAPT5MandUNC2630MandTEMP.BottleSWBRONZE FLEETWOOD | TelecommunicationsAerospace Product & Parts ManufacturingNational SecuritySoftware Publishers | — | 0 | 42 | 0.0 | — | — |
| ASML China data-misappropriation disclosure (2024) (INS-ASML-CHINA-2024) aka ASML China data-misappropriation disclosure (2024), ASML 2024 China leak… | insider | 🇳🇱 NL | — | Semiconductor: lithography equipment | ASML ⇄4 | 0 | 0 | 0.0 | 1.0 | — |
| ASML former employee (PRC IP transfer 2023) (INS-ASML-EMPLOYEE-2023) aka ASML former employee (PRC IP transfer 2023), ASML insider 2023… | insider | 🇳🇱 NL | — | Semiconductor: lithography equipment | ASML ⇄4 | 0 | 0 | 0.0 | 1.0 | — |
| ASML former employee unauthorised data transfer (NL, 2015) (INS-ASML-SHANGHAI-2015) aka ASML former employee unauthorised data transfer (NL, 2015), ASML NL 2015 insider… | insider | 🇳🇱 NL | — | Semiconductor: lithography equipmentSemiconductor: lithography service | ASML ⇄4 | 0 | 0 | 0.0 | 0.5 | — |
| Aaron Swartz (JSTOR / PACER access) (HACK-SWARTZ-JSTOR) aka Aaron Swartz (JSTOR / PACER access), Aaron Swartz… | hacktivist | — | — | Academia: scholarly publishingGovernment: court records | JSTORMIT | 0 | 0 | 0.0 | 1.0 | — |
| Adidas AG (Nike 3-designer civil suit 2014) (COMP-ADIDAS-NIKE-2014) aka Adidas AG (Nike 3-designer civil suit 2014), Adidas, Adidas Group… | competitor | 🇩🇪 DE | — | Consumer products: athletic footwearConsumer products: apparel | Nike | 0 | 0 | 0.0 | 0.5 | — |
| Agrius (G1030) aka Agrius, Pink Sandstorm, AMERICIUM… | state | 🇮🇷 IR | MSPink SandstormCSSPECTRAL KITTENMandUNC2428 | — | — | 0 | 30 | 0.0 | — | — |
| Airbus Defence & Space export-control employee case (FR 2015) (INS-AIRBUS-FRANCE-2015) aka Airbus Defence & Space export-control employee case (FR 2015), Airbus DS export control 2015… | insider | 🇫🇷 FR | — | Aerospace: space systemsDefense: satellite components | Airbus Defence & Space | 0 | 0 | 0.0 | 0.5 | — |
| Airbus French-procurement insider disclosure (FR/UK DPA, 2020) (INS-AIRBUS-CFIUS-2020) aka Airbus French-procurement insider disclosure (FR/UK DPA, 2020), Airbus DPA 2020 insider… | insider | 🇫🇷 FR | — | Aerospace: commercial aircraftDefense: military aircraft | Airbus ⇄2 | 0 | 0 | 0.0 | 0.5 | — |
| Airbus Helicopters (Eurocopter, Sikorsky composite-blade case) (COMP-AIRBUS-EUROCOPTER-DEFENDANT) aka Airbus Helicopters (Eurocopter, Sikorsky composite-blade case), Airbus Helicopters, Eurocopter… | competitor | 🇫🇷 FR | — | Aerospace: helicoptersDefense: rotorcraftAerospace: composite materials | — | 0 | 0 | 0.0 | — | — |
| Airbus SE (Boeing 787 fuselage civil counter-claim 2010) (COMP-AIRBUS-BOEING-CIVIL) aka Airbus SE (Boeing 787 fuselage civil counter-claim 2010), Airbus, Airbus SE… | competitor | 🇳🇱 NL | — | Aerospace: commercial aviationAerospace: composite materials | — | 0 | 0 | 0.0 | — | — |
| Airbus supplier-chain intrusion series (2019) (INS-AIRBUS-SUPPLIERS-2019) aka Airbus supplier-chain intrusion series (2019), Airbus 2019 supplier breach… | insider | 🇫🇷 FR | — | Aerospace: commercial aviationDefense: aerospace | 0 | 0 | 0.0 | 1.5 | — | |
| Ajax Security Team (G0130) aka Ajax Security Team, Operation Woolen-Goldfish, AjaxTM… | state | 🇮🇷 IR | CSRocket KittenCSFlying KittenMandOperation Saffron RoseMandTEMP.Beanie | Aerospace Product & Parts ManufacturingNational Security | — | 1 | 10 | 1.2 | — | 2026 |
| Akira (G1024) aka Akira, GOLD SAHARA, PUNK SPIDER… | criminal | — | CSPUNK SPIDERSWGOLD SAHARACISAAkira | Publishing Industries (Including Software)Software Publishers | — | 1 | 24 | 4.3 | — | 2023 |
| Al-Toufan (HACK-AL-TOUFAN) aka Al-Toufan, Anonymous Al-Toufan… | hacktivist | — | — | GovernmentMediaOnline services | — | 0 | 0 | 0.0 | — | — |
| Allen Ho (CB&I/TVA nuclear tech) (INS-HO-2017) aka Allen Ho (CB&I/TVA nuclear tech), Allen Ho, Szuhsiung Ho… → China General Nuclear Power Corp (CGNPC) | insider | 🇺🇸 US | — | Nuclear power: utility-scaleEnergy: power generation | — | 0 | 0 | 0.0 | — | — |
| Amazon.com (Walmart logistics engineer recruitment civil claims) (COMP-AMAZON-WALMART-LOGISTICS) aka Amazon.com (Walmart logistics engineer recruitment civil claims), Amazon, Amazon.com Inc… | competitor | 🇺🇸 US | — | E-commerce: logisticsSoftware: supply chain | Walmart | 0 | 0 | 0.0 | 0.5 | — |
| Andariel (G0138) aka Andariel, Silent Chollima, PLUTONIUM… | state | 🇰🇵 KP | MSOnyx SleetCSSilent Chollima | Executive, Legislative & Other General Government SupportNational SecurityCredit Intermediation & Related Activities (Banking)Securities, Commodity Contracts & Other Financial InvestmentsFinance & Insurance+1 more | — | 11 | 18 | 31.9 | — | 2022 |
| Andrew Auernheimer ('weev', Goatse Security) (HACK-AUERNHEIMER-WEEV) aka Andrew Auernheimer ('weev', Goatse Security), weev, Andrew Auernheimer… | hacktivist | — | — | Telecommunications: mobileTechnology platforms | AT&T ⇄1 | 0 | 0 | 0.0 | 0.5 | — |
| Anming Hu (Univ. of Tennessee / NASA disclosure case) (INS-HU-TENNESSEE-2021) aka Anming Hu (Univ. of Tennessee / NASA disclosure case), Anming Hu, Hu Anming… | insider | 🇺🇸 US | — | Academia: nanomaterials researchAerospace: NASA-funded research | University of TennesseeNASA | 0 | 0 | 0.0 | 1.0 | — |
| AnonOps (HACK-ANONOPS) aka AnonOps, AnonOps IRC, Operation Payback core… | hacktivist | — | — | Financial servicesOnline servicesEntertainment: gaming servicesGovernmentReligious institutions+2 more | MPAARIAAVisa+3 more ⇄1 | 0 | 0 | 0.0 | 0.9 | — |
| Anonymous Brasil (HACK-ANONYMOUS-BRASIL) aka Anonymous Brasil, AnonBrasil, Anonymous Brazil… | hacktivist | — | — | GovernmentFinancial services | — | 0 | 0 | 0.0 | — | — |
| Anonymous Collective (HACK-ANONYMOUS-COLLECTIVE) aka Anonymous Collective, Skynet Collective… | hacktivist | 🇷🇺 RU | — | GovernmentFinancial services | — | 0 | 0 | 0.0 | — | — |
| Anonymous Darknet Parliament (HACK-INDONESIAN-DARKNET-PARLIAMENT) aka Anonymous Darknet Parliament, Darknet Parliament… | hacktivist | 🇷🇺 RU | — | BankingGovernmentOnline services | SWIFT | 0 | 0 | 0.0 | 0.3 | — |
| Anonymous France (HACK-ANONYMOUS-FRANCE) aka Anonymous France, AnonFR, OpFrance… | hacktivist | — | — | GovernmentMediaOnline services | — | 0 | 0 | 0.0 | — | — |
| Anonymous Indonesia (HACK-ANONYMOUS-INDONESIA) aka Anonymous Indonesia, AnonID… | hacktivist | 🇮🇩 ID | — | GovernmentIntelligence agencies | — | 0 | 0 | 0.0 | — | — |
| Anonymous Italia (HACK-ANONYMOUS-ITALIA) aka Anonymous Italia, AnonItalia, AnonPlus… | hacktivist | — | — | GovernmentReligious institutionsEducational institutions | Italian Ministry of DefenseVatican | 0 | 0 | 0.0 | 0.7 | — |
| Anonymous Korea (HACK-ANONYMOUS-KOREA) aka Anonymous Korea, AnonKorea, OpNorthKorea… | hacktivist | — | — | GovernmentMediaOnline services | Uriminzokkiri | 0 | 0 | 0.0 | 0.3 | — |
| Anonymous Pakistan (HACK-ANONYMOUS-PAKISTAN) aka Anonymous Pakistan, AnonPak… | hacktivist | — | — | GovernmentMedia | ECP | 0 | 0 | 0.0 | 0.5 | — |
| Anonymous Philippines (HACK-ANONYMOUS-PH) aka Anonymous Philippines, AnonPH… | hacktivist | 🇵🇭 PH | — | Government: electionsGovernment | — | 0 | 0 | 0.0 | — | — |
| Anonymous Russia (HACK-ANONYMOUS-RUSSIA) aka Anonymous Russia, AnonymousRussia, Raty (persona)… | hacktivist | 🇷🇺 RU | — | GovernmentOnline services | — | 0 | 0 | 0.0 | — | — |
| Anonymous Spain (HACK-ANONYMOUS-SPAIN) aka Anonymous Spain, AnonSpain, OpCataluna… | hacktivist | — | — | GovernmentGovernment: stateOnline services | — | 0 | 0 | 0.0 | — | — |
| Anonymous Sudan (HACK-ANONYMOUS-SUDAN) aka Anonymous Sudan, Storm-1359… | hacktivist | — | — | Financial servicesTechnology platformsGovernmentHealthcare | 0 | 0 | 0.0 | 0.5 | — | |
| Anonymous Thailand (HACK-ANONYMOUS-THAILAND) aka Anonymous Thailand, AnonThailand, OpSingleGateway… | hacktivist | — | — | GovernmentOnline services | Royal Thai PoliceICT Ministry | 0 | 0 | 0.0 | 1.0 | — |
| Anonymous Vietnam (HACK-ANONYMOUS-VIETNAM) aka Anonymous Vietnam, AnonVN… | hacktivist | — | — | GovernmentOnline services | — | 0 | 0 | 0.0 | — | — |
| Anthony Levandowski (INS-LEVANDOWSKI-2017) aka Anthony Levandowski, Levandowski… → Uber Technologies (Waymo IP-theft beneficiary) | insider | 🇺🇸 US | — | Automotive: autonomous vehiclesSoftware: machine learning | 0 | 0 | 0.0 | 1.5 | — | |
| Anthropic (OpenAI / Google researcher-recruitment claims) (COMP-ANTHROPIC-OPENAI) aka Anthropic (OpenAI / Google researcher-recruitment claims), Anthropic, Anthropic PBC… | competitor | 🇺🇸 US | — | Software: artificial intelligenceSoftware: machine learning | OpenAI ⇄1 | 0 | 0 | 0.0 | 0.5 | — |
| Aoqin Dragon (G1007) aka Aoqin Dragon, UNC94… | state | 🇨🇳 CN | — | Public AdministrationEducational ServicesTelecommunicationsUtilities | — | 1 | 13 | 2.7 | — | 2022 |
| Apple Inc. (Masimo pulse-oximetry trade-secret 2020-2024) (COMP-APPLE-MASIMO) aka Apple Inc. (Masimo pulse-oximetry trade-secret 2020-2024), Apple, Apple Inc… | competitor | 🇺🇸 US | — | Consumer electronics: wearablesMedical devices: pulse oximetry | MasimoCercacor | 0 | 0 | 0.0 | 1.0 | — |
| AppleJeus (G1049) aka AppleJeus, Gleaming Pisces, Citrine Sleet… | state | 🇰🇵 KP | MSCitrine SleetMandUNC1720MandUNC4736 | Securities, Commodity Contracts & Other Financial InvestmentsFinance & InsurancePublic AdministrationSoftware Publishers | 0 | 2 | 0.0 | 0.5 | — | |
| Aquatic Panda (G0143) aka Aquatic Panda, Earth Lusca, CHROMIUM… | state | 🇨🇳 CN | MSCharcoal TyphoonCSAquatic Panda | TelecommunicationsPublic AdministrationInformation | — | 1 | 49 | 1.2 | — | 2026 |
| Atos SE (Sopra Steria / Capgemini civil disputes) (COMP-ATOS-SOPRA) aka Atos SE (Sopra Steria / Capgemini civil disputes), Atos, Atos SE… | competitor | 🇫🇷 FR | — | IT services: consultingCybersecurity: government | 0 | 0 | 0.0 | 1.5 | — | |
| Australian PLA-PhD-student visa-cancellation cohort (AU, 2020) (INS-AUSTRALIAN-PLA-PHD-2020) aka Australian PLA-PhD-student visa-cancellation cohort (AU, 2020), Australia PLA PhD 2020… | insider | 🇦🇺 AU | — | Academia: defence researchGovernment: foreign-influence transparency | — | 0 | 0 | 0.0 | — | — |
| Avant! Corporation (Cadence Design Systems case) (COMP-AVANT) aka Avant! Corporation (Cadence Design Systems case), Avant!, Avant Corporation… | competitor | 🇺🇸 US | — | Software: EDA / chip-design toolsSemiconductor: design automation | Cadence | 0 | 0 | 0.0 | 0.5 | — |
| Axiom (G0001) aka Axiom, Group 72… | state | 🇨🇳 CN | — | Aerospace Product & Parts ManufacturingNational SecurityPublic AdministrationManufacturingInformation+1 more | — | 0 | 22 | 0.0 | — | — |
| BAE Systems SFO Al-Yamamah insider disclosures (INS-BAESYSTEMS-SFO-2010) aka BAE Systems SFO Al-Yamamah insider disclosures, BAE Systems Al-Yamamah SFO… | insider | 🇬🇧 GB | — | Defense: military aircraftDefense: arms trade | BAE Systems ⇄1 | 0 | 0 | 0.0 | 0.5 | — |
| BAIC Group (Daimler / Hyundai alleged engineer beneficiary) (COMP-BAIC) aka BAIC Group (Daimler / Hyundai alleged engineer beneficiary), BAIC, BAIC Group… | competitor | 🇨🇳 CN | — | Automotive: vehicle manufacturingAutomotive: electric vehicles | 0 | 0 | 0.0 | 1.0 | — | |
| BD-NETBIOS Cyber Force (HACK-BD-NETBIOS) aka BD-NETBIOS Cyber Force, BD NETBIOS, Bangladesh NetBIOS… | hacktivist | — | — | GovernmentMedia | — | 0 | 0 | 0.0 | — | — |
| BITTER (G1002) aka BITTER, T-APT-17, HAZY TIGER… | state | 🇮🇳 IN | CSHAZY TIGERCscoBITTER | Executive, Legislative & Other General Government SupportUtilitiesProfessional, Scientific & Technical ServicesPublic Administration | — | 0 | 26 | 0.0 | — | — |
| BMW AG (Mercedes / Daimler civil engineer-recruitment disputes) (COMP-BMW-MERCEDES-2021) aka BMW AG (Mercedes / Daimler civil engineer-recruitment disputes), BMW, Bayerische Motoren Werke AG… | competitor | 🇩🇪 DE | — | Automotive: vehicle manufacturingAutomotive: electric vehicles | AudiPorscheDaimler/Mercedes | 0 | 0 | 0.0 | 1.5 | — |
| BO Team (HACK-BO-TEAM) aka BO Team, BO_Team… | hacktivist | — | — | BankingFinancial servicesGovernment | IPL Consulting | 0 | 0 | 0.0 | 0.3 | — |
| BOE Technology (Samsung Display OLED ITC trade-secret 2023-2025) (COMP-BOE-SAMSUNG-OLED) aka BOE Technology (Samsung Display OLED ITC trade-secret 2023-2025), BOE, BOE Technology Group… | competitor | 🇨🇳 CN | — | Electronics: OLED displaysConsumer electronicsElectronics: LCD displays | 0 | 0 | 0.0 | 0.7 | — | |
| BRONZE BUTLER (G0060) aka BRONZE BUTLER, REDBALDKNIGHT, Tick… | state | 🇨🇳 CN | MSSwirl TyphoonCSSTALKER PANDASWBRONZE BUTLER | Public AdministrationChemical ManufacturingComputer & Electronic Product ManufacturingManufacturing | — | 0 | 58 | 0.0 | — | — |
| BYD Company (alleged Tesla cases) (COMP-BYD-TESLA) aka BYD Company (alleged Tesla cases), BYD, BYD Company… | competitor | 🇨🇳 CN | — | Automotive: electric vehiclesAutomotive: EV batteriesAutomotive: autonomous vehicles | Tesla ⇄5 | 0 | 0 | 0.0 | 0.3 | — |
| BackdoorDiplomacy (G0135) aka BackdoorDiplomacy, BackDip, CloudComputating… | unknown | — | — | International AffairsTelecommunications | — | 0 | 21 | 0.0 | — | — |
| Baidu Apollo (Waymo / Tesla alleged engineer beneficiary) (COMP-BAIDU-APOLLO) aka Baidu Apollo (Waymo / Tesla alleged engineer beneficiary), Baidu, Baidu Apollo… | competitor | 🇨🇳 CN | — | Automotive: autonomous vehiclesSoftware: machine learning | 0 | 0 | 0.0 | 1.5 | — | |
| Bayer agro-chemistry employee case (DE 2018) (INS-BAYER-2018) aka Bayer agro-chemistry employee case (DE 2018), Bayer Leverkusen insider 2018… | insider | 🇩🇪 DE | — | Specialty chemicals: agrochemicalsAgritech: crop protection | Bayer | 0 | 0 | 0.0 | 0.5 | — |
| Belarusian Cyber Partisans (HACK-CYBER-PARTISANS) aka Cyber Partisans, Belarusian Cyber Partisans, Кибер Партизаны… | hacktivist | 🇧🇾 BY | — | GovernmentTransportation: railLaw enforcement | Belarusian RailwaysBelarus Ministry of Internal Affairs | 0 | 0 | 0.0 | 0.7 | — |
| Beregini (HACK-BEREGINI) aka Beregini, Beregini Hack… | hacktivist | 🇷🇺 RU | — | GovernmentMediaDefense contractors | — | 0 | 0 | 0.0 | — | — |
| Bitmain / Taiwan IC-design engineer indictment (TW, 2018) (INS-TAIWAN-NETSPEED-2018) aka Bitmain / Taiwan IC-design engineer indictment (TW, 2018), Taiwan IC design 2018… | insider | 🇹🇼 TW | — | Semiconductor: AI accelerator architectureSemiconductor: chip design | — | 0 | 0 | 0.0 | — | — |
| Black Shadow (HACK-BLACK-SHADOW) aka Black Shadow, BlackShadow… | hacktivist | 🇮🇷 IR | — | Financial servicesHealthcareOnline services | 0 | 0 | 0.0 | 1.0 | — | |
| Black Skills (HACK-BLACK-SKILLS) aka Black Skills, Black Owl (KillMilk affiliate)… | hacktivist | 🇷🇺 RU | — | Defense contractorsGovernmentCritical infrastructure | — | 0 | 0 | 0.0 | — | — |
| BlackByte (G1043) aka BlackByte, Hecamede… | criminal | — | MSBlackByte | UtilitiesSoftware Publishers | — | 3 | 66 | 12.9 | — | 2026 |
| BlackOasis (G0063) aka BlackOasis, G0063… | unknown | — | — | Other Services (except Public Administration)Broadcasting | — | 0 | 1 | 0.0 | — | — |
| BlackTech (G0098) aka BlackTech, Palmerworm, CIRCUIT PANDA… | state | 🇨🇳 CN | MSCanary TyphoonCSCIRCUIT PANDAMandTemp.Overboard | ConstructionComputer & Electronic Product ManufacturingFinance & InsuranceInformationProfessional, Scientific & Technical Services+1 more | — | 0 | 20 | 0.0 | — | — |
| Blue Mockingbird (G0108) aka Blue Mockingbird… | unknown | — | — | Securities, Commodity Contracts & Other Financial Investments | — | 0 | 35 | 0.0 | — | — |
| Bo Mao (CNEX Labs / Huawei flash-storage IP) (INS-MAO-CNEX-2020) aka Bo Mao (CNEX Labs / Huawei flash-storage IP), Bo Mao… | insider | 🇺🇸 US | — | Semiconductor: NAND flash memorySoftware: SSD firmware | CNEX Labs | 0 | 0 | 0.0 | 0.5 | — |
| CATL (Contemporary Amperex Technology) (COMP-CATL) aka CATL (Contemporary Amperex Technology), CATL, Contemporary Amperex Technology… | competitor | 🇨🇳 CN | — | Automotive: EV batteriesElectronics: lithium-ion cells | 0 | 0 | 0.0 | 1.5 | — | |
| CURIUM (G1012) aka CURIUM, Crimson Sandstorm, TA456… | state | 🇮🇷 IR | MSCrimson SandstormMSSmoke SandstormMSCuboid SandstormCSIMPERIAL KITTEN | Computing Infrastructure Providers, Data Processing & HostingNational SecurityBroadcasting | — | 0 | 29 | 0.0 | — | — |
| Capgemini SE (IT-consultancy non-compete civil disputes) (COMP-CAPGEMINI-IT) aka Capgemini SE (IT-consultancy non-compete civil disputes), Capgemini, Capgemini SE… | competitor | 🇫🇷 FR | — | IT services: consultingIT services: systems integration | Tata Consultancy ServicesWiproAtos | 0 | 0 | 0.0 | 1.5 | — |
| Carbanak (G0008) aka Carbanak, Anunak, FIN7… | state | 🇷🇺 RU | MSSangria TempestCSCARBON SPIDERMandFIN7KSPCarbanak | Credit Intermediation & Related Activities (Banking)Finance & InsuranceSoftware Publishers | — | 0 | 14 | 0.0 | — | — |
| Cause Direct Action (CauseDIA) (HACK-CAUSE-DIA) aka Cause Direct Action (CauseDIA), CauseDIA… | hacktivist | — | — | GovernmentDefense contractors | — | 0 | 0 | 0.0 | — | — |
| ChangXin Memory Technologies (CXMT / DRAM) (COMP-CXMT) aka ChangXin Memory Technologies (CXMT / DRAM), CXMT, ChangXin Memory… | competitor | 🇨🇳 CN | — | Semiconductor: DRAM memory | 0 | 0 | 0.0 | 2.0 | — | |
| Charles Lieber (Harvard / Thousand Talents) (INS-LIEBER-2020) aka Charles Lieber (Harvard / Thousand Talents), Charles Lieber, Charles M. Lieber… | insider | 🇺🇸 US | — | Academic research: chemistryNanotechnology | Harvard | 0 | 0 | 0.0 | 0.5 | — |
| Chen Li-ming (TSMC 2nm leak to Tokyo Electron) (INS-CHEN-TSMC-2026) aka Chen Li-ming (TSMC 2nm leak to Tokyo Electron), Chen Li-ming, TSMC 2nm leak ringleader… | insider | 🇹🇼 TW | — | Semiconductor: chip fabricationSemiconductor: process equipment | TSMC ⇄2 | 0 | 0 | 0.0 | 0.5 | — |
| Chen Zhengkun (UMC / Fujian Jinhua / Micron DRAM) (INS-UMC-JINHUA-CHEN-2020) aka Chen Zhengkun (UMC / Fujian Jinhua / Micron DRAM), Stephen Chen, Chen Zhengkun… → Fujian Jinhua Integrated Circuit (DRAM) | insider | 🇹🇼 TW | — | Semiconductor: DRAM memory | Micron Memory Taiwan | 0 | 0 | 0.0 | 1.0 | — |
| Chernovite (MISP-2ce00149) aka Chernovite… | state | 🇷🇺 RU | — | — | — | 1 | 0 | 4.3 | — | 2020 |
| Chi Mak (Power Paragon / US Navy quiet propulsion) (INS-MAK-2007) aka Chi Mak (Power Paragon / US Navy quiet propulsion), Chi Mak, Mak Chi… | insider | 🇺🇸 US | — | Defense: naval propulsionDefense: submarine systems | Power ParagonUS NavyNaval-Sea-Systems | 0 | 0 | 0.0 | 1.5 | — |
| Chimera (G0114) aka Chimera… | state | 🇨🇳 CN | — | Computer & Electronic Product ManufacturingAir Transportation | — | 0 | 82 | 0.0 | — | — |
| China General Nuclear Power Corp (CGNPC) (COMP-CGNPC) aka China General Nuclear Power Corp (CGNPC), CGNPC, China General Nuclear Power Corporation… | competitor | 🇨🇳 CN | — | Nuclear power: utility-scaleEnergy: power generation | — | 0 | 0 | 0.0 | — | — |
| Cinnamon Tempest (G1021) aka Cinnamon Tempest, DEV-0401, Emperor Dragonfly… | state | 🇨🇳 CN | MSCinnamon Tempest | Finance & InsurancePublic AdministrationSoftware Publishers | — | 1 | 26 | 4.3 | — | 2023 |
| Citadel Securities (Jump Trading trade-secret 2014-2016) (COMP-CITADEL-JUMP) aka Citadel Securities (Jump Trading trade-secret 2014-2016), Citadel, Citadel Securities LLC… | competitor | 🇺🇸 US | — | Financial services: high-frequency tradingSoftware: trading systems | — | 0 | 0 | 0.0 | — | — |
| Cleaver (G0003) aka Cleaver, Threat Group 2889, TG-2889… | state | 🇮🇷 IR | — | — | — | 0 | 10 | 0.0 | — | — |
| Clop (MISP-21b349c3) aka Clop, Cl0p… | criminal | — | — | — | — | 3 | 0 | 11.5 | — | 2023 |
| Cloudflare (Akamai trade-secret civil claims) (COMP-CLOUDFLARE-AKAMAI) aka Cloudflare (Akamai trade-secret civil claims), Cloudflare, Cloudflare Inc… | competitor | 🇺🇸 US | — | Internet infrastructure: CDNCybersecurity: edge | AkamaiFastly | 0 | 0 | 0.0 | 1.0 | — |
| Cobalt Group (G0080) aka Cobalt Group, GOLD KINGSWOOD, Cobalt Gang… | unknown | — | CSCobalt SpiderSWGOLD KINGSWOODCscoCobalt Group | Credit Intermediation & Related Activities (Banking)Finance & InsuranceSoftware Publishers | — | 0 | 52 | 0.0 | — | — |
| Coinbase Global (Binance.US civil exchange-engineer claims) (COMP-COINBASE-BINANCE-US) aka Coinbase Global (Binance.US civil exchange-engineer claims), Coinbase, Coinbase Global Inc… | competitor | 🇺🇸 US | — | Financial services: cryptocurrency exchangesSoftware: trading systems | — | 0 | 0 | 0.0 | — | — |
| Confucius (G0142) aka Confucius, Confucius APT… | unknown | — | — | Public AdministrationNational Security | — | 0 | 28 | 0.0 | — | — |
| Contagious Interview (G1052) aka Contagious Interview, DeceptiveDevelopment, Gwisin Gang… | state | 🇰🇵 KP | CSFamous ChollimaMandUNC5267 | Software PublishersSecurities, Commodity Contracts & Other Financial Investments | — | 0 | 71 | 0.0 | — | — |
| Conti Leaks (anti-Russia insider) (HACK-CONTI-LEAKS) aka Conti Leaks (anti-Russia insider), ContiLeaks, @ContiLeaks… | hacktivist | — | — | Technology platformsOnline services | — | 0 | 0 | 0.0 | — | — |
| Continental AG (Bosch / Schaeffler civil disputes) (COMP-CONTINENTAL-BOSCH) aka Continental AG (Bosch / Schaeffler civil disputes), Continental, Continental AG… | competitor | 🇩🇪 DE | — | Automotive: parts manufacturingAutomotive: ADAS | 0 | 0 | 0.0 | 1.0 | — | |
| CopyKittens (G0052) aka CopyKittens, Slayer Kitten, G0052… | state | 🇮🇷 IR | CSSlayer Kitten | — | — | 0 | 14 | 0.0 | — | — |
| Coupa Software (SAP Ariba civil claims over employee defection) (COMP-COUPA-SAP-ARIBA) aka Coupa Software (SAP Ariba civil claims over employee defection), Coupa, Coupa Software Inc… | competitor | 🇺🇸 US | — | Enterprise software: spend managementEnterprise software: procurement | — | 0 | 0 | 0.0 | — | — |
| Crackas With Attitude (Kane Gamble) (HACK-CRACKAS-WITH-ATTITUDE) aka Crackas With Attitude (Kane Gamble), Crackas With Attitude, CWA… | hacktivist | — | — | IntelligenceLaw enforcementGovernment: cabinet officials | 0 | 0 | 0.0 | 1.0 | — | |
| CrowdStrike (McAfee / Symantec civil claims) (COMP-CROWDSTRIKE-MCAFEE) aka CrowdStrike (McAfee / Symantec civil claims), CrowdStrike, CrowdStrike Holdings Inc… | competitor | 🇺🇸 US | — | Cybersecurity: endpoint protectionCybersecurity: threat intelligence | McAfeeSymantecNortonLifeLock | 0 | 0 | 0.0 | 1.5 | — |
| Crypt32 (MISP-705e03d1) aka Crypt32… | criminal | — | — | — | — | 3 | 0 | 12.9 | — | 2020 |
| Cult of the Dead Cow (cDc) (HACK-CULT-DEAD-COW) aka Cult of the Dead Cow (cDc), Cult of the Dead Cow, cDc… | hacktivist | 🇺🇸 US | — | Software: consumerGovernmentSurveillance technology | — | 0 | 0 | 0.0 | — | — |
| Cyber Toufan (HACK-CYBER-TOUFAN) aka Cyber Toufan, Cyber Toufan Al-Aqsa, Cyber Toufan Operations… | hacktivist | 🇮🇷 IR | — | Technology platformsOnline servicesCritical infrastructure | — | 0 | 0 | 0.0 | — | — |
| CyberAv3ngers (IRGC-linked) (HACK-CYBER-AVENGERS) aka CyberAv3ngers (IRGC-linked), CyberAv3ngers, Cyber Av3ngers… | hacktivist | 🇮🇷 IR | — | Critical infrastructure: water utilitiesManufacturing: industrial control systems | — | 0 | 0 | 0.0 | — | — |
| DBN Group / Beijing Dabeinong Technology (COMP-DBN) aka DBN Group / Beijing Dabeinong Technology, DBN Group, Beijing Dabeinong… | competitor | 🇨🇳 CN | — | Agritech: seed geneticsAgriculture: corn | — | 0 | 0 | 0.0 | — | — |
| DDoS Crimea (HACK-DDOS-CRIMEA) aka DDoS Crimea, Crimea Defense Team… | hacktivist | 🇷🇺 RU | — | GovernmentMedia | — | 0 | 0 | 0.0 | — | — |
| DJI / SZ DJI Technology (Textron $279M drone-patent verdict) (COMP-DJI) aka DJI / SZ DJI Technology (Textron $279M drone-patent verdict), DJI, SZ DJI Technology… | competitor | 🇨🇳 CN | — | Consumer electronics: dronesAerospace: UAS | TextronBellInsta360 | 0 | 0 | 0.0 | 1.5 | — |
| Daggerfly (G1034) aka Daggerfly, Evasive Panda, BRONZE HIGHLAND… | state | 🇨🇳 CN | CSEvasive Panda | TelecommunicationsPublic AdministrationSoftware PublishersOther Services (except Public Administration) | — | 0 | 30 | 0.0 | — | — |
| Dark Caracal (G0070) aka Dark Caracal, G0070… | state | 🌍 LB | — | — | — | 0 | 19 | 0.0 | — | — |
| DarkHydrus (G0079) aka DarkHydrus, LazyMeerkat, G0079… | unknown | — | — | Educational ServicesExecutive, Legislative & Other General Government SupportPublic Administration | — | 0 | 12 | 0.0 | — | — |
| DarkVishnya (G0105) aka DarkVishnya… | unknown | — | — | Credit Intermediation & Related Activities (Banking)Finance & Insurance | — | 0 | 13 | 0.0 | — | — |
| Darkhotel (G0012) aka Darkhotel, DUBNIUM, Zigzag Hail… | state | 🇰🇷 KR | MSZigzag HailMSDUBNIUMCSShadow CraneKSPDarkhotel | National SecurityAccommodation & Food Services | — | 0 | 34 | 0.0 | — | — |
| Dassault Aviation (Safran civil IP disputes) (COMP-DASSAULT-SAFRAN) aka Dassault Aviation (Safran civil IP disputes), Dassault Aviation, Dassault… | competitor | 🇫🇷 FR | — | Aerospace: military aircraftDefense contractors | — | 0 | 0 | 0.0 | — | — |
| Datadog (New Relic / Dynatrace civil claims over hires) (COMP-DATADOG-NEW-RELIC) aka Datadog (New Relic / Dynatrace civil claims over hires), Datadog, Datadog Inc… | competitor | 🇺🇸 US | — | Enterprise software: observabilityCloud computing: monitoring | New RelicDynatrace | 0 | 0 | 0.0 | 1.0 | — |
| Deep Panda (G0009) aka Deep Panda, Shell Crew, WebMasters… | state | 🇨🇳 CN | MSCheckered TyphoonCSDeep PandaMandAPT19MandTEMP.Avengers | National SecurityFinance & InsuranceTelecommunicationsHealth Care & Social AssistancePublic Administration | Anthem ⇄1 | 2 | 17 | 4.4 | 0.2 | 2021 |
| Denso engineer trade-secret case (JP, 2014) (INS-JP-DENSO-2014) aka Denso engineer trade-secret case (JP, 2014), Denso JP 2014… | insider | 🇯🇵 JP | — | Automotive: vehicle componentsAutomotive: powertrain electronics | Denso | 0 | 0 | 0.0 | 0.5 | — |
| Di Sanh Duong (Australia foreign-interference conviction) (INS-AU-DUONG-2023) aka Di Sanh Duong (Australia foreign-interference conviction), Di Sanh Duong, Sunny Duong… | insider | 🇦🇺 AU | — | Government: political influenceCivil society | — | 0 | 0 | 0.0 | — | — |
| Distributed Denial of Secrets (HACK-DDOSECRETS) aka Distributed Denial of Secrets, DDoSecrets, DDOS… | hacktivist | — | — | GovernmentLaw enforcementMedia | Parler | 0 | 0 | 0.0 | 0.3 | — |
| DocuSign (Adobe Sign / Echosign civil non-compete claims) (COMP-DOCUSIGN-ADOBE) aka DocuSign (Adobe Sign / Echosign civil non-compete claims), DocuSign, DocuSign Inc… | competitor | 🇺🇸 US | — | Enterprise software: e-signatureCloud computing: SaaS | Adobe | 0 | 0 | 0.0 | 0.5 | — |
| Dongfan 'Greg' Chung (INS-CHUNG-2010) aka Dongfan 'Greg' Chung, Dongfan Chung, Greg Chung… | insider | 🇺🇸 US | — | Aerospace: space systemsDefense: military aircraft | 0 | 0 | 0.0 | 1.0 | — | |
| Dongfang Jingyuan Electron (ASML software case) (COMP-DONGFANG-JINGYUAN) aka Dongfang Jingyuan Electron (ASML software case), Dongfang Jingyuan, Dongfang Jingyuan Electron… | competitor | 🇨🇳 CN | — | Semiconductor: chip metrologySoftware: chip-inspection tools | — | 0 | 0 | 0.0 | — | — |
| DoorDash (Uber Eats / Postmates trade-secret civil disputes) (COMP-DOORDASH-UBER) aka DoorDash (Uber Eats / Postmates trade-secret civil disputes), DoorDash, DoorDash Inc… | competitor | 🇺🇸 US | — | E-commerce: food deliverySoftware: logistics | Uber EatsPostmates | 0 | 0 | 0.0 | 1.0 | — |
| DragonForce Malaysia (HACK-DRAGON-FORCE-MY) aka DragonForce Malaysia, DragonForce.my… | hacktivist | 🇲🇾 MY | — | GovernmentEducation | — | 0 | 0 | 0.0 | — | — |
| DragonForce Pakistan (HACK-DRAGONFORCE-PK) aka DragonForce Pakistan, DragonForcePK… | hacktivist | 🇵🇰 PK | — | GovernmentMedia | — | 0 | 0 | 0.0 | — | — |
| DragonOK (G0017) aka DragonOK, Moafee, BRONZE OVERBROOK… | state | 🇨🇳 CN | — | — | — | 0 | 0 | 0.0 | — | — |
| Dragonfly (G0035) aka Dragonfly, TEMP.Isotope, DYMALLOY… | state | 🇷🇺 RU | MSGhost BlizzardCSBerserk BearCSEnergetic BearMandTEMP.IsotopeSWIRON LIBERTYDrgDYMALLOY | Electric Power Generation, Transmission & DistributionAerospace Product & Parts ManufacturingNational SecurityUtilitiesPublic Administration+1 more | — | 0 | 82 | 0.0 | — | — |
| EXOTIC LILY (G1011) aka EXOTIC LILY, DEV-0413… | unknown | — | — | InformationProfessional, Scientific & Technical ServicesHealth Care & Social AssistanceSoftware Publishers | — | 0 | 22 | 0.0 | — | — |
| Earth Lusca (G1006) aka Earth Lusca, TAG-22, Charcoal Typhoon… | state | 🇨🇳 CN | MSCharcoal Typhoon | Public AdministrationTelecommunicationsEducational ServicesSecurities, Commodity Contracts & Other Financial InvestmentsArts, Entertainment & Recreation+3 more | — | 0 | 63 | 0.0 | — | — |
| Edalat-e Ali (HACK-EDALAT-E-ALI) aka Edalat-e Ali, Ali's Justice, عدالت علی… | hacktivist | 🇮🇷 IR | — | GovernmentMediaCritical infrastructure | Evin Prison | 0 | 0 | 0.0 | 0.3 | — |
| Edward Snowden (INS-SNOWDEN-2013) aka Edward Snowden, Snowden… | insider | 🇺🇸 US | — | IntelligenceNational securityGovernment | NSA ⇄1 | 0 | 0 | 0.0 | 0.3 | — |
| Elderwood (G0066) aka Elderwood, Elderwood Gang, Beijing Group… | state | 🇨🇳 CN | CSSneaky Panda | ManufacturingComputing Infrastructure Providers, Data Processing & HostingNational SecurityOther Services (except Public Administration) | Google ⇄2 | 1 | 12 | 3.6 | 0.2 | 2026 |
| Ember Bear (G1003) aka Ember Bear, UNC2589, Bleeding Bear… | state | 🇷🇺 RU | MSCadet BlizzardCSEmber BearCSBleeding BearCSSaint BearCSLorec BearMandUNC2589 | Executive, Legislative & Other General Government SupportTelecommunicationsUtilitiesPublic AdministrationSoftware Publishers | — | 2 | 61 | 5.5 | — | 2026 |
| Empire Hacking / Hack Forums hacktivist ecosystem (HACK-EMPIRE-HACKER) aka Empire Hacking / Hack Forums hacktivist ecosystem, Hack Forums hacktivism, Empire hacking US ecosystem… | hacktivist | 🇺🇸 US | — | GovernmentEducational institutionsReligious institutions | — | 0 | 0 | 0.0 | — | — |
| Epic Games v. Apple (US antitrust / civil) (COMP-EPIC-APPLE-2021) aka Epic Games v. Apple (US antitrust / civil), Epic v. Apple… | competitor | 🇺🇸 US | — | Technology platforms: mobile app storesEntertainment: gaming | — | 0 | 0 | 0.0 | — | — |
| Epic Games v. Google (US antitrust jury verdict) (COMP-EPIC-GOOGLE-2023) aka Epic Games v. Google (US antitrust jury verdict), Epic v. Google… | competitor | 🇺🇸 US | — | Technology platforms: mobile app stores | Epic | 0 | 0 | 0.0 | 1.0 | — |
| Equation (G0020) aka Equation, Equation Group, Tilded Team… | state | 🇺🇸 US | KSPEquation | — | — | 3 | 7 | 11.1 | — | 2022 |
| Ericsson (Nortel Networks IP dispute) (COMP-ERICSSON-NORTEL) aka Ericsson (Nortel Networks IP dispute), Ericsson, Ericsson Inc… | competitor | 🇸🇪 SE | — | Telecommunications: network equipmentTelecommunications: 4G/5G infrastructure | Nortel | 0 | 0 | 0.0 | 0.5 | — |
| Eurocopter (Airbus Helicopters) — Sikorsky tech transfer 2012 (INS-AIRBUS-EUROCOPTER-2012) aka Eurocopter (Airbus Helicopters) — Sikorsky tech transfer 2012, Eurocopter trade-secret case 2012… | insider | 🇫🇷 FR | — | Aerospace: helicoptersDefense: rotorcraftAerospace: composite materials | Sikorsky | 0 | 0 | 0.0 | 0.3 | — |
| Evilnum (G0120) aka Evilnum, DeathStalker, TA4563… | unknown | — | CSKNOCKOUT SPIDER | — | — | 0 | 19 | 0.0 | — | — |
| EvoBus / Daimler (Reisebusboerse, BGH I ZR 64/14) (COMP-EVOBUS-BGH-2017) aka EvoBus / Daimler (Reisebusboerse, BGH I ZR 64/14), EvoBus trade-secret case… | competitor | 🇩🇪 DE | — | Automotive: commercial vehiclesAutomotive: bus manufacturing | 0 | 0 | 0.0 | 1.0 | — | |
| EvoBus / Daimler bus design civil claim (BGH 2017) (INS-EVOBUS-2017) aka EvoBus / Daimler bus design civil claim (BGH 2017), EvoBus BGH 2017… | insider | 🇩🇪 DE | — | Automotive: bus manufacturingIndustrial: vehicle bodies | EvoBus (Daimler) | 0 | 0 | 0.0 | 0.5 | — |
| FIN10 (G0051) aka FIN10, G0051… | unknown | — | MandFIN10 | — | — | 0 | 17 | 0.0 | — | — |
| FIN13 (G1016) aka FIN13, Elephant Beetle, TG2003… | state | 🇷🇺 RU | MandFIN13 | Finance & InsuranceRetail TradeAccommodation & Food Services | — | 0 | 75 | 0.0 | — | — |
| FIN4 (G0085) aka FIN4, WOLF SPIDER, G0085… | state | 🇷🇴 RO | CSWOLF SPIDERMandFIN4 | Chemical ManufacturingHealth Care & Social AssistanceFinance & InsuranceMedical Equipment & Supplies | — | 0 | 20 | 0.0 | — | — |
| FIN5 (G0053) aka FIN5, G0053… | unknown | — | MandFIN5 | Accommodation & Food ServicesArts, Entertainment & RecreationCredit Intermediation & Related Activities (Banking) | — | 0 | 16 | 0.0 | — | — |
| FIN6 (G0037) aka FIN6, Magecart Group 6, ITG08… | unknown | — | MSCamouflage TempestCSSkeleton SpiderMandFIN6 | Retail TradeAccommodation & Food ServicesCredit Intermediation & Related Activities (Banking) | — | 0 | 58 | 0.0 | — | — |
| FIN7 (G0046) aka FIN7, GOLD NIAGARA, ITG14… | unknown | — | MSSangria TempestCSCarbon SpiderMandFIN7SWGOLD NIAGARA | Retail TradeAccommodation & Food ServicesSoftware PublishersProfessional, Scientific & Technical ServicesFinance & Insurance+6 more | — | 1 | 93 | 1.2 | — | 2026 |
| FIN8 (G0061) aka FIN8, Syssphinx, ATK113… | unknown | — | MandFIN8 | Retail TradeFinance & InsuranceInsurance Carriers & Related ActivitiesArts, Entertainment & RecreationAccommodation & Food Services+2 more | — | 0 | 56 | 0.0 | — | — |
| FRwL (From Russia with Love) (HACK-FROM-RUSSIA-WITH-LOVE) aka FRwL (From Russia with Love), FRwL, Z-Team… | hacktivist | 🇷🇺 RU | — | GovernmentCritical infrastructureHealthcare | — | 0 | 0 | 0.0 | — | — |
| Fancy Lazarus (DDoS extortion persona) (HACK-FANCY-LAZARUS) aka Fancy Lazarus (DDoS extortion persona), Fancy Lazarus crew… | hacktivist | — | — | Financial servicesOnline services | — | 0 | 0 | 0.0 | — | — |
| Ferocious Kitten (G0137) aka Ferocious Kitten… | state | 🇮🇷 IR | CSFerocious KittenKSPFerocious Kitten | — | — | 0 | 11 | 0.0 | — | — |
| Former SK Hynix engineer arrested over HiSilicon leak (KR 2024) (INS-SK-HYNIX-HUAWEI-2024) aka Former SK Hynix engineer arrested over HiSilicon leak (KR 2024), SK Hynix HiSilicon insider 2024… | insider | 🇰🇷 KR | — | Semiconductor: HBM memorySemiconductor: advanced packaging | SK Hynix ⇄1 | 0 | 0 | 0.0 | 0.5 | — |
| Former TSMC manager indictment (TW, 2018 / HLMC) (INS-TSMC-CHANG-2018) aka Former TSMC manager indictment (TW, 2018 / HLMC), TSMC HLMC 2018 indictment… | insider | 🇹🇼 TW | — | Semiconductor: chip fabricationSemiconductor: process equipment | TSMC ⇄2 | 0 | 0 | 0.0 | 0.5 | — |
| Fox Kitten (G0117) aka Fox Kitten, UNC757, Parisite… | state | 🇮🇷 IR | MSLemon SandstormCSFox KittenCSPioneer KittenDrgParisite | Oil & Gas ExtractionManufacturingHealth Care & Social AssistancePublic AdministrationNational Security+2 more | — | 2 | 54 | 5.5 | — | 2026 |
| Fujian Jinhua Integrated Circuit (DRAM) (COMP-FUJIAN-JINHUA) aka Fujian Jinhua Integrated Circuit (DRAM), Fujian Jinhua, Jinhua… | competitor | 🇨🇳 CN | — | Semiconductor: DRAM memory | Micron ⇄3 | 0 | 0 | 0.0 | 1.0 | — |
| G.S. Kok / Y.T. Kok / S.C. Chia (Motorola → Hytera engineers) (INS-HYTERA-KOK-2017) aka G.S. Kok / Y.T. Kok / S.C. Chia (Motorola → Hytera engineers), G.S. Kok, Y.T. Kok… → Hytera Communications (Motorola DMR case) | insider | 🇲🇾 MY | — | Telecommunications: two-way radioPublic safety: communications | Motorola ⇄1 | 0 | 0 | 0.0 | 0.5 | — |
| GAC Group (Honda / Toyota JV-defection civil disputes) (COMP-GAC) aka GAC Group (Honda / Toyota JV-defection civil disputes), GAC, GAC Group… | competitor | 🇨🇳 CN | — | Automotive: vehicle manufacturingAutomotive: electric vehicles | — | 0 | 0 | 0.0 | — | — |
| GALLIUM (G0093) aka GALLIUM, Granite Typhoon, Red Dev 4… | state | 🇨🇳 CN | MSGranite TyphoonMSGALLIUMCSPHANTOM PANDA | TelecommunicationsCredit Intermediation & Related Activities (Banking)Public AdministrationFinance & Insurance | — | 0 | 45 | 0.0 | — | — |
| GCMAN (G0036) aka GCMAN, G0036… | state | 🇷🇺 RU | — | — | — | 0 | 3 | 0.0 | — | — |
| GOLD SOUTHFIELD (G0115) aka GOLD SOUTHFIELD, Pinchy Spider… | unknown | — | CSPinchy SpiderSWGOLD SOUTHFIELD | UtilitiesSoftware Publishers | — | 1 | 12 | 1.2 | — | 2026 |
| Gallmaker (G0084) aka Gallmaker… | unknown | — | — | National SecurityPublic Administration | — | 0 | 11 | 0.0 | — | — |
| Gamaredon Group (G0047) aka Gamaredon Group, IRON TILDEN, Primitive Bear… | state | 🇷🇺 RU | MSAqua BlizzardMSACTINIUMCSPrimitive BearSWIRON TILDEN | Justice, Public Order & SafetyNational SecurityOther Services (except Public Administration)Public Administration | — | 1 | 91 | 2.7 | — | 2026 |
| Gaza Cybergang (hacktivist persona) (HACK-GAZA-CYBERGANG) aka Gaza Cybergang (hacktivist persona), Gaza Hackers Team, Molerats sibling… | hacktivist | — | — | GovernmentDefense contractorsMedia | — | 0 | 0 | 0.0 | — | — |
| Geely Holding (WM Motor 2024 record damages plaintiff) (COMP-GEELY-WM) aka Geely Holding (WM Motor 2024 record damages plaintiff), Geely, Geely Holding… | competitor | 🇨🇳 CN | — | Automotive: electric vehiclesAutomotive: vehicle manufacturingTelecommunications: 5G | 0 | 0 | 0.0 | 1.0 | — | |
| GhostSec (HACK-GHOSTSEC) aka GhostSec, Ghost Security… | hacktivist | — | — | Terrorism-aligned infrastructureGovernmentCritical infrastructure | ISIS | 0 | 0 | 0.0 | 0.3 | — |
| Google LLC (civil insider-recruitment defendant) (COMP-GOOGLE-CIVIL-DEFENDANT) aka Google LLC (civil insider-recruitment defendant), Google, Google LLC… | competitor | 🇺🇸 US | — | Software: enterpriseHealthcare: insuranceSports betting: data feeds | 0 | 0 | 0.0 | 0.7 | — | |
| Gorgon Group (G0078) aka Gorgon Group, The Gorgon Group, Subaat… | state | 🇵🇰 PK | — | Executive, Legislative & Other General Government SupportPublic Administration | — | 0 | 23 | 0.0 | — | — |
| Group5 (G0043) aka Group5, G0043… | unknown | — | — | Software Publishers | — | 0 | 7 | 0.0 | — | — |
| Guacamaya (HACK-GUACAMAYA) aka Guacamaya, Guacamaya Hackers… | hacktivist | — | — | GovernmentCritical infrastructureEnergy: gas turbines | Colombian National PoliceChilean Joint Chiefs of Staff | 0 | 0 | 0.0 | 0.7 | — |
| Guangzhi Cao (Tesla Autopilot source code → XPeng) (INS-CAO-TESLA-XPENG-2021) aka Guangzhi Cao (Tesla Autopilot source code → XPeng), Guangzhi Cao, Cao Guangzhi… → XPeng Motors (XMotors — Apple autonomous beneficiary) | insider | 🇺🇸 US | — | Automotive: autonomous vehiclesSoftware: machine learning | Tesla ⇄5 | 0 | 0 | 0.0 | 0.5 | — |
| HAFNIUM (G0125) aka HAFNIUM, Operation Exchange Marauder, Silk Typhoon… | state | 🇨🇳 CN | MSSilk TyphoonMSHAFNIUMCSMURKY PANDA | Professional, Scientific & Technical ServicesEducational ServicesHealth Care & Social AssistanceOther Services (except Public Administration)Software Publishers+1 more | — | 3 | 66 | 12.9 | — | 2021 |
| HEXANE (G1001) aka HEXANE, Lyceum, Siamesekitten… | state | 🇮🇷 IR | CSChrono KittenMandUNC1530DrgHEXANEKSPLyceum | Oil & Gas ExtractionTelecommunicationsAir Transportation | — | 0 | 52 | 0.0 | — | — |
| Haitao Xiang (Monsanto / Climate Corp Nutrient Optimizer) (INS-XIANG-MONSANTO-2022) aka Haitao Xiang (Monsanto / Climate Corp Nutrient Optimizer), Haitao Xiang… | insider | 🇺🇸 US | — | Agritech: precision agricultureSoftware: machine learning | 0 | 0 | 0.0 | 1.0 | — | |
| Handala Hack Team (HACK-HANDALA) aka Handala Hack Team, Handala, Handala Hacking… | hacktivist | 🇮🇷 IR | — | Critical infrastructureGovernmentDefense | Zerto | 0 | 0 | 0.0 | 0.3 | — |
| Hao Zhang (FBAR / Avago / Skyworks) (INS-ZHANG-FBAR-2020) aka Hao Zhang (FBAR / Avago / Skyworks), Hao Zhang, Tianjin FBAR case… | insider | 🇺🇸 US | — | Semiconductor: RF chip designTelecommunications: mobile RF filters | Avago TechnologiesSkyworks Solutions | 0 | 0 | 0.0 | 1.0 | — |
| Haoyang 'Jack' Yu (Analog Devices / Tricon MMIC) (INS-YU-ADI-2022) aka Haoyang 'Jack' Yu (Analog Devices / Tricon MMIC), Jack Yu, Haoyang Yu… | insider | 🇺🇸 US | — | Semiconductor: monolithic microwave integrated circuitsSemiconductor: RF chip design | Analog Devices | 0 | 0 | 0.0 | 0.5 | — |
| Harold T. Martin III (INS-MARTIN-2017) aka Harold Martin, Harold T. Martin III, Hal Martin… | insider | 🇺🇸 US | — | IntelligenceNational securityCybersecurity: offensive tooling | 0 | 0 | 0.0 | 0.7 | — | |
| He Jianting (UMC / Fujian Jinhua co-defendant) (INS-UMC-JINHUA-HE-2020) aka He Jianting (UMC / Fujian Jinhua co-defendant), J.T. Ho, He Jianting… → Fujian Jinhua Integrated Circuit (DRAM) | insider | 🇹🇼 TW | — | Semiconductor: DRAM memory | Micron ⇄3 | 0 | 0 | 0.0 | 1.0 | — |
| Hector Xavier Monsegur ('Sabu', LulzSec/AntiSec) (HACK-MONSEGUR-SABU) aka Hector Xavier Monsegur ('Sabu', LulzSec/AntiSec), Sabu, Hector Monsegur… | hacktivist | — | — | GovernmentMediaIntelligence: private | 0 | 0 | 0.0 | 0.7 | — | |
| Hesai Group (Velodyne / Ouster LiDAR civil disputes) (COMP-HESAI) aka Hesai Group (Velodyne / Ouster LiDAR civil disputes), Hesai, Hesai Group… | competitor | 🇨🇳 CN | — | Automotive: LiDAR sensorsAutomotive: autonomous vehicles | — | 0 | 0 | 0.0 | — | — |
| Higaisa (G0126) aka Higaisa… | state | 🇰🇷 KR | — | Executive, Legislative & Other General Government SupportWholesale TradePublic Administration | — | 0 | 41 | 0.0 | — | — |
| Hitachi Metals amorphous-alloy leak (JP, 2012) (INS-HITACHI-METALS-2012) aka Hitachi Metals amorphous-alloy leak (JP, 2012), Hitachi Metals JP 2012… | insider | 🇯🇵 JP | — | Metallurgy: amorphous alloysEnergy: transformer cores | Hitachi Metals | 0 | 0 | 0.0 | 0.5 | — |
| Hon Hai / Foxconn (Apple manufacturing-IP civil disputes) (COMP-FOXCONN-APPLE) aka Hon Hai / Foxconn (Apple manufacturing-IP civil disputes), Foxconn, Hon Hai… | competitor | 🇹🇼 TW | — | Electronics: contract manufacturingConsumer electronics: assembly | 0 | 0 | 0.0 | 1.0 | — | |
| Hongjin Tan (Phillips 66 battery R&D) (INS-TAN-PHILLIPS-2019) aka Hongjin Tan (Phillips 66 battery R&D), Hongjin Tan… | insider | 🇺🇸 US | — | Energy: battery R&DSpecialty chemicals: battery materials | Phillips 66 | 0 | 0 | 0.0 | 0.5 | — |
| Huawei Technologies (multiple IP-theft cases) (COMP-HUAWEI) aka Huawei Technologies (multiple IP-theft cases), Huawei, Huawei Technologies… | competitor | 🇨🇳 CN | — | Telecommunications: mobile equipmentSemiconductor: chip design | 0 | 0 | 0.0 | 1.0 | — | |
| Hytera / Nokia / Bosch GmbH engineer civil claims (INS-IPCOM-NOKIA-2014) aka Hytera / Nokia / Bosch GmbH engineer civil claims, IPCom-Nokia German civil… | insider | 🇩🇪 DE | — | Telecommunications: 3G/4G standardsTelecommunications: cellular base stations | 0 | 0 | 0.0 | 1.0 | — | |
| Hytera Communications (Motorola DMR case) (COMP-HYTERA) aka Hytera Communications (Motorola DMR case), Hytera, Hytera Communications… | competitor | 🇨🇳 CN | — | Telecommunications: two-way radioPublic safety: communications | Motorola ⇄1 | 0 | 0 | 0.0 | 0.5 | — |
| Hyundai Mobis ADAS engineer indictment (KR, 2021) (INS-HYUNDAI-MOBIS-2021) aka Hyundai Mobis ADAS engineer indictment (KR, 2021), Hyundai Mobis KR 2021… | insider | 🇰🇷 KR | — | Automotive: autonomous vehiclesAutomotive: ADAS sensors | Hyundai Mobis | 0 | 0 | 0.0 | 0.5 | — |
| INC Ransom (G1032) aka INC Ransom, GOLD IONIC… | criminal | — | SWGOLD IONIC | ManufacturingHealth Care & Social AssistanceEducational ServicesSoftware Publishers | — | 0 | 34 | 0.0 | — | — |
| IQVIA Holdings (Veeva counter-claim defendant) (COMP-IQVIA) aka IQVIA Holdings (Veeva counter-claim defendant), IQVIA, IMS Health… | competitor | 🇺🇸 US | — | Healthcare software: data productsEnterprise software: life sciences CRM | Veeva | 0 | 0 | 0.0 | 0.5 | — |
| ISIS Hacking Division (Cyber Caliphate) (HACK-ISIS-HACKING-DIVISION) aka ISIS Hacking Division (Cyber Caliphate), United Cyber Caliphate, Cyber Caliphate Army… | hacktivist | — | — | GovernmentMediaDefense contractors | — | 0 | 0 | 0.0 | — | — |
| IT Army of Ukraine (HACK-IT-ARMY-UA) aka IT Army of Ukraine, IT Army, Ukraine IT Army… | hacktivist | 🇺🇦 UA | — | GovernmentFinancial servicesMediaTelecommunications | — | 0 | 0 | 0.0 | — | — |
| Inception (G0100) aka Inception, Inception Framework, Cloud Atlas… | state | 🇷🇺 RU | KSPCloud Atlas | — | — | 0 | 34 | 0.0 | — | — |
| Indian Cyber Force (HACK-INDIAN-CYBER-FORCE) aka Indian Cyber Force, ICF… | hacktivist | 🇮🇳 IN | — | GovernmentCritical infrastructure | — | 0 | 0 | 0.0 | — | — |
| IndigoZebra (G0136) aka IndigoZebra… | state | 🇨🇳 CN | — | Executive, Legislative & Other General Government Support | — | 2 | 12 | 6.4 | — | 2026 |
| Indonesian Cyber Army (HACK-INDONESIAN-CYBER-ARMY) aka Indonesian Cyber Army, ICA, Indo Cyber Army… | hacktivist | — | — | GovernmentMedia | — | 0 | 0 | 0.0 | — | — |
| Indra Sistemas (Spanish defense civil IP disputes) (COMP-INDRA-SISTEMAS) aka Indra Sistemas (Spanish defense civil IP disputes), Indra, Indra Sistemas SA… | competitor | 🇪🇸 ES | — | Defense contractorsDefense: radar and electronics | 0 | 0 | 0.0 | 1.0 | — | |
| Indrik Spider (G0119) aka Indrik Spider, Evil Corp, Manatee Tempest… | state | 🇷🇺 RU | MSManatee TempestCSIndrik SpiderMandUNC2165 | Software PublishersCredit Intermediation & Related Activities (Banking) | U.K.’s National Health Service (NHS) | 1 | 47 | 1.2 | 0.5 | 2026 |
| Insta360 (DJI patent counter-suit 2026) (COMP-INSTA360) aka Insta360 (DJI patent counter-suit 2026), Insta360, Arashi Vision… | competitor | 🇨🇳 CN | — | Consumer electronics: dronesConsumer electronics: cameras | DJI | 0 | 0 | 0.0 | 0.5 | — |
| Instacart (Maplebear) — DoorDash trade-secret civil dispute (COMP-INSTACART) aka Instacart (Maplebear) — DoorDash trade-secret civil dispute, Instacart, Maplebear Inc… | competitor | 🇺🇸 US | — | E-commerce: grocery deliverySoftware: logistics | DoorDashShipt | 0 | 0 | 0.0 | 1.0 | — |
| Intel Corp. (Micron 2018-2020 NAND civil counter-claims) (COMP-INTEL-MICRON) aka Intel Corp. (Micron 2018-2020 NAND civil counter-claims), Intel, Intel Corporation… | competitor | 🇺🇸 US | — | Semiconductor: NAND flash memorySemiconductor: memory | Micron ⇄3 | 0 | 0 | 0.0 | 0.5 | — |
| James Liang (Volkswagen Dieselgate engineer) (INS-VW-LIANG-2017) aka James Liang (Volkswagen Dieselgate engineer), James Robert Liang… | insider | 🇩🇪 DE | — | Automotive: emissions softwareAutomotive: vehicle manufacturing | — | 0 | 0 | 0.0 | — | — |
| James Robert Liang (Volkswagen / Dieselgate engineer) (INS-LIANG-VW-2017) aka James Robert Liang (Volkswagen / Dieselgate engineer), James Liang… | insider | 🇩🇪 DE | — | Automotive: vehicle manufacturingAutomotive: emissions control | Volkswagen ⇄1 | 0 | 0 | 0.0 | 0.5 | — |
| Japan Toshiba NAND secondary leak prosecutions (JP, 2018) (INS-JAPAN-TOSHIBA-NAND-2018) aka Japan Toshiba NAND secondary leak prosecutions (JP, 2018), Toshiba NAND 2018 prosecution… | insider | 🇯🇵 JP | — | Semiconductor: NAND flash memorySemiconductor: chip fabrication | Toshiba ⇄1 | 0 | 0 | 0.0 | 0.5 | — |
| Jeremy Hammond (AntiSec / Stratfor breach) (HACK-HAMMOND-ANTISEC) aka Jeremy Hammond (AntiSec / Stratfor breach), Jeremy Hammond, Anarchaos… | hacktivist | — | — | Intelligence: privateGovernmentLaw enforcement | Stratfor ⇄1 | 0 | 0 | 0.0 | 0.3 | — |
| Jerry Chun Shing Lee (former CIA case officer) (INS-LEE-CIA-2019) aka Jerry Chun Shing Lee (former CIA case officer), Jerry Lee, Zhen Cheng Li… | insider | 🇺🇸 US | — | Government: intelligenceDefense: HUMINT tradecraft | CIA ⇄1 | 0 | 0 | 0.0 | 0.5 | — |
| Jizhong Chen (Apple self-driving) (INS-CHEN-APPLE-2019) aka Jizhong Chen (Apple self-driving), Jizhong Chen, Chen Jizhong… | insider | 🇺🇸 US | — | Automotive: autonomous vehiclesSoftware: machine learning | Apple ⇄9 | 0 | 0 | 0.0 | 0.5 | — |
| Joshua Schulte (CIA Vault 7 leak) (INS-SCHULTE-2022) aka Joshua Schulte (CIA Vault 7 leak), Joshua Schulte, Joshua Adam Schulte… | insider | 🇺🇸 US | — | IntelligenceCybersecurity: offensive tooling | — | 0 | 0 | 0.0 | — | — |
| José Ignacio López de Arriortúa (GM → VW) (INS-LOPEZ-1993) aka José Ignacio López de Arriortúa (GM → VW), José Ignacio López de Arriortúa, Inaki Lopez… → Volkswagen AG (López/GM 1993 case) | insider | 🇩🇪 DE | — | Automotive: vehicle manufacturingManufacturing: supply chain | 0 | 0 | 0.0 | 0.5 | — | |
| KAERI VPN intrusion (South Korea, 2021) (INS-KAERI-2021) aka KAERI VPN intrusion (South Korea, 2021), KAERI hack 2021… | insider | 🇰🇷 KR | — | Energy: nuclearResearch: government laboratories | Korea Atomic Energy Research Institute | 0 | 0 | 0.0 | 0.5 | — |
| KAERI researcher Industrial Technology Protection Act case (KR, 2022) (INS-KAERI-INSIDER-2022) aka KAERI researcher Industrial Technology Protection Act case (KR, 2022), KAERI insider KR 2022… | insider | 🇰🇷 KR | — | Nuclear power: utility-scaleNuclear power: SMR | Korea Atomic Energy Research Institute (KAERI) | 0 | 0 | 0.0 | 0.5 | — |
| Karma (IRGC-linked) (HACK-KARMA) aka Karma (IRGC-linked), N3tw0rm, Karma Group… | hacktivist | 🇮🇷 IR | — | Critical infrastructureGovernmentHealthcare | Atraf ⇄1 | 0 | 0 | 0.0 | 0.3 | — |
| Ke3chang (G0004) aka Ke3chang, APT15, Mirage… | state | 🇨🇳 CN | MSNylon TyphoonMSNICKELCSVixen PandaMandAPT15MandKe3chang | Oil & Gas ExtractionExecutive, Legislative & Other General Government SupportNational SecurityInternational AffairsPublic Administration+1 more | — | 1 | 63 | 3.2 | — | 2026 |
| Khalsa Cyber Fauj (HACK-KHALSA-CYBER-FAUJ) aka Khalsa Cyber Fauj, KCF, Khalsa Cyber Force… | hacktivist | — | — | GovernmentReligious institutions | — | 0 | 0 | 0.0 | — | — |
| Kia Corporation (Ford / Hyundai civil disputes) (COMP-KIA-FORD) aka Kia Corporation (Ford / Hyundai civil disputes), Kia, Kia Motors… | competitor | 🇰🇷 KR | — | Automotive: vehicle manufacturingAutomotive: electric vehicles | — | 0 | 0 | 0.0 | — | — |
| Kia EV-platform engineer indictment (KR, 2024) (INS-KIA-EV-2024) aka Kia EV-platform engineer indictment (KR, 2024), Kia EV KR 2024… | insider | 🇰🇷 KR | — | Automotive: EV powertrainAutomotive: vehicle manufacturing | Kia | 0 | 0 | 0.0 | 0.5 | — |
| KillNet (HACK-KILLNET) aka KillNet… | hacktivist | 🇷🇺 RU | — | GovernmentHealthcareFinancial servicesTransportation: airports | — | 0 | 0 | 0.0 | — | — |
| Killmilk (KillNet founder persona) (HACK-KILLMILK) aka Killmilk (KillNet founder persona), Killmilk… | hacktivist | 🇷🇺 RU | — | GovernmentTransportationFinancial services | — | 0 | 0 | 0.0 | — | — |
| Kimsuky (G0094) aka Kimsuky, Black Banshee, Velvet Chollima… | state | 🇰🇵 KP | MSEmerald SleetCSVelvet ChollimaMandAPT43CISAKimsuky | Executive, Legislative & Other General Government SupportEducational ServicesElectric Power Generation, Transmission & DistributionManufacturingNational Security+2 more | Korea Hydro & Nuclear Power CoMinistry of UnificationUnited Nations | 3 | 171 | 10.6 | 0.4 | 2026 |
| Klarna Bank (Pagaya BNPL underwriting suit 2026) (COMP-KLARNA-PAGAYA) aka Klarna Bank (Pagaya BNPL underwriting suit 2026), Klarna, Klarna Bank AB… | competitor | 🇸🇪 SE | — | Financial services: BNPLSoftware: credit underwriting | Pagaya | 0 | 0 | 0.0 | 0.5 | — |
| Klaus Pflugbeil + Yilong Shao (Tesla battery) (INS-WANG-TESLA-2023) aka Klaus Pflugbeil + Yilong Shao (Tesla battery), Klaus Pflugbeil, Yilong Shao… | insider | 🇺🇸 US | — | Automotive: EV batteriesIndustrial equipment: battery assembly | 0 | 0 | 0.0 | 1.0 | — | |
| Klaus-Joachim Gebauer civil action (Volkswagen bribery) (INS-LOPEZ-BGH-2007) aka Klaus-Joachim Gebauer civil action (Volkswagen bribery), Gebauer VW affair, Volkswagen labour-relations scandal… | insider | 🇩🇪 DE | — | Automotive: vehicle manufacturingIndustrial: HR & labour relations | Volkswagen ⇄1 | 0 | 0 | 0.0 | 0.5 | — |
| Kun Shan 'Joey' Chun (former FBI technician) (INS-CHUN-FBI-2017) aka Kun Shan 'Joey' Chun (former FBI technician), Joey Chun, Kun Shan Chun… | insider | 🇺🇸 US | — | Government: federal law enforcementDefense: surveillance technology | FBI ⇄1 | 0 | 0 | 0.0 | 0.5 | — |
| L'Oréal SA (Olaplex 2019 trade-secret + patent verdict) (COMP-OLAPLEX-LOREAL) aka L'Oréal SA (Olaplex 2019 trade-secret + patent verdict), L'Oréal, Loreal… | competitor | 🇫🇷 FR | — | Consumer products: hair careSpecialty chemicals: cosmetics | Olaplex | 0 | 0 | 0.0 | 0.5 | — |
| LAPSUS$ (G1004) aka LAPSUS$, DEV-0537, Strawberry Tempest… | hacktivist | — | MSStrawberry TempestCSSLIPPY SPIDERMandUNC3661 | Public AdministrationManufacturingEducational ServicesUtilitiesHealth Care & Social Assistance+3 more | 0 | 62 | 0.0 | 0.5 | — | |
| LG Display senior engineer (OLED transfer to BOE 2020) (INS-LG-DISPLAY-2020) aka LG Display senior engineer (OLED transfer to BOE 2020), LG Display OLED leak 2020… → COMP-BOE | insider | 🇰🇷 KR | — | Electronics: OLED displaysConsumer electronics | LG Display ⇄1 | 0 | 0 | 0.0 | 0.5 | — |
| LG Energy Solution (SK Innovation 2019-2021 ITC $1.8B) (COMP-LG-ENERGY-SK) aka LG Energy Solution (SK Innovation 2019-2021 ITC $1.8B), LG Energy Solution, LG Chem… | competitor | 🇰🇷 KR | — | Automotive: EV batteriesAutomotive: electric vehicles | — | 0 | 0 | 0.0 | — | — |
| Lazarus Group (G0032) aka Lazarus Group, Labyrinth Chollima, HIDDEN COBRA… | state | 🇰🇵 KP | MSDiamond SleetMSZINCMSCitrine SleetMSSapphire SleetMSMoonstone SleetMSOnyx Sleet | Utilities | Sony Pictures EntertainmentFEIB | 12 | 128 | 36.2 | 2.0 | 2022 |
| LazyScripter (G0140) aka LazyScripter… | unknown | — | — | Air Transportation | — | 0 | 30 | 0.0 | — | — |
| Leafminer (G0077) aka Leafminer, Raspite… | unknown | — | DrgRaspite | Public Administration | — | 0 | 26 | 0.0 | — | — |
| Leonardo Finmeccanica defence-data theft (IT, 2017) (INS-LEONARDO-2017) aka Leonardo Finmeccanica defence-data theft (IT, 2017), Leonardo insider Naples 2017… | insider | 🇮🇹 IT | — | Defense: military electronicsDefense: simulation systems | Leonardo Finmeccanica | 0 | 0 | 0.0 | 0.5 | — |
| Leonardo S.p.A. (BAE / Lockheed civil defense-IP disputes) (COMP-LEONARDO-BAE) aka Leonardo S.p.A. (BAE / Lockheed civil defense-IP disputes), Leonardo, Leonardo SpA… | competitor | 🇮🇹 IT | — | Defense: military aircraftDefense contractors | 0 | 0 | 0.0 | 1.0 | — | |
| Leviathan (G0065) aka Leviathan, MUDCARP, Kryptonite Panda… | state | 🇨🇳 CN | MSGingham TyphoonCSKryptonite PandaMandTEMP.JumperMandAPT40MandTEMP.PeriscopeCISALeviathan | Educational ServicesAerospace Product & Parts ManufacturingMedical Equipment & SuppliesNational SecurityPublic Administration+5 more | — | 3 | 73 | 5.7 | — | 2026 |
| Linwei 'Leon' Ding (Google AI / TPU architecture) (INS-DING-GOOGLE-2024) aka Linwei 'Leon' Ding (Google AI / TPU architecture), Leon Ding, Linwei Ding… | insider | 🇺🇸 US | — | Software: machine learningSemiconductor: AI accelerator architecture | Google ⇄2 | 0 | 0 | 0.0 | 0.5 | — |
| Liu Ruopeng (Duke → Kuang-Chi metamaterials) (INS-LIU-RUOPENG-2010) aka Liu Ruopeng (Duke → Kuang-Chi metamaterials), Liu Ruopeng, Ruopeng Liu… | insider | 🇺🇸 US | — | Academic research: metamaterialsAerospace: radar/stealth | Duke | 0 | 0 | 0.0 | 0.5 | — |
| Lizard Squad (HACK-LIZARD-SQUAD) aka Lizard Squad… | hacktivist | — | — | Entertainment: gaming servicesOnline services | 0 | 0 | 0.0 | 2.0 | — | |
| Lotus Blossom (G0030) aka Lotus Blossom, DRAGONFISH, Spring Dragon… | state | 🇨🇳 CN | MSRaspberry TyphoonCSLOTUS PANDA | Public AdministrationSoftware Publishers | — | 1 | 27 | 3.6 | — | 2022 |
| Lucid Motors (Tesla engineer-recruitment suits) (COMP-LUCID-TESLA) aka Lucid Motors (Tesla engineer-recruitment suits), Lucid, Lucid Group… | competitor | 🇺🇸 US | — | Automotive: electric vehiclesAutomotive: EV powertrain | — | 0 | 0 | 0.0 | — | — |
| Lufthansa Technik (Boeing IP dispute 2018-2020) (COMP-LUFTHANSA-TECHNIK) aka Lufthansa Technik (Boeing IP dispute 2018-2020), Lufthansa Technik, LHT… | competitor | 🇩🇪 DE | — | Aerospace: MRO servicesAerospace: engine maintenance | — | 0 | 0 | 0.0 | — | — |
| Lulz Boat (LulzSec splinter) (HACK-LULZ-BOAT) aka Lulz Boat (LulzSec splinter), The Lulz Boat, LulzSec Reborn… | hacktivist | — | — | GovernmentMediaEntertainment: gaming services | — | 0 | 0 | 0.0 | — | — |
| LulzSec (HACK-LULZSEC) aka LulzSec, Lulz Security… | hacktivist | — | — | Entertainment: gamingDefense contractorsGovernmentMedia | 0 | 0 | 0.0 | 1.2 | — | |
| LulzSec India (HACK-LULZSEC-INDIA) aka LulzSec India, LulzSecIndia… | hacktivist | — | — | GovernmentTelecommunications | TRAIDepartment of Telecommunications | 0 | 0 | 0.0 | 1.0 | — |
| LulzSec Peru (HACK-LULZSEC-PERU) aka LulzSec Peru, LulzSecPeru… | hacktivist | — | — | GovernmentMedia | — | 0 | 0 | 0.0 | — | — |
| LuminousMoth (G1014) aka LuminousMoth, MUSTANG PANDA, BRONZE PRESIDENT… | state | 🇨🇳 CN | MSTwill TyphoonCSMUSTANG PANDAMandTEMP.HEXKSPLuminousMoth | Executive, Legislative & Other General Government SupportUtilitiesPublic Administration | — | 0 | 42 | 0.0 | — | — |
| MTK / Realtek engineer recruitment ring indictment (TW, 2023) (INS-TW-IC-DESIGN-2023) aka MTK / Realtek engineer recruitment ring indictment (TW, 2023), Taiwan Realtek 2023 ring… | insider | 🇹🇼 TW | — | Semiconductor: chip designSemiconductor: connectivity ICs | 0 | 0 | 0.0 | 1.0 | — | |
| Machete (G0095) aka Machete, APT-C-43, El Machete… | state | — | — | National SecurityTelecommunicationsElectric Power Generation, Transmission & DistributionPublic Administration | — | 0 | 17 | 0.0 | — | — |
| Magic Hound (G0059) aka Magic Hound, TA453, COBALT ILLUSION… | state | 🇮🇷 IR | MSMint SandstormMSPhosphorusCSCharming KittenMandAPT35SWCOBALT ILLUSION | National SecurityEducational ServicesInformationHealth Care & Social AssistanceBroadcasting+1 more | World Health Organization (WHO) | 0 | 109 | 0.0 | 0.2 | — |
| Malteiro (G1026) aka Malteiro… | unknown | — | — | Credit Intermediation & Related Activities (Banking)Software Publishers | — | 0 | 19 | 0.0 | — | — |
| Maui ransomware (MISP-995c3772) aka Maui ransomware… | criminal | — | — | — | — | 11 | 0 | 31.9 | — | 2022 |
| Mazda EV-component engineer disclosure (JP, 2020) (INS-MAZDA-EV-2020) aka Mazda EV-component engineer disclosure (JP, 2020), Mazda JP 2020 EV… | insider | 🇯🇵 JP | — | Automotive: EV powertrainAutomotive: vehicle manufacturing | Mazda | 0 | 0 | 0.0 | 0.5 | — |
| MediaTek Inc. (Qualcomm civil patent + non-compete disputes) (COMP-MEDIATEK-QUALCOMM) aka MediaTek Inc. (Qualcomm civil patent + non-compete disputes), MediaTek, MediaTek Inc… | competitor | 🇹🇼 TW | — | Semiconductor: mobile SoCsSemiconductor: design IP | — | 0 | 0 | 0.0 | — | — |
| MediaTek ex-engineers (Taiwan Trade Secrets Act, 2020) (INS-TAIWAN-MEDIATEK-2020) aka MediaTek ex-engineers (Taiwan Trade Secrets Act, 2020), MediaTek trade-secret case 2020… | insider | 🇹🇼 TW | — | Semiconductor: mobile SoCsSemiconductor: design IP | MediaTek ⇄2 | 0 | 0 | 0.0 | 0.5 | — |
| MediaTek senior engineer indictment (TW, 2022) (INS-MEDIATEK-2022) aka MediaTek senior engineer indictment (TW, 2022), MediaTek TW 2022… | insider | 🇹🇼 TW | — | Semiconductor: chip designSemiconductor: RF chip design | MediaTek ⇄2 | 0 | 0 | 0.0 | 0.5 | — |
| Medusa Group (G1051) aka Medusa Group… | unknown | — | CISAMedusa Group | Publishing Industries (Including Software)Software Publishers | — | 0 | 82 | 0.0 | — | — |
| Megvii Technology (Face++ — US Entity-Listed) (COMP-MEGVII) aka Megvii Technology (Face++ — US Entity-Listed), Megvii, Face++… | competitor | 🇨🇳 CN | — | Software: computer visionSurveillance technology | — | 0 | 0 | 0.0 | — | — |
| Mercedes-Benz / Daimler interior-design civil claim (DE 2019) (INS-DAIMLER-BENZ-2019) aka Mercedes-Benz / Daimler interior-design civil claim (DE 2019), Daimler interior IP 2019… | insider | 🇩🇪 DE | — | Automotive: vehicle interiorsAutomotive: HMI design | Daimler ⇄1 | 0 | 0 | 0.0 | 0.5 | — |
| Mercedes-Benz Group (NIO / BYD engineer-recruitment disputes) (COMP-MERCEDES-NIO) aka Mercedes-Benz Group (NIO / BYD engineer-recruitment disputes), Mercedes-Benz, Daimler AG… | competitor | 🇩🇪 DE | — | Automotive: vehicle manufacturingAutomotive: electric vehicles | — | 0 | 0 | 0.0 | — | — |
| Meta Platforms (Snap discovery dispute over rival documents) (COMP-META-SNAP-ANTITRUST) aka Meta Platforms (Snap discovery dispute over rival documents), Meta, Facebook… | competitor | 🇺🇸 US | — | Technology platforms: social mediaAdvertising technology | — | 0 | 0 | 0.0 | — | — |
| Metador (G1013) aka Metador… | unknown | — | — | TelecommunicationsEducational Services | — | 0 | 15 | 0.0 | — | — |
| Michael Woodford (Olympus whistleblower / accounting fraud) (INS-OLYMPUS-WOODFORD-2011) aka Michael Woodford (Olympus whistleblower / accounting fraud), Michael Woodford, Olympus Woodford… | insider | 🇬🇧 GB | — | Medical devices: endoscopyElectronics: imaging equipment | Olympus Corporation | 0 | 0 | 0.0 | 0.5 | — |
| Microsoft Corp. (Salesforce / Slack engineer recruitment claims) (COMP-MICROSOFT-SALESFORCE) aka Microsoft Corp. (Salesforce / Slack engineer recruitment claims), Microsoft, Microsoft Corporation… | competitor | 🇺🇸 US | — | Enterprise software: collaborationCloud computing: SaaS | — | 0 | 0 | 0.0 | — | — |
| Millennium Partners (Renaissance Technologies trade-secret 2003) (COMP-RENTECH-MILLENNIUM) aka Millennium Partners (Renaissance Technologies trade-secret 2003), Millennium, Millennium Management… | competitor | 🇺🇸 US | — | Financial services: hedge fundsSoftware: trading systems | Renaissance Technologies | 0 | 0 | 0.0 | 0.5 | — |
| MirrorFace (G1054) aka MirrorFace, Earth Kasha… | state | 🇨🇳 CN | — | Publishing Industries (Including Software)National SecurityInternational AffairsFinance & InsuranceManufacturing+4 more | — | 2 | 65 | 7.2 | — | 2023 |
| Mitsubishi Electric engineer (Tianma transfer 2020) (INS-MITSUBISHI-ELECTRIC-2020) aka Mitsubishi Electric engineer (Tianma transfer 2020), Mitsubishi Electric LCD leak 2020… → Tianma Microelectronics | insider | 🇯🇵 JP | — | Electronics: TFT LCD displaysConsumer electronics | Mitsubishi Electric | 0 | 0 | 0.0 | 0.5 | — |
| Mo Hailong (Pioneer corn seeds) (INS-MO-2016) aka Mo Hailong (Pioneer corn seeds), Mo Hailong, Robert Mo… → DBN Group / Beijing Dabeinong Technology | insider | 🇺🇸 US | — | Agritech: seed geneticsAgriculture: corn | 0 | 0 | 0.0 | 1.0 | — | |
| Mo Yun + co-defendants (Pioneer corn parallel case) (INS-LIU-LOCKHEED-2014) aka Mo Yun + co-defendants (Pioneer corn parallel case), Mo Yun, Yun Mo… | insider | 🇺🇸 US | — | Agritech: seed geneticsAgriculture: corn | Pioneer | 0 | 0 | 0.0 | 0.5 | — |
| Moafee (G0002) aka Moafee… | unknown | — | — | — | — | 0 | 2 | 0.0 | — | — |
| Mofang (G0103) aka Mofang, Superman, BRONZE WALKER… | state | 🇨🇳 CN | — | National SecurityMotor Vehicle ManufacturingUtilitiesPublic Administration | — | 0 | 9 | 0.0 | — | — |
| Molerats (G0021) aka Molerats, Operation Molerats, Gaza Cybergang… | state | 🌍 PS | CSExtreme JackalMandMoleratsMandOperation MoleratsKSPMolerats | — | — | 0 | 25 | 0.0 | — | — |
| Molerats (hacktivist persona) (HACK-MOLERATS-HACKTIVIST) aka Molerats (hacktivist persona), TA402 public face, Extreme Jackal… | hacktivist | — | — | GovernmentMedia | — | 0 | 0 | 0.0 | — | — |
| Moonstone Sleet (G1036) aka Moonstone Sleet, Storm-1789… | state | 🇰🇵 KP | MSMoonstone Sleet | — | — | 0 | 42 | 0.0 | — | — |
| Moses Staff (G1009) aka Moses Staff, DEV-0500, Marigold Sandstorm… | hacktivist | 🇮🇷 IR | MSMarigold SandstormCSVENGEFUL KITTEN | Public AdministrationFinance & InsuranceTransportation & WarehousingMining, Quarrying, Oil & Gas ExtractionManufacturing+1 more | — | 0 | 20 | 0.0 | — | — |
| MoustachedBouncer (G1019) aka MoustachedBouncer… | state | 🇧🇾 BY | — | International Affairs | — | 0 | 11 | 0.0 | — | — |
| Mr Hamza (Algerian hacktivist channel) (HACK-MR-HAMZA) aka Mr Hamza (Algerian hacktivist channel), Mr. Hamza, Mr Hamza… | hacktivist | 🌍 DZ | — | GovernmentDefense contractorsAerospace | 0 | 0 | 0.0 | 0.7 | — | |
| MuddyWater (G0069) aka MuddyWater, Earth Vetala, MERCURY… | state | 🇮🇷 IR | MSMango SandstormCSStatic KittenMandTEMP.ZagrosMandMuddyWaterCscoMuddyWater | TelecommunicationsExecutive, Legislative & Other General Government SupportFinance & InsuranceNational SecurityOil & Gas Extraction+2 more | — | 2 | 94 | 7.0 | — | 2026 |
| Mustang Panda (G0129) aka Mustang Panda, TA416, RedDelta… | state-contractor | 🇨🇳 CN | MSTWILL TYPHOONCSMustang PandaMandUNC6384MandTEMP.HexSWBRONZE PRESIDENTCscoMustang Panda | Executive, Legislative & Other General Government SupportInternational AffairsProfessional, Scientific & Technical ServicesOther Services (except Public Administration)Public Administration | — | 2 | 114 | 3.9 | — | 2026 |
| Mustard Tempest (G1020) aka Mustard Tempest, DEV-0206, TA569… | unknown | — | MSMustard TempestMandUNC1543SWGOLD PRELUDE | Software Publishers | — | 0 | 18 | 0.0 | — | — |
| Mysterious Team Bangladesh (HACK-MYSTERIOUS-TEAM-BD) aka Mysterious Team Bangladesh, Mysterious Team, MTB… | hacktivist | 🌍 BD | — | GovernmentEducationFinancial services | — | 0 | 0 | 0.0 | — | — |
| NEODYMIUM (G0055) aka NEODYMIUM, G0055… | unknown | — | MSNEODYMIUM | — | — | 12 | 0 | 42.8 | — | 2022 |
| NIO Inc. (alleged Tesla / Apple engineer beneficiary) (COMP-NIO) aka NIO Inc. (alleged Tesla / Apple engineer beneficiary), NIO, NIO Inc… | competitor | 🇨🇳 CN | — | Automotive: electric vehiclesAutomotive: autonomous vehicles | 0 | 0 | 0.0 | 1.5 | — | |
| NVIDIA Corp. (Valeo source-code 2023 verdict) (COMP-NVIDIA-VALEO) aka NVIDIA Corp. (Valeo source-code 2023 verdict), NVIDIA, NVIDIA Corporation… | competitor | 🇺🇸 US | — | Semiconductor: AI acceleratorsAutomotive: autonomous vehicles | Valeo | 0 | 0 | 0.0 | 0.5 | — |
| NXP Semiconductors (Chimera intrusion, 2017-2020) (INS-NXP-CHIMERA-2021) aka NXP Semiconductors (Chimera intrusion, 2017-2020), NXP Chimera… | insider | 🇳🇱 NL | — | Semiconductor: automotive chipsSemiconductor: design IP | NXP | 0 | 0 | 0.0 | 0.5 | — |
| Naikon (G0019) aka Naikon, PLA Unit 78020, OVERRIDE PANDA… | state | 🇨🇳 CN | CSOVERRIDE PANDA | Executive, Legislative & Other General Government SupportNational SecurityInternational AffairsPublic Administration | United Nations Development Programme (UNDP)Association of Southeast Asian Nations (ASEAN) | 1 | 23 | 2.7 | 0.5 | 2022 |
| Nestlé SA (food-technology civil non-compete disputes) (COMP-NESTLE-FOOD-TECH) aka Nestlé SA (food-technology civil non-compete disputes), Nestle, Nestlé… | competitor | 🇨🇭 CH | — | Food and beverage: technologyConsumer products: nutrition | MondelezUnileverDanone+1 more | 0 | 0 | 0.0 | 2.0 | — |
| Network Battalion 65 (NB65) (HACK-NB65) aka Network Battalion 65 (NB65), NB65, Network Battalion 65… | hacktivist | — | — | GovernmentCritical infrastructureBanking | — | 0 | 0 | 0.0 | — | — |
| Nigel Stepney + Mike Coughlan (Ferrari → McLaren 'Spygate') (INS-STEPNEY-FERRARI-2007) aka Nigel Stepney + Mike Coughlan (Ferrari → McLaren 'Spygate'), Stepneygate, Spygate F1 2007… | insider | 🇮🇹 IT | — | Motorsport: Formula One aerodynamicsAutomotive: vehicle dynamics | Ferrari | 0 | 0 | 0.0 | 0.5 | — |
| Nippon Steel grain-oriented steel civil case (JP, 2012) (INS-JP-NIPPONSTEEL-2012) aka Nippon Steel grain-oriented steel civil case (JP, 2012), Nippon Steel Posco JP 2012… | insider | 🇯🇵 JP | — | Metallurgy: electrical steelEnergy: transformer cores | Nippon Steel | 0 | 0 | 0.0 | 0.5 | — |
| Nissan / Mitsui materials-engineer civil case (JP, 2018) (INS-NISSAN-MITSUI-2018) aka Nissan / Mitsui materials-engineer civil case (JP, 2018), Nissan Mitsui JP 2018… | insider | 🇯🇵 JP | — | Automotive: EV batteriesSpecialty chemicals: cathode materials | NissanMitsui Mining & Smelting | 0 | 0 | 0.0 | 1.0 | — |
| NoName057(16) (HACK-NONAME05716) aka NoName057(16), NoName05716, NoName… | hacktivist | 🇷🇺 RU | — | GovernmentCritical infrastructureTransportationFinancial services | — | 0 | 0 | 0.0 | — | — |
| Nokia (Huawei engineer-recruitment dispute 2007) (COMP-NOKIA-HUAWEI-2007) aka Nokia (Huawei engineer-recruitment dispute 2007), Nokia, Nokia Networks… | competitor | 🇫🇮 FI | — | Telecommunications: 3G/4G networksTelecommunications: base stations | Nokia ⇄2 | 0 | 0 | 0.0 | 0.5 | — |
| Nomadic Octopus (G0133) aka Nomadic Octopus, DustSquad… | state | 🇷🇺 RU | — | Executive, Legislative & Other General Government SupportInternational Affairs | — | 1 | 11 | 3.6 | — | 2026 |
| OPPO (Nokia / InterDigital SEP defendants 2021-2023) (COMP-OPPO-NOKIA) aka OPPO (Nokia / InterDigital SEP defendants 2021-2023), OPPO, Guangdong Oppo Mobile… | competitor | 🇨🇳 CN | — | Consumer electronics: smartphonesTelecommunications: mobile | — | 0 | 0 | 0.0 | — | — |
| OilRig (G0049) aka OilRig, COBALT GYPSY, IRN2… | state | 🇮🇷 IR | MSHazel SandstormCSHelix KittenCSTwisted KittenMandAPT34SWCOBALT GYPSY | Finance & InsurancePublic AdministrationOil & Gas ExtractionChemical ManufacturingTelecommunications+1 more | — | 1 | 103 | 1.2 | — | 2026 |
| OpChile (HACK-OP-CHILE) aka OpChile, Operation Chile, Pirate Bay Chile… | hacktivist | — | — | GovernmentBanking | Carabineros | 0 | 0 | 0.0 | 0.5 | — |
| OpFerguson (HACK-OP-FERGUSON) aka OpFerguson, Operation Ferguson, Anonymous Ferguson… | hacktivist | — | — | Law enforcementGovernment: stateGovernment | St. Louis County | 0 | 0 | 0.0 | 0.3 | — |
| OpISIS (HACK-OP-ISIS) aka OpISIS, Operation ISIS, Anonymous OpParis… | hacktivist | — | — | Online servicesMediaReligious institutions | Islamic State | 0 | 0 | 0.0 | 0.3 | — |
| OpIcarus (HACK-OP-ICARUS) aka OpIcarus, Operation Icarus… | hacktivist | — | — | BankingFinancial servicesStock exchanges | New York Stock Exchange | 0 | 0 | 0.0 | 0.3 | — |
| OpIsrael (annual Anonymous-aligned operation) (HACK-OPISRAEL) aka OpIsrael (annual Anonymous-aligned operation), OpIsrael, #OpIsrael… | hacktivist | — | — | GovernmentFinancial servicesCritical infrastructureUtilities | — | 0 | 0 | 0.0 | — | — |
| OpJerusalem (HACK-OPJERUSALEM) aka OpJerusalem, OpJerusalem campaign… | hacktivist | — | — | GovernmentOnline servicesMedia | — | 0 | 0 | 0.0 | — | — |
| OpKKK (HACK-OP-KKK) aka OpKKK, Operation KKK, HoodsOff… | hacktivist | — | — | Online servicesGovernment | 0 | 0 | 0.0 | 1.0 | — | |
| OpLastResort (HACK-OP-LAST-RESORT) aka OpLastResort, Operation Last Resort… | hacktivist | — | — | Government: federalGovernment | US Sentencing CommissionUS Department of Justice | 0 | 0 | 0.0 | 1.0 | — |
| OpMexico (HACK-OP-MEXICO) aka OpMexico, Operation Mexico, Anonymous Mexico… | hacktivist | — | — | GovernmentLaw enforcement | — | 0 | 0 | 0.0 | — | — |
| OpMyanmar (HACK-OP-MYANMAR) aka OpMyanmar, Anonymous Myanmar, Myanmar Hackers… | hacktivist | — | — | GovernmentTelecommunicationsBanking | — | 0 | 0 | 0.0 | — | — |
| OpOlympicHoax (HACK-OP-OLYMPIC-HOAX) aka OpOlympicHoax, OpOlympics… | hacktivist | — | — | GovernmentCritical infrastructure | — | 0 | 0 | 0.0 | — | — |
| OpPetrol / Cutting Sword of Justice (HACK-OP-SAUDI-ARAMCO) aka OpPetrol / Cutting Sword of Justice, Cutting Sword of Justice, OpPetrol… | hacktivist | — | — | Energy: gas turbinesCritical infrastructure | Saudi Aramco | 0 | 0 | 0.0 | 0.5 | — |
| OpSaudi (HACK-OP-OPSAUDI) aka OpSaudi, Operation Saudi, Saudi Cyber Army (anti-)… | hacktivist | — | — | GovernmentEnergy: gas turbines | — | 0 | 0 | 0.0 | — | — |
| OpWhiteRose (HACK-OP-WHITEROSE) aka OpWhiteRose, Operation White Rose… | hacktivist | — | — | GovernmentGovernment: federal | — | 0 | 0 | 0.0 | — | — |
| OpenAI (Google / DeepMind researcher-defection civil claims) (COMP-OPENAI-GOOGLE-DEEPMIND) aka OpenAI (Google / DeepMind researcher-defection civil claims), OpenAI, OpenAI LP… | competitor | 🇺🇸 US | — | Software: artificial intelligenceSoftware: machine learning | AnthropicGoogle Brain / DeepMind | 0 | 0 | 0.0 | 1.0 | — |
| Orangeworm (G0071) aka Orangeworm… | unknown | — | — | Health Care & Social AssistanceSoftware Publishers | — | 0 | 4 | 0.0 | — | — |
| PLATINUM (G0068) aka PLATINUM, TwoForOne, G0068… | unknown | — | MSPLATINUM | Executive, Legislative & Other General Government Support | — | 0 | 15 | 0.0 | — | — |
| POLONIUM (G1005) aka POLONIUM, Plaid Rain, UNC4453… | state | 🌍 LB | MSPlaid RainMSPOLONIUMCSINCENDIARY JACKALMandUNC4453 | ManufacturingInformationNational Security | — | 0 | 11 | 0.0 | — | — |
| PROMETHIUM (G0056) aka PROMETHIUM, StrongPity, G0056… | state | 🇹🇷 TR | CscoPROMETHIUM | — | — | 12 | 19 | 42.8 | — | 2022 |
| Pakistan Cyber Army (HACK-PAKISTAN-CYBER-ARMY) aka Pakistan Cyber Army, PCA, Pak Cyber Army… | hacktivist | 🇵🇰 PK | — | GovernmentDefense contractorsTelecommunications | CBINSGIndian Army | 0 | 0 | 0.0 | 1.0 | — |
| Palantir Technologies (i2 Group trade-secret 2010-2013) (COMP-PALANTIR) aka Palantir Technologies (i2 Group trade-secret 2010-2013), Palantir, Palantir Technologies Inc… | competitor | 🇺🇸 US | — | Software: intelligence analyticsDefense contractors | i2 Inc | 0 | 0 | 0.0 | 0.5 | — |
| Pangang Group (TiO2 chloride-route beneficiary) (COMP-PANGANG) aka Pangang Group (TiO2 chloride-route beneficiary), Pangang, Pangang Group… | competitor | 🇨🇳 CN | — | Specialty chemicals: titanium dioxideMetals: state-owned | — | 0 | 0 | 0.0 | — | — |
| Patchwork (G0040) aka Patchwork, Hangover Group, Dropping Elephant… | state | 🇮🇳 IN | CSQUILTED TIGERCSVICEROY TIGER | Executive, Legislative & Other General Government SupportProfessional, Scientific & Technical ServicesOther Services (except Public Administration)International AffairsPublic Administration | — | 0 | 63 | 0.0 | — | — |
| Pay2Key (HACK-PAY2KEY) aka Pay2Key, Pay2Key.Ransom… | hacktivist | 🇮🇷 IR | — | Technology platformsDefense contractorsFinancial services | — | 0 | 0 | 0.0 | — | — |
| Pegatron Corp. (Apple / Foxconn civil cross-disputes) (COMP-PEGATRON) aka Pegatron Corp. (Apple / Foxconn civil cross-disputes), Pegatron, Pegatron Corporation… | competitor | 🇹🇼 TW | — | Electronics: contract manufacturingConsumer electronics: assembly | — | 0 | 0 | 0.0 | — | — |
| Phantom Squad (HACK-PHANTOM-SQUAD) aka Phantom Squad, PhantomSquad… | hacktivist | — | — | Entertainment: gaming servicesOnline services | 0 | 0 | 0.0 | 1.5 | — | |
| Philips solar-display employee civil action (NL, 2014) (INS-PHILIPS-SOLAR-2014) aka Philips solar-display employee civil action (NL, 2014), Philips Dutch civil trade secret 2014… | insider | 🇳🇱 NL | — | Electronics: display panelsEnergy: solar PV | Philips | 0 | 0 | 0.0 | 0.5 | — |
| Pinterest (Facebook / Twitter civil non-compete claims) (COMP-PINTEREST-FACEBOOK) aka Pinterest (Facebook / Twitter civil non-compete claims), Pinterest, Pinterest Inc… | competitor | 🇺🇸 US | — | Technology platforms: social mediaAdvertising technology | 0 | 0 | 0.0 | 1.0 | — | |
| Pirelli (Continental tire-pattern dispute) (COMP-PIRELLI-CONTI-2013) aka Pirelli (Continental tire-pattern dispute), Pirelli, Pirelli & C SpA… | competitor | 🇮🇹 IT | — | Automotive: tiresManufacturing: rubber compounds | 0 | 0 | 0.0 | 1.5 | — | |
| PittyTiger (G0011) aka PittyTiger, APT24, PITTY PANDA… | state | 🇨🇳 CN | CSPITTY PANDAMandAPT24MandTemp.Pittytiger | — | — | 0 | 3 | 0.0 | — | — |
| Play (G1040) aka Play… | criminal | — | CISAPlay | UtilitiesInformationHealth Care & Social AssistancePublic AdministrationSoftware Publishers+1 more | — | 0 | 35 | 0.0 | — | — |
| Pony.ai (alleged Waymo / Apple engineer beneficiary) (COMP-PONY-AI) aka Pony.ai (alleged Waymo / Apple engineer beneficiary), Pony.ai, Pony AI Inc… | competitor | 🇨🇳 CN | — | Automotive: autonomous vehiclesSoftware: machine learning | 0 | 0 | 0.0 | 1.5 | — | |
| Poseidon Group (G0033) aka Poseidon Group, G0033… | state | 🇧🇷 BR | KSPPoseidon Group | — | — | 0 | 11 | 0.0 | — | — |
| Predatory Sparrow (HACK-PREDATORY-SPARROW) aka Predatory Sparrow, Gonjeshke Darande, Indra… | hacktivist | — | — | Critical infrastructure: railCritical infrastructure: steelCritical infrastructure: fuel distributionGovernment | — | 0 | 0 | 0.0 | — | — |
| Project Chanology (HACK-PROJECT-CHANOLOGY) aka Project Chanology, Chanology, OpChanology… | hacktivist | — | — | Religious institutionsOnline services | Church of Scientology | 0 | 0 | 0.0 | 0.5 | — |
| Putter Panda (G0024) aka Putter Panda, APT2, MSUpdater… | state | 🇨🇳 CN | CSPutter PandaMandAPT2 | — | — | 0 | 7 | 0.0 | — | — |
| Qualtrics (Medallia trade-secret civil claim 2019) (COMP-MEDALLIA-QUALTRICS) aka Qualtrics (Medallia trade-secret civil claim 2019), Qualtrics, Qualtrics International Inc… | competitor | 🇺🇸 US | — | Enterprise software: customer experienceSaaS | Medallia | 0 | 0 | 0.0 | 0.5 | — |
| Quanergy Systems (Velodyne LiDAR 2016 cross-suits) (COMP-QUANERGY-VELODYNE) aka Quanergy Systems (Velodyne LiDAR 2016 cross-suits), Quanergy, Quanergy Systems Inc… | competitor | 🇺🇸 US | — | Automotive: LiDAR sensorsAutomotive: autonomous vehicles | — | 0 | 0 | 0.0 | — | — |
| RTM (G0048) aka RTM, G0048… | unknown | — | — | Credit Intermediation & Related Activities (Banking)Software Publishers | — | 0 | 13 | 0.0 | — | — |
| RaidForums / BreachForums hacktivist ecosystem (HACK-RBN-DEFACEMENT-CREW) aka RaidForums / BreachForums hacktivist ecosystem, RaidForums, BreachForums… | hacktivist | 🇺🇸 US | — | Government: federalLaw enforcementHealthcareFinancial servicesTechnology platforms+1 more | FBI ⇄1 | 0 | 0 | 0.0 | 0.2 | — |
| RaidForums staff (HACK-RAIDFORUMS-STAFF) aka RaidForums staff, Omnipotent (RaidForums founder)… | hacktivist | — | — | Technology platformsGovernmentFinancial services | — | 0 | 0 | 0.0 | — | — |
| Rancor (G0075) aka Rancor, Rancor group, G0075… | state | 🇨🇳 CN | — | — | — | 0 | 16 | 0.0 | — | — |
| Reality Winner (INS-WINNER-2017) aka Reality Winner, Reality Leigh Winner… | insider | 🇺🇸 US | — | IntelligenceNational security | Pluribus International | 0 | 0 | 0.0 | 0.5 | — |
| Red Hacker Alliance (HACK-RED-HACKER-ALLIANCE) aka Red Hacker Alliance, 红客联盟, Hongke Lianmeng… | hacktivist | 🇨🇳 CN | — | GovernmentMedia | — | 0 | 0 | 0.0 | — | — |
| RedCurl (G1039) aka RedCurl, Earth Kapre, Red Wolf… | unknown | — | — | Credit Intermediation & Related Activities (Banking)Insurance Carriers & Related Activities | — | 0 | 60 | 0.0 | — | — |
| RedEcho (G1042) aka RedEcho… | unknown | — | — | Electric Power Generation, Transmission & DistributionUtilitiesSoftware Publishers | — | 0 | 8 | 0.0 | — | — |
| RedHack (HACK-REDHACK) aka RedHack, Red Hack Turkey, Kızıl Hack… | hacktivist | — | — | GovernmentEnergy: gas turbinesTelecommunications | — | 0 | 0 | 0.0 | — | — |
| Renault 2011 alleged spy affair (later discredited) (INS-RENAULT-2011) aka Renault 2011 alleged spy affair (later discredited), Renault 2011, Renault EV spy case 2011… | insider | 🇫🇷 FR | — | Automotive: EV batteriesAutomotive: electric vehicles | Renault ⇄3 | 0 | 0 | 0.0 | 0.5 | — |
| Renault EV-battery 'spy affair' (2011, later debunked) (INS-RENAULT-EV-2011) aka Renault EV-battery 'spy affair' (2011, later debunked), Renault EV affair, Renault electric-vehicle espionage… | insider | 🇫🇷 FR | — | Automotive: EV batteriesAutomotive: vehicle manufacturing | Renault ⇄3 | 0 | 0 | 0.0 | 0.5 | — |
| Renault EV-program internal investigation (mishandled, 2011) (INS-RENAULT-LIBYA-2011) aka Renault EV-program internal investigation (mishandled, 2011), Renault EV affair 2011… | insider | 🇫🇷 FR | — | Automotive: EV batteriesAutomotive: EV powertrain | Renault ⇄3 | 0 | 0 | 0.0 | 0.5 | — |
| Rivian Automotive (Tesla 2020 trade-secret civil suit) (COMP-RIVIAN-TESLA-2020) aka Rivian Automotive (Tesla 2020 trade-secret civil suit), Rivian, Rivian Automotive Inc… | competitor | 🇺🇸 US | — | Automotive: electric vehiclesAutomotive: EV batteries | Tesla ⇄5 | 0 | 0 | 0.0 | 0.5 | — |
| Robert Bosch GmbH (BMW e-axle insider-recruitment 2017) (COMP-BOSCH-BMW-2017) aka Robert Bosch GmbH (BMW e-axle insider-recruitment 2017), Robert Bosch GmbH, Bosch… | competitor | 🇩🇪 DE | — | Automotive: EV powertrainAutomotive: parts manufacturing | — | 0 | 0 | 0.0 | — | — |
| Robert O'Rourke (Dura-Bar / Jiangsu rival) (INS-OROURKE-DURABAR-2019) aka Robert O'Rourke (Dura-Bar / Jiangsu rival), Robert O'Rourke… | insider | 🇺🇸 US | — | Metallurgy: cast-iron bar stockIndustrial: ferrous foundry | Dura-Bar | 0 | 0 | 0.0 | 0.5 | — |
| Robinhood Markets (Citadel and IEX HFT-engineer civil claims) (COMP-ROBINHOOD-CITADEL-HFT) aka Robinhood Markets (Citadel and IEX HFT-engineer civil claims), Robinhood, Robinhood Markets Inc… | competitor | 🇺🇸 US | — | Financial services: retail brokerageSoftware: trading systems | Citadel | 0 | 0 | 0.0 | 0.5 | — |
| Rocke (G0106) aka Rocke, Aged Libra… | unknown | — | CscoRocke | Securities, Commodity Contracts & Other Financial Investments | — | 0 | 50 | 0.0 | — | — |
| Ross Ulbricht ('Dread Pirate Roberts', Silk Road) (HACK-ULBRICHT-DPR) aka Ross Ulbricht ('Dread Pirate Roberts', Silk Road), DPR, Dread Pirate Roberts… | hacktivist | — | — | Financial services: dark marketsCryptocurrency | — | 0 | 0 | 0.0 | — | — |
| RustBolt (HACK-RUSTBOLT) aka RustBolt, RustBolt collective… | hacktivist | — | — | Critical infrastructureEnergy: gas turbinesUtilities | — | 0 | 0 | 0.0 | — | — |
| SAIC Motor (Volkswagen / GM JV-defection civil disputes) (COMP-SAIC) aka SAIC Motor (Volkswagen / GM JV-defection civil disputes), SAIC, SAIC Motor… | competitor | 🇨🇳 CN | — | Automotive: vehicle manufacturingAutomotive: electric vehicles | Shanghai-VWSAIC-GM | 0 | 0 | 0.0 | 1.0 | — |
| SAP (TomorrowNow / Oracle case) (COMP-SAP) aka SAP (TomorrowNow / Oracle case), SAP, SAP AG… | competitor | 🇩🇪 DE | — | Enterprise software: ERPSoftware: customer support | Oracle ⇄2 | 0 | 0 | 0.0 | 0.5 | — |
| SK Hynix engineer (SanDisk/Toshiba NAND counter-leak 2014) (INS-SK-HYNIX-2014) aka SK Hynix engineer (SanDisk/Toshiba NAND counter-leak 2014), SK Hynix NAND case 2014… | insider | 🇰🇷 KR | — | Semiconductor: NAND flash memory | SK Hynix ⇄1 | 0 | 0 | 0.0 | 1.0 | — |
| SK Innovation (LG Chem 2019-2021 ITC defendant) (COMP-SK-INNOVATION) aka SK Innovation (LG Chem 2019-2021 ITC defendant), SK Innovation, SK On… | competitor | 🇰🇷 KR | — | Automotive: EV batteriesAutomotive: electric vehicles | 0 | 0 | 0.0 | 0.5 | — | |
| SK Innovation employees referred for EV-battery secrets (KR, 2022) (INS-SK-LG-EVBATTERY-2022) aka SK Innovation employees referred for EV-battery secrets (KR, 2022), SK-LG battery 30 employees… | insider | 🇰🇷 KR | — | Automotive: EV batteriesEnergy: battery R&D | 0 | 0 | 0.0 | 0.5 | — | |
| Saab AB (Swedish defense civil IP cross-claims) (COMP-SAAB-DEFENSE) aka Saab AB (Swedish defense civil IP cross-claims), Saab, Saab AB… | competitor | 🇸🇪 SE | — | Defense: military aircraftDefense contractors | — | 0 | 0 | 0.0 | — | — |
| Safran-Suzhou JV insiders (CFM/LEAP engine conspiracy) (INS-SAFRAN-CFM-2018) aka Safran-Suzhou JV insiders (CFM/LEAP engine conspiracy), Safran-Snecma insider conspiracy… | insider | 🇫🇷 FR | — | Aerospace: jet enginesAerospace: commercial aviation | 0 | 0 | 0.0 | 1.5 | — | |
| Saint Bear (G1031) aka Saint Bear, Storm-0587, TA471… | state | 🇷🇺 RU | CSSaint Bear | Executive, Legislative & Other General Government SupportPublic AdministrationSoftware Publishers | — | 0 | 26 | 0.0 | — | — |
| Salt Typhoon (G1045) aka Salt Typhoon, GhostEmperor, FamousSparrow… | state | 🇨🇳 CN | MSSalt TyphoonCSOPERATOR PANDAMandUNC2286 | TelecommunicationsUtilities | — | 0 | 23 | 0.0 | — | — |
| Samsung Display engineer indictment (KR, 2017) (INS-KOREA-NIS-DISPLAY-2017) aka Samsung Display engineer indictment (KR, 2017), Samsung Display KR 2017… | insider | 🇰🇷 KR | — | Electronics: OLED displaysDisplay: foldable AMOLED | 0 | 0 | 0.0 | 0.5 | — | |
| Samsung Display engineer indictment (KR, 2019 / BOE) (INS-KOREA-NIS-DISPLAY-2019) aka Samsung Display engineer indictment (KR, 2019 / BOE), Samsung Display KR 2019 BOE… → COMP-BOE | insider | 🇰🇷 KR | — | Electronics: OLED displaysDisplay: backplane TFT | 0 | 0 | 0.0 | 0.5 | — | |
| Samsung Foundry former executive (PRC fab plans 2023) (INS-SAMSUNG-FOUNDRY-2023) aka Samsung Foundry former executive (PRC fab plans 2023), Samsung Foundry leak 2023, Choi Jin-seog… | insider | 🇰🇷 KR | — | Semiconductor: chip fabricationSemiconductor: foundry servicesSemiconductor: fab construction | Samsung FoundrySamsung Electronics | 0 | 0 | 0.0 | 0.7 | — |
| Samsung SDI (LG Chem / CATL civil disputes) (COMP-SAMSUNG-SDI) aka Samsung SDI (LG Chem / CATL civil disputes), Samsung SDI, Samsung SDI Co Ltd… | competitor | 🇰🇷 KR | — | Automotive: EV batteriesElectronics: lithium-ion cells | — | 0 | 0 | 0.0 | — | — |
| Sandworm Team (G0034) aka Sandworm Team, ELECTRUM, Telebots… | state | 🇷🇺 RU | MSSeashell BlizzardCSVoodoo BearMandAPT44MandTEMP.NobleSWIRON VIKINGDrgELECTRUM | Electric Power Generation, Transmission & DistributionInternational AffairsNational SecurityExecutive, Legislative & Other General Government SupportChemical Manufacturing+2 more | Organisation for the Prohibition of Chemical Weapons | 2 | 109 | 3.9 | 0.1 | 2026 |
| Scarlet Mimic (G0029) aka Scarlet Mimic, G0029, Golfing Taurus… | state | 🇨🇳 CN | — | Public AdministrationOther Services (except Public Administration) | — | 3 | 2 | 10.6 | — | 2022 |
| Scattered Spider (G1015) aka Scattered Spider, Roasted 0ktapus, Octo Tempest… | unknown | — | MSOcto TempestCSScattered SpiderMandUNC3944CISAScattered Spider | TelecommunicationsManufacturingRetail TradeFinance & InsuranceAccommodation & Food Services+1 more | 1 | 83 | 1.2 | 0.5 | 2026 | |
| Schaeffler Group (Continental takeover insider-trading) (COMP-SCHAEFFLER-CONTI) aka Schaeffler Group (Continental takeover insider-trading), Schaeffler, Schaeffler AG… | competitor | 🇩🇪 DE | — | Automotive: bearingsIndustrial equipment: motion control | Continental ⇄1 | 0 | 0 | 0.0 | 0.5 | — |
| Schneider Electric ex-engineers criminal conviction (France 2018) (COMP-SCHNEIDER-2018) aka Schneider Electric ex-engineers criminal conviction (France 2018), Schneider Electric trade-secret… | competitor | 🇫🇷 FR | — | Industrial equipment: power managementIndustrial equipment: industrial automation | Schneider Electric | 0 | 0 | 0.0 | 0.5 | — |
| Sea Turtle (G1041) aka Sea Turtle, Teal Kurma, Marbled Dust… | state | 🇹🇷 TR | MSMarbled DustMandUNC1326CscoSea Turtle | Telecommunications | — | 0 | 40 | 0.0 | — | — |
| SenseTime Group (US Entity-Listed AI vendor) (COMP-SENSETIME) aka SenseTime Group (US Entity-Listed AI vendor), SenseTime, 商汤科技… | competitor | 🇨🇳 CN | — | Software: computer visionSurveillance technology | MegviiHikvision | 0 | 0 | 0.0 | 1.0 | — |
| SentinelOne (Cylance / BlackBerry civil claims) (COMP-SENTINELONE-CYLANCE) aka SentinelOne (Cylance / BlackBerry civil claims), SentinelOne, SentinelOne Inc… | competitor | 🇺🇸 US | — | Cybersecurity: endpoint protectionCybersecurity: EDR | CylanceCarbon BlackBlackBerry | 0 | 0 | 0.0 | 1.5 | — |
| Sergey Aleynikov (INS-ALEYNIKOV-2010) aka Sergei Aleynikov, Sergey Aleynikov… | insider | 🇺🇸 US | — | Financial services: high-frequency tradingSoftware: trading systems | Goldman Sachs | 0 | 0 | 0.0 | 0.5 | — |
| ServiceNow (BMC Software trade-secret civil disputes) (COMP-SERVICENOW-BMC) aka ServiceNow (BMC Software trade-secret civil disputes), ServiceNow, ServiceNow Inc… | competitor | 🇺🇸 US | — | Enterprise software: ITSMCloud computing: SaaS | BMCCA Technologies | 0 | 0 | 0.0 | 1.0 | — |
| Shapour Moinian (former US Army pilot / aviation contractor) (INS-MOINIAN-2022) aka Shapour Moinian (former US Army pilot / aviation contractor), Shapour Moinian… | insider | 🇺🇸 US | — | Defense: military aircraftAerospace: avionics | — | 0 | 0 | 0.0 | — | — |
| Sherry Chen (NOAA hydrologist — charges dropped) (INS-CHEN-NOAA-2014) aka Sherry Chen (NOAA hydrologist — charges dropped), Xiafen Chen, Sherry Chen… | insider | 🇺🇸 US | — | Government: federal hydrologyCritical infrastructure: dam data | NOAA | 0 | 0 | 0.0 | 0.5 | — |
| ShinyHunters (HACK-SHINYHUNTERS) aka ShinyHunters, Shiny Hunters… | criminal | — | — | Technology platformsOnline servicesFinancial services | 0 | 5 | 0.0 | 1.3 | — | |
| SideCopy (G1008) aka SideCopy… | state | 🇵🇰 PK | — | Executive, Legislative & Other General Government SupportPublic Administration | — | 0 | 25 | 0.0 | — | — |
| Sidewinder (G0121) aka Sidewinder, T-APT-04, Rattlesnake… | state | 🇮🇳 IN | CSRAZOR TIGER | National SecurityPublic Administration | — | 1 | 42 | 4.3 | — | 2018 |
| SiegedSec (HACK-SIEGEDSEC) aka SiegedSec… | hacktivist | — | — | Government: stateThink tanksHealthcareDefense contractors | 0 | 0 | 0.0 | 0.5 | — | |
| Siemens Energy (Westinghouse turbine-disc dispute 2019) (COMP-SIEMENS-WESTINGHOUSE) aka Siemens Energy (Westinghouse turbine-disc dispute 2019), Siemens Energy, Siemens AG… | competitor | 🇩🇪 DE | — | Energy: gas turbinesPower generation: utility-scale | — | 0 | 0 | 0.0 | — | — |
| Siemens Mobility v. RSS engineers (UK rail signalling) (INS-SIEMENS-RAIL-SUMMARY-2023) aka Siemens Mobility v. RSS engineers (UK rail signalling), Siemens v Yunex RSS UK… | insider | 🇬🇧 GB | — | Rail: signalling systemsCritical infrastructure: rail operations | SiemensYunex | 0 | 0 | 0.0 | 1.0 | — |
| Siemens Mobility v. Rail Signalling Services (UK High Court 2023) (INS-SIEMENS-YUNEX-UK-2023) aka Siemens Mobility v. Rail Signalling Services (UK High Court 2023), Siemens v. RSS, Siemens Mobility UK trade-secret… | insider | 🇬🇧 GB | — | Transportation: rail signallingIndustrial equipment: traffic systems | Siemens Mobility | 0 | 0 | 0.0 | 0.5 | — |
| Silence (G0091) aka Silence, Whisper Spider, Silence group… | unknown | — | CSWhisper Spider | Monetary Authorities — Central BankCredit Intermediation & Related Activities (Banking)Finance & Insurance | Russian Central Bank | 0 | 43 | 0.0 | 0.3 | — |
| Silent Librarian (G0122) aka Silent Librarian, TA407, COBALT DICKENS… | state | 🇮🇷 IR | SWCOBALT DICKENS | Educational ServicesPublic Administration | — | 0 | 20 | 0.0 | — | — |
| SilverTerrier (G0083) aka SilverTerrier… | state | 🌍 NG | — | ManufacturingEducational ServicesComputer & Electronic Product ManufacturingInformation | — | 0 | 5 | 0.0 | — | — |
| Sinovel Wind Group (American Superconductor case) (COMP-SINOVEL) aka Sinovel Wind Group (American Superconductor case), Sinovel, Sinovel Wind Group… | competitor | 🇨🇳 CN | — | Energy: wind turbinesIndustrial equipment: power generation | American Superconductor | 0 | 0 | 0.0 | 0.5 | — |
| Snap Inc. (Apple Vision Pro defendant 2025-2026) (COMP-SNAP-APPLE-VISION) aka Snap Inc. (Apple Vision Pro defendant 2025-2026), Snap, Snap Inc.… | competitor | 🇺🇸 US | — | Consumer electronics: AR/VRSoftware: computer vision | Apple ⇄9 | 0 | 0 | 0.0 | 0.5 | — |
| Snowflake (Teradata civil claims over engineer defections) (COMP-SNOWFLAKE-TERADATA) aka Snowflake (Teradata civil claims over engineer defections), Snowflake, Snowflake Inc… | competitor | 🇺🇸 US | — | Enterprise software: data warehousingCloud computing: analytics | 0 | 0 | 0.0 | 1.5 | — | |
| Soldiers of Solomon (HACK-SOLDIERS-OF-SOLOMON) aka Soldiers of Solomon, Soldiers of Solomon Group, Edalat-e Ali ally… | hacktivist | — | — | GovernmentCritical infrastructure: fuel distribution | Iranian Atomic Energy Organization | 0 | 0 | 0.0 | 0.5 | — |
| Solntsepyok (Solntsepek front for GRU Sandworm) (HACK-SOLNTSEPYOK) aka Solntsepyok (Solntsepek front for GRU Sandworm), Solntsepek, Solntsepyok… | hacktivist | 🇷🇺 RU | — | TelecommunicationsGovernmentCritical infrastructure | Kyivstar | 0 | 0 | 0.0 | 0.3 | — |
| Sowbug (G0054) aka Sowbug, G0054… | state | — | — | Public Administration | — | 0 | 13 | 0.0 | — | — |
| Spotify Technology (VoxTonePRO/Mujae 2020 trade-secret) (COMP-SPOTIFY-VOXTONEPRO) aka Spotify Technology (VoxTonePRO/Mujae 2020 trade-secret), Spotify, Spotify Technology SA… | competitor | 🇸🇪 SE | — | Software: audio streamingAdvertising technology: audio ads | Mujae Group (VoxTonePRO) | 0 | 0 | 0.0 | 0.5 | — |
| Sri Lanka Cyber Force (HACK-SRI-LANKA-CYBER-FORCE) aka Sri Lanka Cyber Force, SLCF… | hacktivist | — | — | GovernmentMedia | — | 0 | 0 | 0.0 | — | — |
| Star Blizzard (G1033) aka Star Blizzard, SEABORGIUM, Callisto Group… | state | 🇷🇺 RU | MSStar BlizzardCSGOSSAMER BEARMandUNC4057CISAStar Blizzard | Educational ServicesExecutive, Legislative & Other General Government SupportNational SecurityProfessional, Scientific & Technical ServicesOther Services (except Public Administration)+1 more | — | 0 | 31 | 0.0 | — | — |
| Stealth Falcon (G0038) aka Stealth Falcon, FruityArmor, G0038… | state | 🇦🇪 AE | — | BroadcastingPublic AdministrationOther Services (except Public Administration) | — | 0 | 19 | 0.0 | — | — |
| Stellantis NV (Renault / PSA legacy civil engineer disputes) (COMP-STELLANTIS-RENAULT) aka Stellantis NV (Renault / PSA legacy civil engineer disputes), Stellantis, Stellantis NV… | competitor | 🇳🇱 NL | — | Automotive: vehicle manufacturingAutomotive: electric vehicles | Renault-Nissan | 0 | 0 | 0.0 | 0.5 | — |
| Storm-0501 (G1053) aka Storm-0501… | unknown | — | MSStorm-0501 | Software Publishers | — | 0 | 62 | 0.0 | — | — |
| Storm-0530 (MISP-47945864) aka Storm-0530, DEV-0530, H0lyGh0st… | state | 🇰🇵 KP | — | — | — | 11 | 0 | 31.9 | — | 2022 |
| Storm-0784 (HACK-STORM-0784) aka Storm-0784, Storm-0784 (Microsoft cluster)… | hacktivist | 🇮🇷 IR | — | GovernmentDefense contractorsCritical infrastructure | — | 0 | 0 | 0.0 | — | — |
| Storm-1811 (G1046) aka Storm-1811, UNC4393, CURLY SPIDER… | unknown | — | MSStorm-1811CSCURLY SPIDERMandUNC4393 | Software Publishers | — | 0 | 47 | 0.0 | — | — |
| Stormous (HACK-STORMOUS) aka Stormous, Stormous Team… | hacktivist | — | — | Financial servicesManufacturingGovernment | — | 0 | 0 | 0.0 | — | — |
| Strider (G0041) aka Strider, ProjectSauron, Sauron… | state | 🇺🇸 US | KSPProjectSauron | — | — | 0 | 6 | 0.0 | — | — |
| Su Bin (Boeing C-17 / F-22 / F-35 data) (INS-SU-BIN-2016) aka Su Bin (Boeing C-17 / F-22 / F-35 data), Su Bin, Stephen Su… | insider | 🇺🇸 US | — | Aerospace: military aircraftDefense: fighter aircraftDefense contractors | Boeing ⇄1 | 0 | 0 | 0.0 | 0.3 | — |
| Suckfly (G0039) aka Suckfly, APT22, G0039… | state | 🇨🇳 CN | MandAPT22 | — | — | 0 | 7 | 0.0 | — | — |
| Syrian Electronic Army (HACK-SYRIAN-ELECTRONIC-ARMY) aka Syrian Electronic Army, SEA, الجيش السوري الإلكتروني… | hacktivist | 🌍 SY | — | MediaGovernmentOnline services | APReutersWashington Post+2 more | 0 | 0 | 0.0 | 1.7 | — |
| TA2541 (G1018) aka TA2541… | unknown | — | — | Air TransportationAerospace Product & Parts ManufacturingManufacturingTransportation & WarehousingNational Security | — | 0 | 42 | 0.0 | — | — |
| TA459 (G0062) aka TA459, G0062… | state | 🇨🇳 CN | — | — | — | 0 | 8 | 0.0 | — | — |
| TA505 (G0092) aka TA505, Hive0065, Spandex Tempest… | state | 🇷🇺 RU | MSSpandex TempestCSGRACEFUL SPIDERCSMONTY SPIDER | Software Publishers | — | 1 | 51 | 3.2 | — | 2026 |
| TA551 (G0127) aka TA551, GOLD CABIN, Shathak… | unknown | — | SWGOLD CABIN | — | — | 0 | 23 | 0.0 | — | — |
| TA577 (G1037) aka TA577, Hive0118… | state | 🇷🇺 RU | — | Software Publishers | — | 0 | 11 | 0.0 | — | — |
| TA578 (G1038) aka TA578… | unknown | — | — | Software Publishers | — | 0 | 7 | 0.0 | — | — |
| TEMP.Veles (G0088) aka TEMP.Veles, XENOTIME, G0088… | state | 🇷🇺 RU | MandTEMP.VelesDrgXENOTIME | Oil & Gas ExtractionUtilitiesSoftware Publishers | — | 0 | 0 | 0.0 | — | — |
| TSMC (GlobalFoundries 2019 patent cross-suits) (COMP-TSMC-GLOBALFOUNDRIES) aka TSMC (GlobalFoundries 2019 patent cross-suits), TSMC, Taiwan Semiconductor Manufacturing… | competitor | 🇹🇼 TW | — | Semiconductor: foundry servicesSemiconductor: chip fabrication | GlobalFoundries | 0 | 0 | 0.0 | 0.5 | — |
| Tanium Inc. (McAfee customer-list dispute) (COMP-TANIUM) aka Tanium Inc. (McAfee customer-list dispute), Tanium, Tanium Inc… | competitor | 🇺🇸 US | — | Cybersecurity: endpoint management | — | 0 | 0 | 0.0 | — | — |
| Tapandegan (HACK-TAPANDEGAN) aka Tapandegan, Palpitating Hearts, تپندگان… | hacktivist | — | — | Critical infrastructure: railGovernmentTelecommunications | — | 0 | 0 | 0.0 | — | — |
| Tata Consultancy Services (Epic Systems case) (COMP-TATA-TCS) aka Tata Consultancy Services (Epic Systems case), Tata Consultancy Services, TCS… | competitor | 🇮🇳 IN | — | IT services: consultingHealthcare software: hospital management | Epic Systems | 0 | 0 | 0.0 | 0.5 | — |
| Team GhostShell (HACK-TEAM-GHOSTSHELL) aka Team GhostShell, GhostShell, DeadMellox crew… | hacktivist | — | — | Educational institutionsGovernmentFinancial services | — | 0 | 0 | 0.0 | — | — |
| TeamTNT (G0139) aka TeamTNT, Adept Libra… | unknown | — | — | Securities, Commodity Contracts & Other Financial Investments | — | 1 | 75 | 4.3 | — | 2019 |
| Ten ex-Samsung employees indicted (DRAM tech → CXMT) (INS-SAMSUNG-CXMT-2025) aka Ten ex-Samsung employees indicted (DRAM tech → CXMT), Samsung CXMT 10 indictment, Korea CXMT DRAM case… → ChangXin Memory Technologies (CXMT / DRAM) | insider | 🇰🇷 KR | — | Semiconductor: DRAM memorySemiconductor: HBM memory | Samsung ⇄1 | 0 | 0 | 0.0 | 0.5 | — |
| Thales Group (Atos / Safran civil defense-IP disputes) (COMP-THALES-DEFENSE) aka Thales Group (Atos / Safran civil defense-IP disputes), Thales, Thales SA… | competitor | 🇫🇷 FR | — | Defense contractorsDefense: radar and electronics | — | 0 | 0 | 0.0 | — | — |
| The Jester (HACK-THE-JESTER) aka The Jester, th3j35t3r, Jester Actual… | hacktivist | — | — | Religious institutionsGovernmentMedia | WikiLeaks | 0 | 0 | 0.0 | 0.3 | — |
| The White Company (G0089) aka The White Company… | unknown | — | — | National SecurityPublic Administration | — | 0 | 12 | 0.0 | — | — |
| Threat Group-1314 (G0028) aka Threat Group-1314, TG-1314… | unknown | — | — | Utilities | — | 0 | 7 | 0.0 | — | — |
| Threat Group-3390 (G0027) aka Threat Group-3390, Earth Smilodon, TG-3390… | state | 🇨🇳 CN | MSLinen TyphoonMSCircle TyphoonCSEmissary PandaCSIron TigerMandAPT27MandTEMP.Hippo | Aerospace Product & Parts ManufacturingNational SecurityInformationMining, Quarrying, Oil & Gas ExtractionManufacturing+2 more | — | 5 | 83 | 18.2 | — | 2026 |
| Thrip (G0076) aka Thrip, G0076, ATK78… | state | — | — | TelecommunicationsAerospace Product & Parts ManufacturingNational Security | — | 0 | 8 | 0.0 | — | — |
| ThyssenKrupp industrial-data intrusion (2016) (INS-THYSSENKRUPP-2016) aka ThyssenKrupp industrial-data intrusion (2016), ThyssenKrupp 2016 breach… | insider | 🇩🇪 DE | — | Industrial equipment: steelIndustrial equipment: elevators | ThyssenKrupp | 0 | 0 | 0.0 | 0.5 | — |
| Tianma Microelectronics (COMP-TIANMA) aka Tianma, Tianma Microelectronics, 天马… | competitor | 🇨🇳 CN | — | Electronics: TFT LCD displaysConsumer electronics | — | 0 | 0 | 0.0 | — | — |
| ToddyCat (G1022) aka ToddyCat, Websiic… | unknown | — | KSPToddyCat | National SecurityPublic Administration | — | 0 | 38 | 0.0 | — | — |
| TomTom NV (Microsoft FAT32 / GPS patent dispute 2009) (COMP-TOMTOM-MICROSOFT-NAV) aka TomTom NV (Microsoft FAT32 / GPS patent dispute 2009), TomTom, TomTom NV… | competitor | 🇳🇱 NL | — | Automotive: navigation systemsSoftware: mapping | Microsoft ⇄3 | 0 | 0 | 0.0 | 0.5 | — |
| Tonto Team (G0131) aka Tonto Team, Earth Akhlut, BRONZE HUNTLEY… | state | 🇨🇳 CN | CSKarma PandaSWBRONZE HUNTLEYKSPCactusPete | Mining, Quarrying, Oil & Gas ExtractionUtilitiesFinance & InsuranceEducational ServicesHealth Care & Social Assistance+3 more | — | 2 | 23 | 5.5 | — | 2026 |
| Transparent Tribe (G0134) aka Transparent Tribe, COPPER FIELDSTONE, APT36… | state | 🇵🇰 PK | CSMythic LeopardMandAPT36SWCOPPER FIELDSTONEKSPTransparent TribeCscoTransparent Tribe | National SecurityInternational Affairs | — | 1 | 23 | 2.7 | — | 2022 |
| Tropic Trooper (G0081) aka Tropic Trooper, Pirate Panda, KeyBoy… | state | 🇨🇳 CN | CSPirate PandaMandAPT23 | Public AdministrationHealth Care & Social AssistanceTransportation & WarehousingComputer & Electronic Product Manufacturing | — | 1 | 56 | 1.2 | — | 2026 |
| Turla (G0010) aka Turla, IRON HUNTER, Group 88… | state | 🇷🇺 RU | MSSecret BlizzardCSVenomous BearCSWhite BearMandUNC4210SWIRON HUNTERKSPTurla | National SecurityPublic AdministrationEducational ServicesProfessional, Scientific & Technical ServicesChemical Manufacturing+3 more | — | 0 | 92 | 0.0 | — | — |
| Twilio (Bandwidth / Vonage civil claims after SendGrid) (COMP-TWILIO-SENDGRID) aka Twilio (Bandwidth / Vonage civil claims after SendGrid), Twilio, Twilio Inc… | competitor | 🇺🇸 US | — | Telecommunications: CPaaSSoftware: communications APIs | BandwidthVonage | 0 | 0 | 0.0 | 1.0 | — |
| Two Sigma Investments (alumni trade-secret civil disputes) (COMP-TWO-SIGMA) aka Two Sigma Investments (alumni trade-secret civil disputes), Two Sigma, Two Sigma Investments LP… | competitor | 🇺🇸 US | — | Financial services: quantitative tradingSoftware: trading systems | — | 0 | 0 | 0.0 | — | — |
| UMC (post-Jinhua semiconductor civil disputes) (COMP-UMC-OTHER) aka UMC (post-Jinhua semiconductor civil disputes), UMC, United Microelectronics… | competitor | 🇹🇼 TW | — | Semiconductor: foundry servicesSemiconductor: DRAM memory | 0 | 0 | 0.0 | 1.0 | — | |
| UNC3886 (G1048) aka UNC3886… | state | 🇨🇳 CN | MandUNC3886 | National SecurityTelecommunicationsComputer & Electronic Product ManufacturingUtilitiesInformation | — | 0 | 63 | 0.0 | — | — |
| USDoD (HACK-USDOD) aka USDoD, EquationCorp, NetSec… | hacktivist | — | — | Defense contractorsGovernmentData brokersTechnology platforms | 0 | 0 | 0.0 | 1.2 | — | |
| USPS leak crew (USPS 2023) (HACK-USPS-LEAK-CREW) aka USPS leak crew (USPS 2023), USPS hack 2023… | hacktivist | — | — | Government: federal | US Postal Service | 0 | 0 | 0.0 | 1.0 | — |
| Uber Technologies (Waymo IP-theft beneficiary) (COMP-UBER) aka Uber Technologies (Waymo IP-theft beneficiary), Uber, Uber Technologies… | competitor | 🇺🇸 US | — | Automotive: autonomous vehiclesSoftware: machine learning | Waymo ⇄5 | 0 | 0 | 0.0 | 0.5 | — |
| Ukrainian Cyber Alliance (HACK-UCA) aka Ukrainian Cyber Alliance, UCA, UkrCyberAlliance… | hacktivist | 🇺🇦 UA | — | GovernmentDefense contractorsCritical infrastructure | RoskomnadzorTrigona | 0 | 0 | 0.0 | 0.7 | — |
| Unilever PLC (Nestlé / P&G civil disputes) (COMP-UNILEVER-NESTLE) aka Unilever PLC (Nestlé / P&G civil disputes), Unilever, Unilever PLC… | competitor | 🇬🇧 GB | — | Consumer products: food and personal careConsumer products: nutrition | NestléProcter & Gamble | 0 | 0 | 0.0 | 1.0 | — |
| UserSec (HACK-USERSEC) aka UserSec, UserSec Collective… | hacktivist | 🇷🇺 RU | — | GovernmentFinancial services | NATO ⇄2 | 0 | 0 | 0.0 | 0.5 | — |
| VOID MANTICORE (G1055) aka VOID MANTICORE, COBALT MYSTIQUE, Handala Hack… | state | 🇮🇷 IR | MSRed SandstormCSBANISHED KITTEN | Public AdministrationMedical Equipment & SuppliesUtilitiesJustice, Public Order & Safety | 0 | 87 | 0.0 | 0.5 | — | |
| Veeva Systems (IQVIA trade-secret 2017-2025) (COMP-VEEVA-IQVIA) aka Veeva Systems (IQVIA trade-secret 2017-2025), Veeva, Veeva Systems Inc… | competitor | 🇺🇸 US | — | Enterprise software: life sciences CRMHealthcare software: data products | IQVIA | 0 | 0 | 0.0 | 0.5 | — |
| Velodyne LiDAR / Ouster Inc. (multiple IP disputes) (COMP-VELODYNE-OUSTER) aka Velodyne LiDAR / Ouster Inc. (multiple IP disputes), Velodyne, Velodyne Lidar… | competitor | 🇺🇸 US | — | Automotive: LiDAR sensorsAutomotive: autonomous vehicles | QuanergyHesai | 0 | 0 | 0.0 | 1.0 | — |
| Velvet Ant (G1047) aka Velvet Ant… | unknown | — | — | — | — | 0 | 31 | 0.0 | — | — |
| Volatile Cedar (G0123) aka Volatile Cedar, Lebanese Cedar, DeftTorero… | state | 🌍 LB | — | — | — | 0 | 7 | 0.0 | — | — |
| Volkswagen AG (López/GM 1993 case) (COMP-VOLKSWAGEN-LOPEZ) aka Volkswagen AG (López/GM 1993 case), Volkswagen, VW… | competitor | 🇩🇪 DE | — | Automotive: vehicle manufacturingManufacturing: supply chainAutomotive: electric vehicles | 0 | 0 | 0.0 | 0.7 | — | |
| Volt Typhoon (G1017) aka Volt Typhoon, BRONZE SILHOUETTE, Vanguard Panda… | state | 🇨🇳 CN | MSVolt TyphoonCSVanguard PandaMandUNC3236SWBRONZE SILHOUETTE | UtilitiesElectric Power Generation, Transmission & Distribution | — | 4 | 98 | 15.6 | — | 2026 |
| WIRTE (G0090) aka WIRTE, Ashen Lepus… | state | 🌍 PS | KSPWIRTE | Executive, Legislative & Other General Government SupportCredit Intermediation & Related Activities (Banking)National SecurityProfessional, Scientific & Technical ServicesInformation+2 more | — | 0 | 42 | 0.0 | — | — |
| WM Motor (Geely 2024 SPC trade-secret defendant) (COMP-WM-MOTOR) aka WM Motor (Geely 2024 SPC trade-secret defendant), WM Motor, Weltmeister… | competitor | 🇨🇳 CN | — | Automotive: electric vehiclesAutomotive: vehicle manufacturing | Geely | 0 | 0 | 0.0 | 0.5 | — |
| Walter Biot (Italian Navy / Russia espionage) (INS-BIOT-ITALY-2024) aka Walter Biot (Italian Navy / Russia espionage), Walter Biot… | insider | 🇮🇹 IT | — | Defense: naval systemsGovernment: classified intelligence | 0 | 0 | 0.0 | 1.0 | — | |
| Walter Lian-Heen Liew (INS-LIEW-2014) aka Walter Liew, Walter Lian-Heen Liew, Liew Lian-Heen… → Pangang Group (TiO2 chloride-route beneficiary) | insider | 🇺🇸 US | — | Specialty chemicals: titanium dioxideIndustrial coatings | DuPont | 0 | 0 | 0.0 | 0.5 | — |
| Water Galura (G1050) aka Water Galura, GOLD FEATHER… | unknown | — | — | Credit Intermediation & Related Activities (Banking)Publishing Industries (Including Software)Software Publishers | — | 0 | 4 | 0.0 | — | — |
| Waymo v. Uber (civil trade-secret, US) (COMP-WAYMO-UBER-CIVIL-2017) aka Waymo v. Uber (civil trade-secret, US), Waymo v. Uber… | competitor | 🇺🇸 US | — | Automotive: autonomous vehiclesAutomotive: LiDAR sensors | Waymo ⇄5 | 0 | 0 | 0.0 | 0.5 | — |
| WeRide (alleged Apple / Waymo engineer beneficiary) (COMP-WERIDE) aka WeRide (alleged Apple / Waymo engineer beneficiary), WeRide, WeRide.ai… | competitor | 🇨🇳 CN | — | Automotive: autonomous vehiclesSoftware: machine learning | 0 | 0 | 0.0 | 1.0 | — | |
| Weibao Wang (Apple autonomous-systems source code) (INS-WANG-APPLE-2023) aka Weibao Wang (Apple autonomous-systems source code), Weibao Wang… | insider | 🇺🇸 US | — | Automotive: autonomous vehiclesSoftware: machine learning | Apple ⇄9 | 0 | 0 | 0.0 | 0.5 | — |
| Wenfeng Lu (ev3 / Edwards Lifesciences medical devices) (INS-LU-MEDDEV-2014) aka Wenfeng Lu (ev3 / Edwards Lifesciences medical devices), Wenfeng Lu… | insider | 🇺🇸 US | — | Medical devices: cardiovascular implantsMedical devices: catheters | ev3/CovidienEdwards Lifesciences | 0 | 0 | 0.0 | 1.0 | — |
| Whitefly (G0107) aka Whitefly… | unknown | — | — | Hospitals | SingHealth | 1 | 15 | 4.3 | 1.0 | 2016 |
| Windigo (G0124) aka Windigo… | unknown | — | — | Justice, Public Order & SafetySoftware Publishers | — | 0 | 7 | 0.0 | — | — |
| Windshift (G0112) aka Windshift, Bahamut, Windy Phoenix… | unknown | — | — | Executive, Legislative & Other General Government SupportUtilitiesPublic Administration | — | 0 | 24 | 0.0 | — | — |
| Winnti Group (G0044) aka Winnti Group, Blackfly, APT41… | state | 🇨🇳 CN | MSBrass TyphoonMSLeopard TyphoonCSWICKED SPIDERCSWICKED PANDAMandAPT41 | Arts, Entertainment & Recreation | — | 2 | 8 | 4.4 | — | 2021 |
| Winter Vivern (G1035) aka Winter Vivern, TA473, UAC-0114… | state | 🇷🇺 RU | — | Executive, Legislative & Other General Government SupportUtilitiesPublic AdministrationOther Services (except Public Administration) | — | 1 | 36 | 4.3 | — | 2021 |
| Wistron Corp. (Apple / Compal civil disputes) (COMP-WISTRON) aka Wistron Corp. (Apple / Compal civil disputes), Wistron, Wistron Corporation… | competitor | 🇹🇼 TW | — | Electronics: contract manufacturingConsumer electronics: assembly | — | 0 | 0 | 0.0 | — | — |
| Wizard Spider (G0102) aka Wizard Spider, UNC1878, TEMP.MixMaster… | state | 🇷🇺 RU | MSPeriwinkle TempestMSPistachio TempestCSWizard SpiderCSGrim SpiderMandUNC1878MandTEMP.MixMaster | HospitalsHealth Care & Social AssistanceSoftware Publishers | — | 1 | 92 | 1.2 | — | 2026 |
| Workday (Oracle HCM civil claims) (COMP-WORKDAY-ORACLE) aka Workday (Oracle HCM civil claims), Workday, Workday Inc… | competitor | 🇺🇸 US | — | Enterprise software: HCMEnterprise software: financials | 0 | 0 | 0.0 | 1.0 | — | |
| XPeng Motors (XMotors — Apple autonomous beneficiary) (COMP-XPENG) aka XPeng Motors (XMotors — Apple autonomous beneficiary), XPeng, XPeng Motors… | competitor | 🇨🇳 CN | — | Automotive: autonomous vehiclesAutomotive: electric vehicles | Apple ⇄9 | 0 | 0 | 0.0 | 0.5 | — |
| XakNet Team (HACK-XAKNET) aka XakNet Team, XakNet… | hacktivist | 🇷🇺 RU | — | GovernmentEnergy: gas turbinesTelecommunications | — | 0 | 0 | 0.0 | — | — |
| Xiaolang Zhang (Apple self-driving) (INS-ZHANG-APPLE-2018) aka Xiaolang Zhang (Apple self-driving), Xiaolang Zhang, Zhang Xiaolang… → XPeng Motors (XMotors — Apple autonomous beneficiary) | insider | 🇺🇸 US | — | Automotive: autonomous vehiclesSoftware: machine learning | Apple ⇄9 | 0 | 0 | 0.0 | 0.5 | — |
| Xiaoqing Zheng (GE turbine technology) (INS-WANG-GE-2019) aka Xiaoqing Zheng (GE turbine technology), Xiaoqing Zheng, Zheng Xiaoqing… | insider | 🇺🇸 US | — | Energy: gas turbinesIndustrial equipment: power generation | 0 | 0 | 0.0 | 1.0 | — | |
| Xiaorong 'Shannon' You (Coca-Cola / Eastman BPA-free coatings) (INS-YOU-COCACOLA-2022) aka Xiaorong 'Shannon' You (Coca-Cola / Eastman BPA-free coatings), Xiaorong You, Shannon You… | insider | 🇺🇸 US | — | Specialty chemicals: BPA-free can coatingsSpecialty chemicals: pigments | AkzoNobelBASFDow+4 more | 0 | 0 | 0.0 | 3.5 | — |
| Xtal Inc. / Dongfang Jingyuan trade-secret theft (ASML) (INS-ASML-XTAL-2018) aka Xtal Inc. / Dongfang Jingyuan trade-secret theft (ASML), Xtal, ASML XTAL case… → Dongfang Jingyuan Electron (ASML software case) | insider | 🇳🇱 NL | — | Semiconductor: lithography equipmentSemiconductor: design software | ASML ⇄4 | 0 | 0 | 0.0 | 0.5 | — |
| Yangtze Memory Technologies (YMTC) (COMP-YMTC) aka Yangtze Memory Technologies (YMTC), YMTC, Yangtze Memory… | competitor | 🇨🇳 CN | — | Semiconductor: 3D NAND flash | — | 0 | 0 | 0.0 | — | — |
| Yanjun Xu (MSS officer, GE Aviation case) (INS-XU-2019) aka Yanjun Xu (MSS officer, GE Aviation case), Yanjun Xu, Xu Yanjun… | insider | 🇺🇸 US | — | Aerospace: jet enginesAerospace: commercial aviation | GE Aviation | 0 | 0 | 0.0 | 0.5 | — |
| Yanqing Ye (PLA lieutenant at Boston University) (INS-YE-BU-2020) aka Yanqing Ye (PLA lieutenant at Boston University), Yanqing Ye… | insider | 🇺🇸 US | — | Academia: physics/biomedical researchDefense: military research | Boston University | 0 | 0 | 0.0 | 0.5 | — |
| Yaskawa Electric industrial-robotics leak (JP, 2019) (INS-YASKAWA-2019) aka Yaskawa Electric industrial-robotics leak (JP, 2019), Yaskawa JP 2019… | insider | 🇯🇵 JP | — | Industrial: roboticsAutomation: motion control | Yaskawa Electric | 0 | 0 | 0.0 | 0.5 | — |
| Yi-Chi Shih (UCLA / Chengdu GaStone semiconductors) (INS-SHIH-UCLA-2019) aka Yi-Chi Shih (UCLA / Chengdu GaStone semiconductors), Shih Yi-chi, Yi-Chi Shih… | insider | 🇺🇸 US | — | Semiconductor: monolithic microwave integrated circuitsDefense: military electronics | Cree | 0 | 0 | 0.0 | 0.5 | — |
| Yoshitaka Sugita (Toshiba NAND theft 2014) (INS-TOSHIBA-NAND-2014) aka Yoshitaka Sugita (Toshiba NAND theft 2014), Yoshitaka Sugita… | insider | 🇯🇵 JP | — | Semiconductor: NAND flash memory | 0 | 0 | 0.0 | 2.0 | — | |
| Yu Long (United Technologies Research Center / F119-F135) (INS-LONG-UTRC-2016) aka Yu Long (United Technologies Research Center / F119-F135), Yu Long… | insider | 🇺🇸 US | — | Aerospace: jet enginesDefense: military aircraft | United Technologies Research Center | 0 | 0 | 0.0 | 0.5 | — |
| Yuanyuan Liu civil settlement (ASML / Xtal cohort) (INS-ASML-LIU-2015) aka Yuanyuan Liu civil settlement (ASML / Xtal cohort), Yuanyuan Liu, Yuanyuan Liu (ASML/Suzhou earlier IP transfer)… → Dongfang Jingyuan Electron (ASML software case) | insider | 🇳🇱 NL | — | Semiconductor: lithography equipmentSemiconductor: photomask softwareSoftware: chip-design tools | ASML ⇄4 | 0 | 0 | 0.0 | 0.3 | — |
| ZIRCONIUM (G0128) aka ZIRCONIUM, APT31, Violet Typhoon… | state | 🇨🇳 CN | MSViolet TyphoonCSJUDGMENT PANDAMandAPT31 | International AffairsExecutive, Legislative & Other General Government Support | — | 2 | 42 | 7.9 | — | 2013 |
| ZTE Corporation (Nokia / Ericsson SEP cross-disputes) (COMP-ZTE-NOKIA) aka ZTE Corporation (Nokia / Ericsson SEP cross-disputes), ZTE, ZTE Corporation… | competitor | 🇨🇳 CN | — | Telecommunications: network equipmentTelecommunications: 4G/5G infrastructure | 0 | 0 | 0.0 | 1.5 | — | |
| Zoom Video Communications (Cisco WebEx civil claims) (COMP-ZOOM-CISCO-WEBEX) aka Zoom Video Communications (Cisco WebEx civil claims), Zoom, Zoom Video Communications Inc… | competitor | 🇺🇸 US | — | Enterprise software: video conferencingCloud computing: communications | Cisco ⇄1 | 0 | 0 | 0.0 | 0.5 | — |
| admin@338 (G0018) aka admin@338, TEMPER PANDA, Admin338… | state | 🇨🇳 CN | CSTEMPER PANDAMandadmin@338 | Finance & InsuranceSoftware Publishers | — | 0 | 18 | 0.0 | — | — |
| menuPass (G0045) aka menuPass, Cicada, POTASSIUM… | state | 🇨🇳 CN | MSPurple TyphoonCSStone PandaMandAPT10 | Health Care & Social AssistanceNational SecurityAerospace Product & Parts ManufacturingFinance & InsuranceWater Transportation+7 more | — | 2 | 65 | 4.4 | — | 2021 |
| thedarkoverlord (extortion-hacktivism hybrid) (HACK-THEDARKOVERLORD) aka thedarkoverlord (extortion-hacktivism hybrid), thedarkoverlord, TDO… | hacktivist | — | — | HealthcareEntertainment: mediaEducation | Netflix | 0 | 0 | 0.0 | 0.3 | — |