Threat actors
Per-actor home pages for the threat actors named in our CVE corpus — MITRE-tracked groups plus MISP / LLM-extracted actors with at least one attributed CVE. 505 actors indexed. · 56 campaigns → · Browse by sector → · Browse by victim → · Actor × vendor heatmap →
Threat Actors
What changed505 tracked threat actors, mapped to the CVEs, techniques, target sectors, and named victims we can attribute.
Why it mattersDefending against an adversary beats defending against a CVE list — you can prioritize by who is actually active against your sector.
Who's affectedAnyone in a targeted industry, or unsure which actors target them.
What to do firstFind the actors that hit your sector, then work their known CVEs.
Security leader talking pointFrame board risk around named adversaries and your sector, not a generic threat level.
Lean IT actionCheck whether any active actor targets your industry, then patch their known CVEs.
Orient
Who to watch
505 tracked actors. Ranked by the volume of CVEs attributed to them — the names most worth knowing:
Find actors who…
Catalogue
Active in:
Motivation:
Sponsor:
Victim selection:
Targets:
Target sector:
Target sector:
| Name | Category | Sponsor | Vendor names | Target sectors | Targets | Named victims | CVEs | Techniques | IDF score | Specificity | Last active |
|---|---|---|---|---|---|---|---|---|---|---|---|
| APT-C-23 (G1028) aka APT-C-23, Mantis, Arid Viper… | state | 🌍 PS | CSRENEGADE JACKAL | National SecurityPublic AdministrationCredit Intermediation & Related Activities (Banking)BroadcastingProfessional, Scientific & Technical Services | — | — | 0 | 0 | 0.0 | — | — |
| APT-C-36 (G0099) aka APT-C-36, Blind Eagle, TAG-144… | state | — | — | Public AdministrationFinance & InsuranceMining, Quarrying, Oil & Gas ExtractionManufacturingUtilities | — | — | 0 | 54 | 0.0 | — | — |
| APT1 (G0006) aka APT1, Comment Crew, Comment Group… | state | 🇨🇳 CN | CSComment PandaMandAPT1 | InformationAerospace Product & Parts ManufacturingPublic AdministrationTelecommunicationsProfessional, Scientific & Technical Services+12 more | BoschSymantec | — | 2 | 36 | 4.4 | — | 2021 |
| APT12 (G0005) aka APT12, IXESHE, DynCalc… | state | 🇨🇳 CN | MSHexagon TyphoonCSNumbered PandaMandAPT12 | BroadcastingComputer & Electronic Product ManufacturingPublic Administration | Microsoft | — | 1 | 9 | 1.2 | — | 2026 |
| APT16 (G0023) aka APT16, SVCMONDR, G0023… | state | 🇨🇳 CN | MandAPT16 | — | — | — | 0 | 2 | 0.0 | — | — |
| APT17 (G0025) aka APT17, Deputy Dog, Group 8… | state | 🇨🇳 CN | MSHeart TyphoonCSAURORA PANDACSHidden LynxMandAPT17 | Executive, Legislative & Other General Government SupportAerospace Product & Parts ManufacturingProfessional, Scientific & Technical ServicesInformationMining (except Oil & Gas)+3 more | — | — | 0 | 3 | 0.0 | — | — |
| APT18 (G0026) aka APT18, TG-0416, Dynamite Panda… | state | 🇨🇳 CN | MSSatin TyphoonMSSalmon TyphoonCSDynamite PandaCSSAMURAI PANDACSMAVERICK PANDAMandAPT18 | InformationManufacturingOther Services (except Public Administration)Public AdministrationHealth Care & Social Assistance | — | — | 0 | 18 | 0.0 | — | — |
| APT19 (G0073) aka APT19, Codoso, C0d0so0… | unknown | — | MandAPT19 | National SecuritySecurities, Commodity Contracts & Other Financial InvestmentsMining, Quarrying, Oil & Gas ExtractionChemical ManufacturingTelecommunications+7 more | IBMBoschSymantec | — | 3 | 32 | 8.7 | — | 2021 |
| APT28 (G0007) aka APT28, IRON TWILIGHT, SNAKEMACKEREL… | state | 🇷🇺 RU | MSPawn StormMSForest BlizzardMSSTRONTIUMCSFancy BearMandAPT28SWIRON TWILIGHT | Public AdministrationElectric Power Generation, Transmission & DistributionChemical ManufacturingNational Security | Microsoft | World Anti-Doping AgencyUS Anti-Doping AgencyOrganization for the Prohibition of Chemical Weapons+4 more ⇄1 | 1 | 129 | 1.2 | 1.8 | 2026 |
| APT29 (G0016) aka APT29, IRON RITUAL, IRON HEMLOCK… | state | 🇷🇺 RU | MSMidnight BlizzardCSCozy BearMandAPT29MandUNC2452MandUNC3524SWIRON HEMLOCK | National SecurityExecutive, Legislative & Other General Government SupportProfessional, Scientific & Technical ServicesSoftware PublishersHealth Care & Social Assistance+3 more | MicrosoftKubernetes | 3 | 96 | 9.1 | 0.2 | 2026 | |
| APT3 (G0022) aka APT3, Gothic Panda, Pirpi… | state-contractor | 🇨🇳 CN | CSGothic PandaMandAPT3 | Aerospace Product & Parts ManufacturingConstructionComputer & Electronic Product ManufacturingTelecommunicationsTransportation & Warehousing+1 more | BoschSymantec | — | 2 | 69 | 4.4 | — | 2021 |
| APT30 (G0013) aka APT30, G0013, ISTHMUS CASTLE… | state | 🇨🇳 CN | MandAPT30 | National SecurityExecutive, Legislative & Other General Government SupportAerospace Product & Parts ManufacturingTelecommunicationsBroadcasting+1 more | — | — | 0 | 4 | 0.0 | — | — |
| APT32 (G0050) aka APT32, SeaLotus, OceanLotus… | state | 🇻🇳 VN | MSCanvas CycloneCSOcean BuffaloMandAPT32 | Public AdministrationManufacturingAccommodation & Food ServicesFinance & InsurancePublishing Industries (Including Software)+3 more | — | — | 0 | 106 | 0.0 | — | — |
| APT33 (G0064) aka APT33, HOLMIUM, Elfin… | state | 🇮🇷 IR | MSPeach SandstormMSHOLMIUMCSRefined KittenMandAPT33 | Aerospace Product & Parts ManufacturingOil & Gas ExtractionChemical ManufacturingProfessional, Scientific & Technical ServicesPublic Administration+2 more | — | — | 0 | 47 | 0.0 | — | — |
| APT37 (G0067) aka APT37, InkySquid, ScarCruft… | state | 🇰🇵 KP | CSRicochet ChollimaMandAPT37MandTEMP.ReaperCscoGroup123 | National SecurityPublic AdministrationChemical ManufacturingComputer & Electronic Product ManufacturingAerospace Product & Parts Manufacturing+5 more | AdobeMicrosoftApple+3 | — | 4 | 40 | 17.2 | — | 2016 |
| APT38 (G0082) aka APT38, NICKEL GLADSTONE, BeagleBoyz… | state | 🇰🇵 KP | MSSapphire SleetCSStardust ChollimaMandAPT38CISABeagleBoyz | Credit Intermediation & Related Activities (Banking)Securities, Commodity Contracts & Other Financial InvestmentsArts, Entertainment & RecreationFinance & Insurance | MicrosoftAdobeApple | Bank of BangladeshBancomextBanco de Chile | 2 | 77 | 5.5 | 0.8 | 2026 |
| APT39 (G0087) aka APT39, ITG07, Chafer… | state | 🇮🇷 IR | MSBurgundy SandstormCSRemix KittenMandAPT39 | TelecommunicationsAccommodation & Food ServicesEducational ServicesTransportation & Warehousing | — | — | 0 | 72 | 0.0 | — | — |
| APT41 (G0096) aka APT41, Wicked Panda, Brass Typhoon… | state-contractor | 🇨🇳 CN | MSBrass TyphoonCSWicked PandaMandAPT41 | Health Care & Social AssistanceTelecommunicationsSoftware PublishersFinance & InsuranceEducational Services+2 more | BoschSymantec | — | 2 | 115 | 4.4 | — | 2021 |
| APT42 (G1044) aka APT42, UNC788, CALANQUE… | state | 🇮🇷 IR | MandAPT42 | Public AdministrationInformationEducational ServicesOther Services (except Public Administration)Professional, Scientific & Technical Services+2 more | — | — | 0 | 47 | 0.0 | — | — |
| APT5 (G1023) aka APT5, Mulberry Typhoon, MANGANESE… | state | 🇨🇳 CN | MSMulberry TyphoonCSKeyhole PandaMandAPT5MandUNC2630MandTEMP.BottleSWBRONZE FLEETWOOD | TelecommunicationsAerospace Product & Parts ManufacturingNational SecuritySoftware Publishers | — | — | 0 | 42 | 0.0 | — | — |
| ASML China data-misappropriation disclosure (2024) (INS-ASML-CHINA-2024) aka ASML China data-misappropriation disclosure (2024), ASML 2024 China leak… | insider | 🇳🇱 NL | — | Semiconductor: lithography equipment | — | ASML ⇄4 | 0 | 0 | 0.0 | 1.0 | — |
| ASML former employee (PRC IP transfer 2023) (INS-ASML-EMPLOYEE-2023) aka ASML former employee (PRC IP transfer 2023), ASML insider 2023… | insider | 🇳🇱 NL | — | Semiconductor: lithography equipment | — | ASML ⇄4 | 0 | 0 | 0.0 | 1.0 | — |
| ASML former employee unauthorised data transfer (NL, 2015) (INS-ASML-SHANGHAI-2015) aka ASML former employee unauthorised data transfer (NL, 2015), ASML NL 2015 insider… | insider | 🇳🇱 NL | — | Semiconductor: lithography equipmentSemiconductor: lithography service | — | ASML ⇄4 | 0 | 0 | 0.0 | 0.5 | — |
| Aaron Swartz (JSTOR / PACER access) (HACK-SWARTZ-JSTOR) aka Aaron Swartz (JSTOR / PACER access), Aaron Swartz… | hacktivist | — | — | Academia: scholarly publishingGovernment: court records | — | JSTORMIT | 0 | 0 | 0.0 | 1.0 | — |
| Adidas AG (Nike 3-designer civil suit 2014) (COMP-ADIDAS-NIKE-2014) aka Adidas AG (Nike 3-designer civil suit 2014), Adidas, Adidas Group… | competitor | 🇩🇪 DE | — | Consumer products: athletic footwearConsumer products: apparel | — | Nike | 0 | 0 | 0.0 | 0.5 | — |
| Agrius (G1030) aka Agrius, Pink Sandstorm, AMERICIUM… | state | 🇮🇷 IR | MSPink SandstormCSSPECTRAL KITTENMandUNC2428 | Food ManufacturingInsurance Carriers & Related ActivitiesHealth Care & Social AssistanceManufacturingInformation | — | — | 0 | 30 | 0.0 | — | — |
| Airbus Defence & Space export-control employee case (FR 2015) (INS-AIRBUS-FRANCE-2015) aka Airbus Defence & Space export-control employee case (FR 2015), Airbus DS export control 2015… | insider | 🇫🇷 FR | — | Aerospace: space systemsDefense: satellite components | — | Airbus Defence & Space | 0 | 0 | 0.0 | 0.5 | — |
| Airbus French-procurement insider disclosure (FR/UK DPA, 2020) (INS-AIRBUS-CFIUS-2020) aka Airbus French-procurement insider disclosure (FR/UK DPA, 2020), Airbus DPA 2020 insider… | insider | 🇫🇷 FR | — | Aerospace: commercial aircraftDefense: military aircraft | — | Airbus ⇄2 | 0 | 0 | 0.0 | 0.5 | — |
| Airbus Helicopters (Eurocopter, Sikorsky composite-blade case) (COMP-AIRBUS-EUROCOPTER-DEFENDANT) aka Airbus Helicopters (Eurocopter, Sikorsky composite-blade case), Airbus Helicopters, Eurocopter… | competitor | 🇫🇷 FR | — | Aerospace: helicoptersDefense: rotorcraftAerospace: composite materials | — | — | 0 | 0 | 0.0 | — | — |
| Airbus SE (Boeing 787 fuselage civil counter-claim 2010) (COMP-AIRBUS-BOEING-CIVIL) aka Airbus SE (Boeing 787 fuselage civil counter-claim 2010), Airbus, Airbus SE… | competitor | 🇳🇱 NL | — | Aerospace: commercial aviationAerospace: composite materials | — | — | 0 | 0 | 0.0 | — | — |
| Airbus supplier-chain intrusion series (2019) (INS-AIRBUS-SUPPLIERS-2019) aka Airbus supplier-chain intrusion series (2019), Airbus 2019 supplier breach… | insider | 🇫🇷 FR | — | Aerospace: commercial aviationDefense: aerospace | — | 0 | 0 | 0.0 | 1.5 | — | |
| Ajax Security Team (G0130) aka Ajax Security Team, Operation Woolen-Goldfish, AjaxTM… | state | 🇮🇷 IR | CSRocket KittenCSFlying KittenMandOperation Saffron RoseMandTEMP.Beanie | Aerospace Product & Parts ManufacturingNational SecurityPublic AdministrationEducational ServicesOther Services (except Public Administration) | Microsoft | — | 1 | 10 | 1.2 | — | 2026 |
| Akira (G1024) aka Akira, GOLD SAHARA, PUNK SPIDER… | criminal | — | CSPUNK SPIDERSWGOLD SAHARACISAAkira | ManufacturingEducational ServicesFinance & InsuranceHealth Care & Social AssistanceConstruction+4 more | Cisco | — | 1 | 24 | 4.3 | — | 2023 |
| Al-Toufan (HACK-AL-TOUFAN) aka Al-Toufan, Anonymous Al-Toufan… | hacktivist | — | — | GovernmentMediaOnline services | — | — | 0 | 0 | 0.0 | — | — |
| Allen Ho (CB&I/TVA nuclear tech) (INS-HO-2017) aka Allen Ho (CB&I/TVA nuclear tech), Allen Ho, Szuhsiung Ho… → China General Nuclear Power Corp (CGNPC) | insider | 🇺🇸 US | — | Nuclear power: utility-scaleEnergy: power generation | — | — | 0 | 0 | 0.0 | — | — |
| Amazon.com (Walmart logistics engineer recruitment civil claims) (COMP-AMAZON-WALMART-LOGISTICS) aka Amazon.com (Walmart logistics engineer recruitment civil claims), Amazon, Amazon.com Inc… | competitor | 🇺🇸 US | — | E-commerce: logisticsSoftware: supply chain | — | Walmart | 0 | 0 | 0.0 | 0.5 | — |
| Andariel (G0138) aka Andariel, Silent Chollima, PLUTONIUM… | state | 🇰🇵 KP | MSOnyx SleetCSSilent Chollima | Executive, Legislative & Other General Government SupportNational SecurityCredit Intermediation & Related Activities (Banking)Securities, Commodity Contracts & Other Financial InvestmentsFinance & Insurance+1 more | cmsMicrosoftPhp Everywhere Project+9 | — | 11 | 18 | 31.9 | — | 2022 |
| Andrew Auernheimer ('weev', Goatse Security) (HACK-AUERNHEIMER-WEEV) aka Andrew Auernheimer ('weev', Goatse Security), weev, Andrew Auernheimer… | hacktivist | — | — | Telecommunications: mobileTechnology platforms | — | AT&T ⇄1 | 0 | 0 | 0.0 | 0.5 | — |
| Anming Hu (Univ. of Tennessee / NASA disclosure case) (INS-HU-TENNESSEE-2021) aka Anming Hu (Univ. of Tennessee / NASA disclosure case), Anming Hu, Hu Anming… | insider | 🇺🇸 US | — | Academia: nanomaterials researchAerospace: NASA-funded research | — | University of TennesseeNASA | 0 | 0 | 0.0 | 1.0 | — |
| AnonOps (HACK-ANONOPS) aka AnonOps, AnonOps IRC, Operation Payback core… | hacktivist | — | — | Financial servicesOnline servicesEntertainment: gaming servicesGovernmentReligious institutions+2 more | — | MPAARIAAVisa+3 more | 0 | 0 | 0.0 | 0.9 | — |
| Anonymous Brasil (HACK-ANONYMOUS-BRASIL) aka Anonymous Brasil, AnonBrasil, Anonymous Brazil… | hacktivist | — | — | GovernmentFinancial services | — | — | 0 | 0 | 0.0 | — | — |
| Anonymous Collective (HACK-ANONYMOUS-COLLECTIVE) aka Anonymous Collective, Skynet Collective… | hacktivist | 🇷🇺 RU | — | GovernmentFinancial services | — | — | 0 | 0 | 0.0 | — | — |
| Anonymous Darknet Parliament (HACK-INDONESIAN-DARKNET-PARLIAMENT) aka Anonymous Darknet Parliament, Darknet Parliament… | hacktivist | 🇷🇺 RU | — | BankingGovernmentOnline services | — | SWIFT | 0 | 0 | 0.0 | 0.3 | — |
| Anonymous France (HACK-ANONYMOUS-FRANCE) aka Anonymous France, AnonFR, OpFrance… | hacktivist | — | — | GovernmentMediaOnline services | — | — | 0 | 0 | 0.0 | — | — |
| Anonymous Indonesia (HACK-ANONYMOUS-INDONESIA) aka Anonymous Indonesia, AnonID… | hacktivist | 🇮🇩 ID | — | GovernmentIntelligence agencies | — | Australian governmentASIO | 0 | 0 | 0.0 | 1.0 | — |
| Anonymous Italia (HACK-ANONYMOUS-ITALIA) aka Anonymous Italia, AnonItalia, AnonPlus… | hacktivist | — | — | GovernmentReligious institutionsEducational institutions | — | Italian Ministry of DefenseVatican | 0 | 0 | 0.0 | 0.7 | — |
| Anonymous Korea (HACK-ANONYMOUS-KOREA) aka Anonymous Korea, AnonKorea, OpNorthKorea… | hacktivist | — | — | GovernmentMediaOnline services | — | Uriminzokkiri | 0 | 0 | 0.0 | 0.3 | — |
| Anonymous Pakistan (HACK-ANONYMOUS-PAKISTAN) aka Anonymous Pakistan, AnonPak… | hacktivist | — | — | GovernmentMedia | — | ECP | 0 | 0 | 0.0 | 0.5 | — |
| Anonymous Philippines (HACK-ANONYMOUS-PH) aka Anonymous Philippines, AnonPH… | hacktivist | 🇵🇭 PH | — | Government: electionsGovernment | — | — | 0 | 0 | 0.0 | — | — |
| Anonymous Russia (HACK-ANONYMOUS-RUSSIA) aka Anonymous Russia, AnonymousRussia, Raty (persona)… | hacktivist | 🇷🇺 RU | — | GovernmentOnline services | — | — | 0 | 0 | 0.0 | — | — |
| Anonymous Spain (HACK-ANONYMOUS-SPAIN) aka Anonymous Spain, AnonSpain, OpCataluna… | hacktivist | — | — | GovernmentGovernment: stateOnline services | — | — | 0 | 0 | 0.0 | — | — |
| Anonymous Sudan (HACK-ANONYMOUS-SUDAN) aka Anonymous Sudan, Storm-1359… | hacktivist | — | — | Financial servicesTechnology platformsGovernmentHealthcare | — | — | 0 | 0 | 0.0 | — | — |
| Anonymous Thailand (HACK-ANONYMOUS-THAILAND) aka Anonymous Thailand, AnonThailand, OpSingleGateway… | hacktivist | — | — | GovernmentOnline services | — | Royal Thai PoliceICT Ministry | 0 | 0 | 0.0 | 1.0 | — |
| Anonymous Vietnam (HACK-ANONYMOUS-VIETNAM) aka Anonymous Vietnam, AnonVN… | hacktivist | — | — | GovernmentOnline services | — | — | 0 | 0 | 0.0 | — | — |
| Anthony Levandowski (INS-LEVANDOWSKI-2017) aka Anthony Levandowski, Levandowski… → Uber Technologies (Waymo IP-theft beneficiary) | insider | 🇺🇸 US | — | Automotive: autonomous vehiclesSoftware: machine learning | — | 0 | 0 | 0.0 | 1.5 | — | |
| Anthropic (OpenAI / Google researcher-recruitment claims) (COMP-ANTHROPIC-OPENAI) aka Anthropic (OpenAI / Google researcher-recruitment claims), Anthropic, Anthropic PBC… | competitor | 🇺🇸 US | — | Software: artificial intelligenceSoftware: machine learning | — | OpenAI | 0 | 0 | 0.0 | 0.5 | — |
| Aoqin Dragon (G1007) aka Aoqin Dragon, UNC94… | state | 🇨🇳 CN | — | Public AdministrationEducational ServicesTelecommunicationsUtilities | Microsoft | — | 1 | 13 | 2.7 | — | 2022 |
| Apple Inc. (Masimo pulse-oximetry trade-secret 2020-2024) (COMP-APPLE-MASIMO) aka Apple Inc. (Masimo pulse-oximetry trade-secret 2020-2024), Apple, Apple Inc… | competitor | 🇺🇸 US | — | Consumer electronics: wearablesMedical devices: pulse oximetry | — | MasimoCercacor | 0 | 0 | 0.0 | 1.0 | — |
| AppleJeus (G1049) aka AppleJeus, Gleaming Pisces, Citrine Sleet… | state | 🇰🇵 KP | MSCitrine SleetMandUNC1720MandUNC4736 | Securities, Commodity Contracts & Other Financial InvestmentsSoftware PublishersFinance & InsurancePublic Administration | — | 0 | 2 | 0.0 | 0.5 | — | |
| Aquatic Panda (G0143) aka Aquatic Panda, Earth Lusca, CHROMIUM… | state | 🇨🇳 CN | MSCharcoal TyphoonCSAquatic Panda | TelecommunicationsInformationPublic Administration | Microsoft | — | 1 | 49 | 1.2 | — | 2026 |
| Atos SE (Sopra Steria / Capgemini civil disputes) (COMP-ATOS-SOPRA) aka Atos SE (Sopra Steria / Capgemini civil disputes), Atos, Atos SE… | competitor | 🇫🇷 FR | — | IT services: consultingCybersecurity: government | — | 0 | 0 | 0.0 | 1.5 | — | |
| Australian PLA-PhD-student visa-cancellation cohort (AU, 2020) (INS-AUSTRALIAN-PLA-PHD-2020) aka Australian PLA-PhD-student visa-cancellation cohort (AU, 2020), Australia PLA PhD 2020… | insider | 🇦🇺 AU | — | Academia: defence researchGovernment: foreign-influence transparency | — | — | 0 | 0 | 0.0 | — | — |
| Avant! Corporation (Cadence Design Systems case) (COMP-AVANT) aka Avant! Corporation (Cadence Design Systems case), Avant!, Avant Corporation… | competitor | 🇺🇸 US | — | Software: EDA / chip-design toolsSemiconductor: design automation | — | Cadence | 0 | 0 | 0.0 | 0.5 | — |
| Axiom (G0001) aka Axiom, Group 72… | state | 🇨🇳 CN | — | Aerospace Product & Parts ManufacturingNational SecurityPublic AdministrationManufacturingBroadcasting | — | — | 0 | 22 | 0.0 | — | — |
| BAE Systems SFO Al-Yamamah insider disclosures (INS-BAESYSTEMS-SFO-2010) aka BAE Systems SFO Al-Yamamah insider disclosures, BAE Systems Al-Yamamah SFO… | insider | 🇬🇧 GB | — | Defense: military aircraftDefense: arms trade | — | BAE Systems ⇄1 | 0 | 0 | 0.0 | 0.5 | — |
| BAIC Group (Daimler / Hyundai alleged engineer beneficiary) (COMP-BAIC) aka BAIC Group (Daimler / Hyundai alleged engineer beneficiary), BAIC, BAIC Group… | competitor | 🇨🇳 CN | — | Automotive: vehicle manufacturingAutomotive: electric vehicles | — | 0 | 0 | 0.0 | 1.0 | — | |
| BD-NETBIOS Cyber Force (HACK-BD-NETBIOS) aka BD-NETBIOS Cyber Force, BD NETBIOS, Bangladesh NetBIOS… | hacktivist | — | — | GovernmentMedia | — | — | 0 | 0 | 0.0 | — | — |
| BITTER (G1002) aka BITTER, T-APT-17, HAZY TIGER… | state | 🇮🇳 IN | CSHAZY TIGERCscoBITTER | Public AdministrationOil & Gas ExtractionProfessional, Scientific & Technical ServicesUtilities | — | — | 0 | 26 | 0.0 | — | — |
| BMW AG (Mercedes / Daimler civil engineer-recruitment disputes) (COMP-BMW-MERCEDES-2021) aka BMW AG (Mercedes / Daimler civil engineer-recruitment disputes), BMW, Bayerische Motoren Werke AG… | competitor | 🇩🇪 DE | — | Automotive: vehicle manufacturingAutomotive: electric vehicles | — | Daimler/MercedesAudiPorsche | 0 | 0 | 0.0 | 1.5 | — |
| BO Team (HACK-BO-TEAM) aka BO Team, BO_Team… | hacktivist | — | — | BankingFinancial servicesGovernment | — | IPL Consulting | 0 | 0 | 0.0 | 0.3 | — |
| BOE Technology (Samsung Display OLED ITC trade-secret 2023-2025) (COMP-BOE-SAMSUNG-OLED) aka BOE Technology (Samsung Display OLED ITC trade-secret 2023-2025), BOE, BOE Technology Group… | competitor | 🇨🇳 CN | — | Electronics: OLED displaysConsumer electronicsElectronics: LCD displays | — | 0 | 0 | 0.0 | 0.7 | — | |
| BRONZE BUTLER (G0060) aka BRONZE BUTLER, REDBALDKNIGHT, Tick… | state | 🇨🇳 CN | MSSwirl TyphoonCSSTALKER PANDAMandTEMP.TickSWBRONZE BUTLER | Public AdministrationChemical ManufacturingComputer & Electronic Product ManufacturingManufacturing | — | — | 0 | 58 | 0.0 | — | — |
| BYD Company (alleged Tesla cases) (COMP-BYD-TESLA) aka BYD Company (alleged Tesla cases), BYD, BYD Company… | competitor | 🇨🇳 CN | — | Automotive: electric vehiclesAutomotive: EV batteriesAutomotive: autonomous vehicles | — | Tesla ⇄5 | 0 | 0 | 0.0 | 0.3 | — |
| BackdoorDiplomacy (G0135) aka BackdoorDiplomacy, BackDip, CloudComputating… | unknown | — | — | International AffairsTelecommunications | — | — | 0 | 21 | 0.0 | — | — |
| Baidu Apollo (Waymo / Tesla alleged engineer beneficiary) (COMP-BAIDU-APOLLO) aka Baidu Apollo (Waymo / Tesla alleged engineer beneficiary), Baidu, Baidu Apollo… | competitor | 🇨🇳 CN | — | Automotive: autonomous vehiclesSoftware: machine learning | — | 0 | 0 | 0.0 | 1.5 | — | |
| Bayer agro-chemistry employee case (DE 2018) (INS-BAYER-2018) aka Bayer agro-chemistry employee case (DE 2018), Bayer Leverkusen insider 2018… | insider | 🇩🇪 DE | — | Specialty chemicals: agrochemicalsAgritech: crop protection | — | Bayer | 0 | 0 | 0.0 | 0.5 | — |
| Belarusian Cyber Partisans (HACK-CYBER-PARTISANS) aka Cyber Partisans, Belarusian Cyber Partisans, Кибер Партизаны… | hacktivist | 🇧🇾 BY | — | GovernmentTransportation: railLaw enforcement | — | Belarusian RailwaysBelarus Ministry of Internal Affairs | 0 | 0 | 0.0 | 0.7 | — |
| Beregini (HACK-BEREGINI) aka Beregini, Beregini Hack… | hacktivist | 🇷🇺 RU | — | GovernmentMediaDefense contractors | — | — | 0 | 0 | 0.0 | — | — |
| Bitmain / Taiwan IC-design engineer indictment (TW, 2018) (INS-TAIWAN-NETSPEED-2018) aka Bitmain / Taiwan IC-design engineer indictment (TW, 2018), Taiwan IC design 2018… | insider | 🇹🇼 TW | — | Semiconductor: AI accelerator architectureSemiconductor: chip design | — | — | 0 | 0 | 0.0 | — | — |
| Black Shadow (HACK-BLACK-SHADOW) aka Black Shadow, BlackShadow… | hacktivist | 🇮🇷 IR | — | Financial servicesHealthcareOnline services | — | 0 | 0 | 0.0 | 0.7 | — | |
| Black Skills (HACK-BLACK-SKILLS) aka Black Skills, Black Owl (KillMilk affiliate)… | hacktivist | 🇷🇺 RU | — | Defense contractorsGovernmentCritical infrastructure | — | — | 0 | 0 | 0.0 | — | — |
| BlackBasta (MISP-9db5f425) aka BlackBasta… | criminal | — | — | — | — | — | 0 | 1 | 0.0 | — | — |
| BlackByte (G1043) aka BlackByte, Hecamede… | criminal | — | MSBlackByte | Public AdministrationFinance & InsuranceAgriculture, Forestry, Fishing & HuntingEducational ServicesUtilities+2 more | Msi | — | 3 | 66 | 12.9 | — | 2026 |
| BlackOasis (G0063) aka BlackOasis, G0063… | unknown | — | — | International AffairsBroadcastingProfessional, Scientific & Technical ServicesOther Services (except Public Administration) | — | — | 0 | 1 | 0.0 | — | — |
| BlackTech (G0098) aka BlackTech, Palmerworm, CIRCUIT PANDA… | state | 🇨🇳 CN | MSCanary TyphoonCSCIRCUIT PANDAMandTemp.Overboard | BroadcastingConstructionProfessional, Scientific & Technical ServicesComputer & Electronic Product ManufacturingFinance & Insurance | — | — | 0 | 20 | 0.0 | — | — |
| Blue Mockingbird (G0108) aka Blue Mockingbird… | unknown | — | — | Securities, Commodity Contracts & Other Financial Investments | — | — | 0 | 35 | 0.0 | — | — |
| Bo Mao (CNEX Labs / Huawei flash-storage IP) (INS-MAO-CNEX-2020) aka Bo Mao (CNEX Labs / Huawei flash-storage IP), Bo Mao… | insider | 🇺🇸 US | — | Semiconductor: NAND flash memorySoftware: SSD firmware | — | CNEX Labs | 0 | 0 | 0.0 | 0.5 | — |
| CATL (Contemporary Amperex Technology) (COMP-CATL) aka CATL (Contemporary Amperex Technology), CATL, Contemporary Amperex Technology… | competitor | 🇨🇳 CN | — | Automotive: EV batteriesElectronics: lithium-ion cells | — | 0 | 0 | 0.0 | 1.5 | — | |
| CURIUM (G1012) aka CURIUM, Crimson Sandstorm, TA456… | state | 🇮🇷 IR | MSCrimson SandstormMSSmoke SandstormMSCuboid SandstormCSIMPERIAL KITTEN | Professional, Scientific & Technical ServicesAerospace Product & Parts ManufacturingBroadcasting | — | — | 0 | 29 | 0.0 | — | — |
| Capgemini SE (IT-consultancy non-compete civil disputes) (COMP-CAPGEMINI-IT) aka Capgemini SE (IT-consultancy non-compete civil disputes), Capgemini, Capgemini SE… | competitor | 🇫🇷 FR | — | IT services: consultingIT services: systems integration | — | 0 | 0 | 0.0 | 1.5 | — | |
| Carbanak (G0008) aka Carbanak, Anunak, FIN7… | state | 🇷🇺 RU | MSSangria TempestCSCARBON SPIDERMandFIN7KSPCarbanak | Credit Intermediation & Related Activities (Banking)Finance & InsuranceSoftware Publishers | — | — | 0 | 14 | 0.0 | — | — |
| Cause Direct Action (CauseDIA) (HACK-CAUSE-DIA) aka Cause Direct Action (CauseDIA), CauseDIA… | hacktivist | — | — | GovernmentDefense contractors | — | — | 0 | 0 | 0.0 | — | — |
| ChangXin Memory Technologies (CXMT / DRAM) (COMP-CXMT) aka ChangXin Memory Technologies (CXMT / DRAM), CXMT, ChangXin Memory… | competitor | 🇨🇳 CN | — | Semiconductor: DRAM memory | — | 0 | 0 | 0.0 | 2.0 | — | |
| Charles Lieber (Harvard / Thousand Talents) (INS-LIEBER-2020) aka Charles Lieber (Harvard / Thousand Talents), Charles Lieber, Charles M. Lieber… | insider | 🇺🇸 US | — | Academic research: chemistryNanotechnology | — | Harvard | 0 | 0 | 0.0 | 0.5 | — |
| Chen Li-ming (TSMC 2nm leak to Tokyo Electron) (INS-CHEN-TSMC-2026) aka Chen Li-ming (TSMC 2nm leak to Tokyo Electron), Chen Li-ming, TSMC 2nm leak ringleader… | insider | 🇹🇼 TW | — | Semiconductor: chip fabricationSemiconductor: process equipment | — | TSMC ⇄2 | 0 | 0 | 0.0 | 0.5 | — |
| Chen Zhengkun (UMC / Fujian Jinhua / Micron DRAM) (INS-UMC-JINHUA-CHEN-2020) aka Chen Zhengkun (UMC / Fujian Jinhua / Micron DRAM), Stephen Chen, Chen Zhengkun… → Fujian Jinhua Integrated Circuit (DRAM) | insider | 🇹🇼 TW | — | Semiconductor: DRAM memory | — | Micron Memory Taiwan | 0 | 0 | 0.0 | 1.0 | — |
| Chernovite (MISP-2ce00149) aka Chernovite… | state | 🇷🇺 RU | — | — | Asrock | — | 1 | 0 | 4.3 | — | 2020 |
| Chi Mak (Power Paragon / US Navy quiet propulsion) (INS-MAK-2007) aka Chi Mak (Power Paragon / US Navy quiet propulsion), Chi Mak, Mak Chi… | insider | 🇺🇸 US | — | Defense: naval propulsionDefense: submarine systems | — | Power ParagonUS NavyNaval-Sea-Systems | 0 | 0 | 0.0 | 1.5 | — |
| Chimera (G0114) aka Chimera… | state | 🇨🇳 CN | — | Computer & Electronic Product ManufacturingAir Transportation | — | — | 0 | 82 | 0.0 | — | — |
| China General Nuclear Power Corp (CGNPC) (COMP-CGNPC) aka China General Nuclear Power Corp (CGNPC), CGNPC, China General Nuclear Power Corporation… | competitor | 🇨🇳 CN | — | Nuclear power: utility-scaleEnergy: power generation | — | — | 0 | 0 | 0.0 | — | — |
| Cinnamon Tempest (G1021) aka Cinnamon Tempest, DEV-0401, Emperor Dragonfly… | state | 🇨🇳 CN | MSCinnamon Tempest | ManufacturingHealth Care & Social AssistanceInformationFinance & InsurancePublic Administration+1 more | What3Words | — | 1 | 26 | 4.3 | — | 2023 |
| Citadel Securities (Jump Trading trade-secret 2014-2016) (COMP-CITADEL-JUMP) aka Citadel Securities (Jump Trading trade-secret 2014-2016), Citadel, Citadel Securities LLC… | competitor | 🇺🇸 US | — | Financial services: high-frequency tradingSoftware: trading systems | — | — | 0 | 0 | 0.0 | — | — |
| Cleaver (G0003) aka Cleaver, Threat Group 2889, TG-2889… | state | 🇮🇷 IR | — | Oil & Gas ExtractionElectric Power Generation, Transmission & DistributionChemical ManufacturingAerospace Product & Parts ManufacturingAir Transportation+5 more | — | — | 0 | 10 | 0.0 | — | — |
| Clop (MISP-21b349c3) aka Clop, Cl0p… | criminal | — | — | — | network-edgeCitrix | — | 3 | 0 | 11.5 | — | 2023 |
| Cloudflare (Akamai trade-secret civil claims) (COMP-CLOUDFLARE-AKAMAI) aka Cloudflare (Akamai trade-secret civil claims), Cloudflare, Cloudflare Inc… | competitor | 🇺🇸 US | — | Internet infrastructure: CDNCybersecurity: edge | — | AkamaiFastly | 0 | 0 | 0.0 | 1.0 | — |
| Cobalt Group (G0080) aka Cobalt Group, GOLD KINGSWOOD, Cobalt Gang… | unknown | — | CSCobalt SpiderSWGOLD KINGSWOODCscoCobalt Group | Credit Intermediation & Related Activities (Banking)Finance & InsuranceSoftware Publishers | — | — | 0 | 52 | 0.0 | — | — |
| Coinbase Global (Binance.US civil exchange-engineer claims) (COMP-COINBASE-BINANCE-US) aka Coinbase Global (Binance.US civil exchange-engineer claims), Coinbase, Coinbase Global Inc… | competitor | 🇺🇸 US | — | Financial services: cryptocurrency exchangesSoftware: trading systems | — | — | 0 | 0 | 0.0 | — | — |
| Confucius (G0142) aka Confucius, Confucius APT… | unknown | — | — | National SecurityExecutive, Legislative & Other General Government SupportPublic Administration | — | — | 0 | 28 | 0.0 | — | — |
| Contagious Interview (G1052) aka Contagious Interview, DeceptiveDevelopment, Gwisin Gang… | state | 🇰🇵 KP | CSFamous ChollimaMandUNC5267 | Software PublishersSecurities, Commodity Contracts & Other Financial InvestmentsProfessional, Scientific & Technical Services | — | — | 0 | 71 | 0.0 | — | — |
| Conti Leaks (anti-Russia insider) (HACK-CONTI-LEAKS) aka Conti Leaks (anti-Russia insider), ContiLeaks, @ContiLeaks… | hacktivist | — | — | Technology platformsOnline services | — | — | 0 | 0 | 0.0 | — | — |
| Continental AG (Bosch / Schaeffler civil disputes) (COMP-CONTINENTAL-BOSCH) aka Continental AG (Bosch / Schaeffler civil disputes), Continental, Continental AG… | competitor | 🇩🇪 DE | — | Automotive: parts manufacturingAutomotive: ADAS | — | 0 | 0 | 0.0 | 1.0 | — | |
| CopyKittens (G0052) aka CopyKittens, Slayer Kitten, G0052… | state | 🇮🇷 IR | CSSlayer Kitten | Public AdministrationEducational ServicesTelecommunicationsInformation | — | — | 0 | 14 | 0.0 | — | — |
| Coupa Software (SAP Ariba civil claims over employee defection) (COMP-COUPA-SAP-ARIBA) aka Coupa Software (SAP Ariba civil claims over employee defection), Coupa, Coupa Software Inc… | competitor | 🇺🇸 US | — | Enterprise software: spend managementEnterprise software: procurement | — | — | 0 | 0 | 0.0 | — | — |
| Crackas With Attitude (Kane Gamble) (HACK-CRACKAS-WITH-ATTITUDE) aka Crackas With Attitude (Kane Gamble), Crackas With Attitude, CWA… | hacktivist | — | — | IntelligenceLaw enforcementGovernment: cabinet officials | — | 0 | 0 | 0.0 | 1.0 | — | |
| CrowdStrike (McAfee / Symantec civil claims) (COMP-CROWDSTRIKE-MCAFEE) aka CrowdStrike (McAfee / Symantec civil claims), CrowdStrike, CrowdStrike Holdings Inc… | competitor | 🇺🇸 US | — | Cybersecurity: endpoint protectionCybersecurity: threat intelligence | — | McAfeeSymantec/NortonLifeLock | 0 | 0 | 0.0 | 1.0 | — |
| Crypt32 (MISP-705e03d1) aka Crypt32… | criminal | — | — | — | Microsoft | — | 3 | 0 | 12.9 | — | 2020 |
| Cult of the Dead Cow (cDc) (HACK-CULT-DEAD-COW) aka Cult of the Dead Cow (cDc), Cult of the Dead Cow, cDc… | hacktivist | 🇺🇸 US | — | Software: consumerGovernmentSurveillance technology | — | Microsoft ⇄2 | 0 | 0 | 0.0 | 0.3 | — |
| Cyber Toufan (HACK-CYBER-TOUFAN) aka Cyber Toufan, Cyber Toufan Al-Aqsa, Cyber Toufan Operations… | hacktivist | 🇮🇷 IR | — | Technology platformsOnline servicesCritical infrastructure | — | — | 0 | 0 | 0.0 | — | — |
| CyberAv3ngers (IRGC-linked) (HACK-CYBER-AVENGERS) aka CyberAv3ngers (IRGC-linked), CyberAv3ngers, Cyber Av3ngers… | hacktivist | 🇮🇷 IR | — | Critical infrastructure: water utilitiesManufacturing: industrial control systems | — | — | 0 | 0 | 0.0 | — | — |
| DBN Group / Beijing Dabeinong Technology (COMP-DBN) aka DBN Group / Beijing Dabeinong Technology, DBN Group, Beijing Dabeinong… | competitor | 🇨🇳 CN | — | Agritech: seed geneticsAgriculture: corn | — | — | 0 | 0 | 0.0 | — | — |
| DDoS Crimea (HACK-DDOS-CRIMEA) aka DDoS Crimea, Crimea Defense Team… | hacktivist | 🇷🇺 RU | — | GovernmentMedia | — | — | 0 | 0 | 0.0 | — | — |
| DJI / SZ DJI Technology (Textron $279M drone-patent verdict) (COMP-DJI) aka DJI / SZ DJI Technology (Textron $279M drone-patent verdict), DJI, SZ DJI Technology… | competitor | 🇨🇳 CN | — | Consumer electronics: dronesAerospace: UAS | — | TextronBellInsta360 | 0 | 0 | 0.0 | 1.5 | — |
| Daggerfly (G1034) aka Daggerfly, Evasive Panda, BRONZE HIGHLAND… | state | 🇨🇳 CN | CSEvasive Panda | TelecommunicationsPublic AdministrationOther Services (except Public Administration)Software Publishers | — | — | 0 | 30 | 0.0 | — | — |
| Dark Caracal (G0070) aka Dark Caracal, G0070… | state | 🌍 LB | — | National SecurityPublic AdministrationFinance & InsuranceProfessional, Scientific & Technical ServicesInformation+1 more | — | — | 0 | 19 | 0.0 | — | — |
| DarkHydrus (G0079) aka DarkHydrus, LazyMeerkat, G0079… | unknown | — | — | Public AdministrationEducational Services | — | — | 0 | 12 | 0.0 | — | — |
| DarkVishnya (G0105) aka DarkVishnya… | unknown | — | — | Credit Intermediation & Related Activities (Banking)Finance & Insurance | — | — | 0 | 13 | 0.0 | — | — |
| Darkhotel (G0012) aka Darkhotel, DUBNIUM, Zigzag Hail… | state | 🇰🇷 KR | MSZigzag HailMSDUBNIUMCSShadow CraneKSPDarkhotel | Computer & Electronic Product ManufacturingChemical ManufacturingAerospace Product & Parts ManufacturingOther Services (except Public Administration)Public Administration+2 more | — | — | 0 | 34 | 0.0 | — | — |
| Dassault Aviation (Safran civil IP disputes) (COMP-DASSAULT-SAFRAN) aka Dassault Aviation (Safran civil IP disputes), Dassault Aviation, Dassault… | competitor | 🇫🇷 FR | — | Aerospace: military aircraftDefense contractors | — | — | 0 | 0 | 0.0 | — | — |
| Datadog (New Relic / Dynatrace civil claims over hires) (COMP-DATADOG-NEW-RELIC) aka Datadog (New Relic / Dynatrace civil claims over hires), Datadog, Datadog Inc… | competitor | 🇺🇸 US | — | Enterprise software: observabilityCloud computing: monitoring | — | New RelicDynatrace | 0 | 0 | 0.0 | 1.0 | — |
| Deep Panda (G0009) aka Deep Panda, Shell Crew, WebMasters… | state | 🇨🇳 CN | MSCheckered TyphoonCSDeep PandaMandAPT19MandTEMP.Avengers | Public AdministrationNational SecurityFinance & InsuranceTelecommunicationsInsurance Carriers & Related Activities+1 more | BoschSymantec | Anthem ⇄1 | 2 | 17 | 4.4 | 0.2 | 2021 |
| Denso engineer trade-secret case (JP, 2014) (INS-JP-DENSO-2014) aka Denso engineer trade-secret case (JP, 2014), Denso JP 2014… | insider | 🇯🇵 JP | — | Automotive: vehicle componentsAutomotive: powertrain electronics | — | Denso | 0 | 0 | 0.0 | 0.5 | — |
| Di Sanh Duong (Australia foreign-interference conviction) (INS-AU-DUONG-2023) aka Di Sanh Duong (Australia foreign-interference conviction), Di Sanh Duong, Sunny Duong… | insider | 🇦🇺 AU | — | Government: political influenceCivil society | — | — | 0 | 0 | 0.0 | — | — |
| Distributed Denial of Secrets (HACK-DDOSECRETS) aka Distributed Denial of Secrets, DDoSecrets, DDOS… | hacktivist | — | — | GovernmentLaw enforcementMedia | — | Parler | 0 | 0 | 0.0 | 0.3 | — |
| DocuSign (Adobe Sign / Echosign civil non-compete claims) (COMP-DOCUSIGN-ADOBE) aka DocuSign (Adobe Sign / Echosign civil non-compete claims), DocuSign, DocuSign Inc… | competitor | 🇺🇸 US | — | Enterprise software: e-signatureCloud computing: SaaS | — | Adobe | 0 | 0 | 0.0 | 0.5 | — |
| Dongfan 'Greg' Chung (INS-CHUNG-2010) aka Dongfan 'Greg' Chung, Dongfan Chung, Greg Chung… | insider | 🇺🇸 US | — | Aerospace: space systemsDefense: military aircraft | — | 0 | 0 | 0.0 | 1.0 | — | |
| Dongfang Jingyuan Electron (ASML software case) (COMP-DONGFANG-JINGYUAN) aka Dongfang Jingyuan Electron (ASML software case), Dongfang Jingyuan, Dongfang Jingyuan Electron… | competitor | 🇨🇳 CN | — | Semiconductor: chip metrologySoftware: chip-inspection tools | — | — | 0 | 0 | 0.0 | — | — |
| DoorDash (Uber Eats / Postmates trade-secret civil disputes) (COMP-DOORDASH-UBER) aka DoorDash (Uber Eats / Postmates trade-secret civil disputes), DoorDash, DoorDash Inc… | competitor | 🇺🇸 US | — | E-commerce: food deliverySoftware: logistics | — | Uber EatsPostmates | 0 | 0 | 0.0 | 1.0 | — |
| DragonForce Malaysia (HACK-DRAGON-FORCE-MY) aka DragonForce Malaysia, DragonForce.my… | hacktivist | 🇲🇾 MY | — | GovernmentEducation | — | — | 0 | 0 | 0.0 | — | — |
| DragonForce Pakistan (HACK-DRAGONFORCE-PK) aka DragonForce Pakistan, DragonForcePK… | hacktivist | 🇵🇰 PK | — | GovernmentMedia | — | — | 0 | 0 | 0.0 | — | — |
| DragonOK (G0017) aka DragonOK, Moafee, BRONZE OVERBROOK… | state | 🇨🇳 CN | — | ManufacturingComputer & Electronic Product ManufacturingBroadcastingPublic Administration | — | — | 0 | 0 | 0.0 | — | — |
| Dragonfly (G0035) aka Dragonfly, TEMP.Isotope, DYMALLOY… | state | 🇷🇺 RU | MSGhost BlizzardCSBerserk BearCSEnergetic BearMandTEMP.IsotopeSWIRON LIBERTYDrgDYMALLOY | Electric Power Generation, Transmission & DistributionOil & Gas ExtractionAerospace Product & Parts ManufacturingPublic AdministrationMachinery (Industrial) Manufacturing+3 more | — | — | 0 | 82 | 0.0 | — | — |
| EXOTIC LILY (G1011) aka EXOTIC LILY, DEV-0413… | unknown | — | — | InformationProfessional, Scientific & Technical ServicesHealth Care & Social AssistanceSoftware Publishers | — | — | 0 | 22 | 0.0 | — | — |
| Earth Lusca (G1006) aka Earth Lusca, TAG-22, Charcoal Typhoon… | state | 🇨🇳 CN | MSCharcoal Typhoon | Public AdministrationBroadcastingArts, Entertainment & RecreationEducational ServicesProfessional, Scientific & Technical Services+4 more | — | — | 0 | 63 | 0.0 | — | — |
| Edalat-e Ali (HACK-EDALAT-E-ALI) aka Edalat-e Ali, Ali's Justice, عدالت علی… | hacktivist | 🇮🇷 IR | — | GovernmentMediaCritical infrastructure | — | — | 0 | 0 | 0.0 | — | — |
| Edward Snowden (INS-SNOWDEN-2013) aka Edward Snowden, Snowden… | insider | 🇺🇸 US | — | IntelligenceNational securityGovernment | — | NSA ⇄2 | 0 | 0 | 0.0 | 0.3 | — |
| Elderwood (G0066) aka Elderwood, Elderwood Gang, Beijing Group… | state | 🇨🇳 CN | CSSneaky Panda | National SecurityManufacturingOther Services (except Public Administration)Professional, Scientific & Technical ServicesWeb Search Portals, Libraries, Archives & Other Information | — | Google ⇄2 | 1 | 12 | 3.6 | 0.2 | 2026 |
| Ember Bear (G1003) aka Ember Bear, UNC2589, Bleeding Bear… | state | 🇷🇺 RU | MSCadet BlizzardCSEmber BearCSBleeding BearCSSaint BearCSLorec BearMandUNC2589 | Public AdministrationTelecommunicationsUtilitiesSoftware Publishers | MicrosoftDebianFedora+2 | — | 2 | 61 | 5.5 | — | 2026 |
| Empire Hacking / Hack Forums hacktivist ecosystem (HACK-EMPIRE-HACKER) aka Empire Hacking / Hack Forums hacktivist ecosystem, Hack Forums hacktivism, Empire hacking US ecosystem… | hacktivist | 🇺🇸 US | — | GovernmentEducational institutionsReligious institutions | — | — | 0 | 0 | 0.0 | — | — |
| Epic Games v. Apple (US antitrust / civil) (COMP-EPIC-APPLE-2021) aka Epic Games v. Apple (US antitrust / civil), Epic v. Apple… | competitor | 🇺🇸 US | — | Technology platforms: mobile app storesEntertainment: gaming | — | — | 0 | 0 | 0.0 | — | — |
| Epic Games v. Google (US antitrust jury verdict) (COMP-EPIC-GOOGLE-2023) aka Epic Games v. Google (US antitrust jury verdict), Epic v. Google… | competitor | 🇺🇸 US | — | Technology platforms: mobile app stores | — | Epic | 0 | 0 | 0.0 | 1.0 | — |
| Equation (G0020) aka Equation, Equation Group, Tilded Team… | state | 🇺🇸 US | KSPEquation | Public AdministrationNational SecurityTelecommunicationsAerospace Product & Parts ManufacturingUtilities+6 more | Microsoft | — | 3 | 7 | 11.1 | — | 2022 |
| Ericsson (Nortel Networks IP dispute) (COMP-ERICSSON-NORTEL) aka Ericsson (Nortel Networks IP dispute), Ericsson, Ericsson Inc… | competitor | 🇸🇪 SE | — | Telecommunications: network equipmentTelecommunications: 4G/5G infrastructure | — | Nortel | 0 | 0 | 0.0 | 0.5 | — |
| Eurocopter (Airbus Helicopters) — Sikorsky tech transfer 2012 (INS-AIRBUS-EUROCOPTER-2012) aka Eurocopter (Airbus Helicopters) — Sikorsky tech transfer 2012, Eurocopter trade-secret case 2012… | insider | 🇫🇷 FR | — | Aerospace: helicoptersDefense: rotorcraftAerospace: composite materials | — | Sikorsky | 0 | 0 | 0.0 | 0.3 | — |
| Evilnum (G0120) aka Evilnum, DeathStalker, TA4563… | unknown | — | CSKNOCKOUT SPIDER | — | — | — | 0 | 19 | 0.0 | — | — |
| EvoBus / Daimler (Reisebusboerse, BGH I ZR 64/14) (COMP-EVOBUS-BGH-2017) aka EvoBus / Daimler (Reisebusboerse, BGH I ZR 64/14), EvoBus trade-secret case… | competitor | 🇩🇪 DE | — | Automotive: commercial vehiclesAutomotive: bus manufacturing | — | EvoBus | 0 | 0 | 0.0 | 0.5 | — |
| EvoBus / Daimler bus design civil claim (BGH 2017) (INS-EVOBUS-2017) aka EvoBus / Daimler bus design civil claim (BGH 2017), EvoBus BGH 2017… | insider | 🇩🇪 DE | — | Automotive: bus manufacturingIndustrial: vehicle bodies | — | EvoBus (Daimler) | 0 | 0 | 0.0 | 0.5 | — |
| FIN10 (G0051) aka FIN10, G0051… | unknown | — | MandFIN10 | Mining (except Oil & Gas)Arts, Entertainment & Recreation | — | — | 0 | 17 | 0.0 | — | — |
| FIN13 (G1016) aka FIN13, Elephant Beetle, TG2003… | state | 🇷🇺 RU | MandFIN13 | Finance & InsuranceRetail TradeAccommodation & Food Services | — | — | 0 | 75 | 0.0 | — | — |
| FIN4 (G0085) aka FIN4, WOLF SPIDER, G0085… | state | 🇷🇴 RO | CSWOLF SPIDERMandFIN4 | Health Care & Social AssistanceChemical ManufacturingFinance & InsuranceMedical Equipment & Supplies | — | — | 0 | 20 | 0.0 | — | — |
| FIN5 (G0053) aka FIN5, G0053… | unknown | — | MandFIN5 | Accommodation & Food ServicesArts, Entertainment & RecreationCredit Intermediation & Related Activities (Banking) | — | — | 0 | 16 | 0.0 | — | — |
| FIN6 (G0037) aka FIN6, Magecart Group 6, ITG08… | unknown | — | MSCamouflage TempestCSSkeleton SpiderMandFIN6 | Retail TradeAccommodation & Food ServicesCredit Intermediation & Related Activities (Banking) | — | — | 0 | 58 | 0.0 | — | — |
| FIN7 (G0046) aka FIN7, GOLD NIAGARA, ITG14… | unknown | — | MSSangria TempestCSCarbon SpiderMandFIN7SWGOLD NIAGARA | Retail TradeAccommodation & Food ServicesSoftware PublishersProfessional, Scientific & Technical ServicesFinance & Insurance+8 more | Microsoft | — | 1 | 93 | 1.2 | — | 2026 |
| FIN8 (G0061) aka FIN8, Syssphinx, ATK113… | unknown | — | MandFIN8 | Accommodation & Food ServicesRetail TradeArts, Entertainment & RecreationInsurance Carriers & Related ActivitiesInformation+2 more | — | — | 0 | 56 | 0.0 | — | — |
| FRwL (From Russia with Love) (HACK-FROM-RUSSIA-WITH-LOVE) aka FRwL (From Russia with Love), FRwL, Z-Team… | hacktivist | 🇷🇺 RU | — | GovernmentCritical infrastructureHealthcare | — | — | 0 | 0 | 0.0 | — | — |
| Fancy Lazarus (DDoS extortion persona) (HACK-FANCY-LAZARUS) aka Fancy Lazarus (DDoS extortion persona), Fancy Lazarus crew… | hacktivist | — | — | Financial servicesOnline services | — | — | 0 | 0 | 0.0 | — | — |
| Ferocious Kitten (G0137) aka Ferocious Kitten… | state | 🇮🇷 IR | CSFerocious KittenKSPFerocious Kitten | — | — | — | 0 | 11 | 0.0 | — | — |
| Former SK Hynix engineer arrested over HiSilicon leak (KR 2024) (INS-SK-HYNIX-HUAWEI-2024) aka Former SK Hynix engineer arrested over HiSilicon leak (KR 2024), SK Hynix HiSilicon insider 2024… | insider | 🇰🇷 KR | — | Semiconductor: HBM memorySemiconductor: advanced packaging | — | SK Hynix ⇄1 | 0 | 0 | 0.0 | 0.5 | — |
| Former TSMC manager indictment (TW, 2018 / HLMC) (INS-TSMC-CHANG-2018) aka Former TSMC manager indictment (TW, 2018 / HLMC), TSMC HLMC 2018 indictment… | insider | 🇹🇼 TW | — | Semiconductor: chip fabricationSemiconductor: process equipment | — | TSMC ⇄2 | 0 | 0 | 0.0 | 0.5 | — |
| Fox Kitten (G0117) aka Fox Kitten, UNC757, Parisite… | state | 🇮🇷 IR | MSLemon SandstormCSFox KittenCSPioneer KittenDrgParisite | Oil & Gas ExtractionInformationPublic AdministrationNational SecurityHealth Care & Social Assistance+2 more | Microsoft | — | 2 | 54 | 5.5 | — | 2026 |
| Fujian Jinhua Integrated Circuit (DRAM) (COMP-FUJIAN-JINHUA) aka Fujian Jinhua Integrated Circuit (DRAM), Fujian Jinhua, Jinhua… | competitor | 🇨🇳 CN | — | Semiconductor: DRAM memory | — | Micron ⇄3 | 0 | 0 | 0.0 | 1.0 | — |
| G.S. Kok / Y.T. Kok / S.C. Chia (Motorola → Hytera engineers) (INS-HYTERA-KOK-2017) aka G.S. Kok / Y.T. Kok / S.C. Chia (Motorola → Hytera engineers), G.S. Kok, Y.T. Kok… → Hytera Communications (Motorola DMR case) | insider | 🇲🇾 MY | — | Telecommunications: two-way radioPublic safety: communications | — | Motorola ⇄1 | 0 | 0 | 0.0 | 0.5 | — |
| GAC Group (Honda / Toyota JV-defection civil disputes) (COMP-GAC) aka GAC Group (Honda / Toyota JV-defection civil disputes), GAC, GAC Group… | competitor | 🇨🇳 CN | — | Automotive: vehicle manufacturingAutomotive: electric vehicles | — | — | 0 | 0 | 0.0 | — | — |
| GALLIUM (G0093) aka GALLIUM, Granite Typhoon, Red Dev 4… | state | 🇨🇳 CN | MSGranite TyphoonMSGALLIUMCSPHANTOM PANDA | Finance & InsuranceTelecommunicationsPublic Administration | — | — | 0 | 45 | 0.0 | — | — |
| GCMAN (G0036) aka GCMAN, G0036… | state | 🇷🇺 RU | — | — | — | — | 0 | 3 | 0.0 | — | — |
| GOLD SOUTHFIELD (G0115) aka GOLD SOUTHFIELD, Pinchy Spider… | unknown | — | CSPinchy SpiderSWGOLD SOUTHFIELD | Food ManufacturingSoftware PublishersComputer & Electronic Product ManufacturingCredit Intermediation & Related Activities (Banking)Health Care & Social Assistance+4 more | Microsoft | — | 1 | 12 | 1.2 | — | 2026 |
| Gallmaker (G0084) aka Gallmaker… | unknown | — | — | National SecurityPublic Administration | — | — | 0 | 11 | 0.0 | — | — |
| Gamaredon Group (G0047) aka Gamaredon Group, IRON TILDEN, Primitive Bear… | state | 🇷🇺 RU | MSAqua BlizzardMSACTINIUMCSPrimitive BearSWIRON TILDEN | National SecurityJustice, Public Order & SafetyOther Services (except Public Administration)Public Administration | Anoma | — | 1 | 91 | 2.7 | — | 2026 |
| Gaza Cybergang (hacktivist persona) (HACK-GAZA-CYBERGANG) aka Gaza Cybergang (hacktivist persona), Gaza Hackers Team, Molerats sibling… | hacktivist | — | — | GovernmentDefense contractorsMedia | — | — | 0 | 0 | 0.0 | — | — |
| Geely Holding (WM Motor 2024 record damages plaintiff) (COMP-GEELY-WM) aka Geely Holding (WM Motor 2024 record damages plaintiff), Geely, Geely Holding… | competitor | 🇨🇳 CN | — | Automotive: electric vehiclesAutomotive: vehicle manufacturingTelecommunications: 5G | — | 0 | 0 | 0.0 | 1.0 | — | |
| GhostSec (HACK-GHOSTSEC) aka GhostSec, Ghost Security… | hacktivist | — | — | Terrorism-aligned infrastructureGovernmentCritical infrastructure | — | — | 0 | 0 | 0.0 | — | — |
| Google LLC (civil insider-recruitment defendant) (COMP-GOOGLE-CIVIL-DEFENDANT) aka Google LLC (civil insider-recruitment defendant), Google, Google LLC… | competitor | 🇺🇸 US | — | Software: enterpriseHealthcare: insuranceSports betting: data feeds | — | 0 | 0 | 0.0 | 0.7 | — | |
| Gorgon Group (G0078) aka Gorgon Group, The Gorgon Group, Subaat… | state | 🇵🇰 PK | — | Executive, Legislative & Other General Government SupportPublic Administration | — | — | 0 | 23 | 0.0 | — | — |
| Group5 (G0043) aka Group5, G0043… | unknown | — | — | Other Services (except Public Administration)Software Publishers | — | — | 0 | 7 | 0.0 | — | — |
| Guacamaya (HACK-GUACAMAYA) aka Guacamaya, Guacamaya Hackers… | hacktivist | — | — | GovernmentCritical infrastructureEnergy: gas turbines | — | Colombian National PoliceChilean Joint Chiefs of StaffSedena | 0 | 0 | 0.0 | 1.0 | — |
| Guangzhi Cao (Tesla Autopilot source code → XPeng) (INS-CAO-TESLA-XPENG-2021) aka Guangzhi Cao (Tesla Autopilot source code → XPeng), Guangzhi Cao, Cao Guangzhi… → XPeng Motors (XMotors — Apple autonomous beneficiary) | insider | 🇺🇸 US | — | Automotive: autonomous vehiclesSoftware: machine learning | — | Tesla ⇄5 | 0 | 0 | 0.0 | 0.5 | — |
| HAFNIUM (G0125) aka HAFNIUM, Operation Exchange Marauder, Silk Typhoon… | state | 🇨🇳 CN | MSSilk TyphoonMSHAFNIUMCSMURKY PANDA | Health Care & Social AssistanceProfessional, Scientific & Technical ServicesEducational ServicesAerospace Product & Parts ManufacturingOther Services (except Public Administration)+2 more | mailMicrosoft | — | 3 | 66 | 12.9 | — | 2021 |
| HEXANE (G1001) aka HEXANE, Lyceum, Siamesekitten… | state | 🇮🇷 IR | CSChrono KittenMandUNC1530DrgHEXANEKSPLyceum | Oil & Gas ExtractionTelecommunicationsAir Transportation | — | — | 0 | 52 | 0.0 | — | — |
| Haitao Xiang (Monsanto / Climate Corp Nutrient Optimizer) (INS-XIANG-MONSANTO-2022) aka Haitao Xiang (Monsanto / Climate Corp Nutrient Optimizer), Haitao Xiang… | insider | 🇺🇸 US | — | Agritech: precision agricultureSoftware: machine learning | — | 0 | 0 | 0.0 | 1.0 | — | |
| Handala Hack Team (HACK-HANDALA) aka Handala Hack Team, Handala, Handala Hacking… | hacktivist | 🇮🇷 IR | — | Critical infrastructureGovernmentDefense | — | Zerto | 0 | 0 | 0.0 | 0.3 | — |
| Hao Zhang (FBAR / Avago / Skyworks) (INS-ZHANG-FBAR-2020) aka Hao Zhang (FBAR / Avago / Skyworks), Hao Zhang, Tianjin FBAR case… | insider | 🇺🇸 US | — | Semiconductor: RF chip designTelecommunications: mobile RF filters | — | Avago TechnologiesSkyworks Solutions | 0 | 0 | 0.0 | 1.0 | — |
| Haoyang 'Jack' Yu (Analog Devices / Tricon MMIC) (INS-YU-ADI-2022) aka Haoyang 'Jack' Yu (Analog Devices / Tricon MMIC), Jack Yu, Haoyang Yu… | insider | 🇺🇸 US | — | Semiconductor: monolithic microwave integrated circuitsSemiconductor: RF chip design | — | Analog Devices | 0 | 0 | 0.0 | 0.5 | — |
| Harold T. Martin III (INS-MARTIN-2017) aka Harold Martin, Harold T. Martin III, Hal Martin… | insider | 🇺🇸 US | — | IntelligenceNational securityCybersecurity: offensive tooling | — | NSA ⇄2 | 0 | 0 | 0.0 | 0.3 | — |
| He Jianting (UMC / Fujian Jinhua co-defendant) (INS-UMC-JINHUA-HE-2020) aka He Jianting (UMC / Fujian Jinhua co-defendant), J.T. Ho, He Jianting… → Fujian Jinhua Integrated Circuit (DRAM) | insider | 🇹🇼 TW | — | Semiconductor: DRAM memory | — | Micron ⇄3 | 0 | 0 | 0.0 | 1.0 | — |
| Hector Xavier Monsegur ('Sabu', LulzSec/AntiSec) (HACK-MONSEGUR-SABU) aka Hector Xavier Monsegur ('Sabu', LulzSec/AntiSec), Sabu, Hector Monsegur… | hacktivist | — | — | GovernmentMediaIntelligence: private | — | 0 | 0 | 0.0 | 0.3 | — | |
| Hesai Group (Velodyne / Ouster LiDAR civil disputes) (COMP-HESAI) aka Hesai Group (Velodyne / Ouster LiDAR civil disputes), Hesai, Hesai Group… | competitor | 🇨🇳 CN | — | Automotive: LiDAR sensorsAutomotive: autonomous vehicles | — | — | 0 | 0 | 0.0 | — | — |
| Higaisa (G0126) aka Higaisa… | state | 🇰🇷 KR | — | Public AdministrationOther Services (except Public Administration) | — | — | 0 | 41 | 0.0 | — | — |
| Hitachi Metals amorphous-alloy leak (JP, 2012) (INS-HITACHI-METALS-2012) aka Hitachi Metals amorphous-alloy leak (JP, 2012), Hitachi Metals JP 2012… | insider | 🇯🇵 JP | — | Metallurgy: amorphous alloysEnergy: transformer cores | — | Hitachi Metals | 0 | 0 | 0.0 | 0.5 | — |
| Hon Hai / Foxconn (Apple manufacturing-IP civil disputes) (COMP-FOXCONN-APPLE) aka Hon Hai / Foxconn (Apple manufacturing-IP civil disputes), Foxconn, Hon Hai… | competitor | 🇹🇼 TW | — | Electronics: contract manufacturingConsumer electronics: assembly | — | 0 | 0 | 0.0 | 1.0 | — | |
| Hongjin Tan (Phillips 66 battery R&D) (INS-TAN-PHILLIPS-2019) aka Hongjin Tan (Phillips 66 battery R&D), Hongjin Tan… | insider | 🇺🇸 US | — | Energy: battery R&DSpecialty chemicals: battery materials | — | Phillips 66 | 0 | 0 | 0.0 | 0.5 | — |
| Huawei Technologies (multiple IP-theft cases) (COMP-HUAWEI) aka Huawei Technologies (multiple IP-theft cases), Huawei, Huawei Technologies… | competitor | 🇨🇳 CN | — | Telecommunications: mobile equipmentSemiconductor: chip design | — | 0 | 0 | 0.0 | 1.0 | — | |
| Hytera / Nokia / Bosch GmbH engineer civil claims (INS-IPCOM-NOKIA-2014) aka Hytera / Nokia / Bosch GmbH engineer civil claims, IPCom-Nokia German civil… | insider | 🇩🇪 DE | — | Telecommunications: 3G/4G standardsTelecommunications: cellular base stations | — | 0 | 0 | 0.0 | 1.0 | — | |
| Hytera Communications (Motorola DMR case) (COMP-HYTERA) aka Hytera Communications (Motorola DMR case), Hytera, Hytera Communications… | competitor | 🇨🇳 CN | — | Telecommunications: two-way radioPublic safety: communications | — | Motorola ⇄1 | 0 | 0 | 0.0 | 0.5 | — |
| Hyundai Mobis ADAS engineer indictment (KR, 2021) (INS-HYUNDAI-MOBIS-2021) aka Hyundai Mobis ADAS engineer indictment (KR, 2021), Hyundai Mobis KR 2021… | insider | 🇰🇷 KR | — | Automotive: autonomous vehiclesAutomotive: ADAS sensors | — | Hyundai Mobis | 0 | 0 | 0.0 | 0.5 | — |
| INC Ransom (G1032) aka INC Ransom, GOLD IONIC… | criminal | — | SWGOLD IONIC | ManufacturingHealth Care & Social AssistanceEducational ServicesSoftware Publishers | — | — | 0 | 34 | 0.0 | — | — |
| IQVIA Holdings (Veeva counter-claim defendant) (COMP-IQVIA) aka IQVIA Holdings (Veeva counter-claim defendant), IQVIA, IMS Health… | competitor | 🇺🇸 US | — | Healthcare software: data productsEnterprise software: life sciences CRM | — | Veeva | 0 | 0 | 0.0 | 0.5 | — |
| ISIS Hacking Division (Cyber Caliphate) (HACK-ISIS-HACKING-DIVISION) aka ISIS Hacking Division (Cyber Caliphate), United Cyber Caliphate, Cyber Caliphate Army… | hacktivist | — | — | GovernmentMediaDefense contractors | — | — | 0 | 0 | 0.0 | — | — |
| IT Army of Ukraine (HACK-IT-ARMY-UA) aka IT Army of Ukraine, IT Army, Ukraine IT Army… | hacktivist | 🇺🇦 UA | — | GovernmentFinancial servicesMediaTelecommunications | — | — | 0 | 0 | 0.0 | — | — |
| Inception (G0100) aka Inception, Inception Framework, Cloud Atlas… | state | 🇷🇺 RU | KSPCloud Atlas | Public AdministrationNational SecurityInternational AffairsOil & Gas ExtractionAerospace Product & Parts Manufacturing+2 more | — | — | 0 | 34 | 0.0 | — | — |
| Indian Cyber Force (HACK-INDIAN-CYBER-FORCE) aka Indian Cyber Force, ICF… | hacktivist | 🇮🇳 IN | — | GovernmentCritical infrastructure | — | — | 0 | 0 | 0.0 | — | — |
| IndigoZebra (G0136) aka IndigoZebra… | state | 🇨🇳 CN | — | Executive, Legislative & Other General Government Support | MicrosoftLinux | — | 2 | 12 | 6.4 | — | 2026 |
| Indonesian Cyber Army (HACK-INDONESIAN-CYBER-ARMY) aka Indonesian Cyber Army, ICA, Indo Cyber Army… | hacktivist | — | — | GovernmentMedia | — | — | 0 | 0 | 0.0 | — | — |
| Indra Sistemas (Spanish defense civil IP disputes) (COMP-INDRA-SISTEMAS) aka Indra Sistemas (Spanish defense civil IP disputes), Indra, Indra Sistemas SA… | competitor | 🇪🇸 ES | — | Defense contractorsDefense: radar and electronics | — | 0 | 0 | 0.0 | 1.0 | — | |
| Indrik Spider (G0119) aka Indrik Spider, Evil Corp, Manatee Tempest… | state | 🇷🇺 RU | MSManatee TempestCSIndrik SpiderMandUNC2165 | Credit Intermediation & Related Activities (Banking)Health Care & Social AssistanceManufacturingInformationTelecommunications+2 more | Microsoft | U.K.’s National Health Service (NHS) | 1 | 47 | 1.2 | 0.1 | 2026 |
| Insta360 (DJI patent counter-suit 2026) (COMP-INSTA360) aka Insta360 (DJI patent counter-suit 2026), Insta360, Arashi Vision… | competitor | 🇨🇳 CN | — | Consumer electronics: dronesConsumer electronics: cameras | — | DJI | 0 | 0 | 0.0 | 0.5 | — |
| Instacart (Maplebear) — DoorDash trade-secret civil dispute (COMP-INSTACART) aka Instacart (Maplebear) — DoorDash trade-secret civil dispute, Instacart, Maplebear Inc… | competitor | 🇺🇸 US | — | E-commerce: grocery deliverySoftware: logistics | — | Shipt | 0 | 0 | 0.0 | 0.5 | — |
| Intel Corp. (Micron 2018-2020 NAND civil counter-claims) (COMP-INTEL-MICRON) aka Intel Corp. (Micron 2018-2020 NAND civil counter-claims), Intel, Intel Corporation… | competitor | 🇺🇸 US | — | Semiconductor: NAND flash memorySemiconductor: memory | — | Micron ⇄3 | 0 | 0 | 0.0 | 0.5 | — |
| James Liang (Volkswagen Dieselgate engineer) (INS-VW-LIANG-2017) aka James Liang (Volkswagen Dieselgate engineer), James Robert Liang… | insider | 🇩🇪 DE | — | Automotive: emissions softwareAutomotive: vehicle manufacturing | — | — | 0 | 0 | 0.0 | — | — |
| James Robert Liang (Volkswagen / Dieselgate engineer) (INS-LIANG-VW-2017) aka James Robert Liang (Volkswagen / Dieselgate engineer), James Liang… | insider | 🇩🇪 DE | — | Automotive: vehicle manufacturingAutomotive: emissions control | — | Volkswagen ⇄1 | 0 | 0 | 0.0 | 0.5 | — |
| Japan Toshiba NAND secondary leak prosecutions (JP, 2018) (INS-JAPAN-TOSHIBA-NAND-2018) aka Japan Toshiba NAND secondary leak prosecutions (JP, 2018), Toshiba NAND 2018 prosecution… | insider | 🇯🇵 JP | — | Semiconductor: NAND flash memorySemiconductor: chip fabrication | — | Toshiba ⇄1 | 0 | 0 | 0.0 | 0.5 | — |
| Jeremy Hammond (AntiSec / Stratfor breach) (HACK-HAMMOND-ANTISEC) aka Jeremy Hammond (AntiSec / Stratfor breach), Jeremy Hammond, Anarchaos… | hacktivist | — | — | Intelligence: privateGovernmentLaw enforcement | — | Stratfor | 0 | 0 | 0.0 | 0.3 | — |
| Jerry Chun Shing Lee (former CIA case officer) (INS-LEE-CIA-2019) aka Jerry Chun Shing Lee (former CIA case officer), Jerry Lee, Zhen Cheng Li… | insider | 🇺🇸 US | — | Government: intelligenceDefense: HUMINT tradecraft | — | CIA ⇄1 | 0 | 0 | 0.0 | 0.5 | — |
| Jizhong Chen (Apple self-driving) (INS-CHEN-APPLE-2019) aka Jizhong Chen (Apple self-driving), Jizhong Chen, Chen Jizhong… | insider | 🇺🇸 US | — | Automotive: autonomous vehiclesSoftware: machine learning | — | Apple ⇄9 | 0 | 0 | 0.0 | 0.5 | — |
| Joshua Schulte (CIA Vault 7 leak) (INS-SCHULTE-2022) aka Joshua Schulte (CIA Vault 7 leak), Joshua Schulte, Joshua Adam Schulte… | insider | 🇺🇸 US | — | IntelligenceCybersecurity: offensive tooling | — | — | 0 | 0 | 0.0 | — | — |
| José Ignacio López de Arriortúa (GM → VW) (INS-LOPEZ-1993) aka José Ignacio López de Arriortúa (GM → VW), José Ignacio López de Arriortúa, Inaki Lopez… → Volkswagen AG (López/GM 1993 case) | insider | 🇩🇪 DE | — | Automotive: vehicle manufacturingManufacturing: supply chain | — | 0 | 0 | 0.0 | 1.0 | — | |
| KAERI VPN intrusion (South Korea, 2021) (INS-KAERI-2021) aka KAERI VPN intrusion (South Korea, 2021), KAERI hack 2021… | insider | 🇰🇷 KR | — | Energy: nuclearResearch: government laboratories | — | Korea Atomic Energy Research Institute | 0 | 0 | 0.0 | 0.5 | — |
| KAERI researcher Industrial Technology Protection Act case (KR, 2022) (INS-KAERI-INSIDER-2022) aka KAERI researcher Industrial Technology Protection Act case (KR, 2022), KAERI insider KR 2022… | insider | 🇰🇷 KR | — | Nuclear power: utility-scaleNuclear power: SMR | — | Korea Atomic Energy Research Institute (KAERI) | 0 | 0 | 0.0 | 0.5 | — |
| Karma (IRGC-linked) (HACK-KARMA) aka Karma (IRGC-linked), N3tw0rm, Karma Group… | hacktivist | 🇮🇷 IR | — | Critical infrastructureGovernmentHealthcare | — | Atraf ⇄1 | 0 | 0 | 0.0 | 0.3 | — |
| Ke3chang (G0004) aka Ke3chang, APT15, Mirage… | state | 🇨🇳 CN | MSNylon TyphoonMSNICKELCSVixen PandaMandAPT15MandKe3chang | Oil & Gas ExtractionExecutive, Legislative & Other General Government SupportNational SecurityInternational AffairsOther Services (except Public Administration)+1 more | Microsoft | — | 1 | 63 | 3.2 | — | 2026 |
| Khalsa Cyber Fauj (HACK-KHALSA-CYBER-FAUJ) aka Khalsa Cyber Fauj, KCF, Khalsa Cyber Force… | hacktivist | — | — | GovernmentReligious institutions | — | — | 0 | 0 | 0.0 | — | — |
| Kia Corporation (Ford / Hyundai civil disputes) (COMP-KIA-FORD) aka Kia Corporation (Ford / Hyundai civil disputes), Kia, Kia Motors… | competitor | 🇰🇷 KR | — | Automotive: vehicle manufacturingAutomotive: electric vehicles | — | — | 0 | 0 | 0.0 | — | — |
| Kia EV-platform engineer indictment (KR, 2024) (INS-KIA-EV-2024) aka Kia EV-platform engineer indictment (KR, 2024), Kia EV KR 2024… | insider | 🇰🇷 KR | — | Automotive: EV powertrainAutomotive: vehicle manufacturing | — | Kia | 0 | 0 | 0.0 | 0.5 | — |
| KillNet (HACK-KILLNET) aka KillNet… | hacktivist | 🇷🇺 RU | — | GovernmentHealthcareFinancial servicesTransportation: airports | — | — | 0 | 0 | 0.0 | — | — |
| Killmilk (KillNet founder persona) (HACK-KILLMILK) aka Killmilk (KillNet founder persona), Killmilk… | hacktivist | 🇷🇺 RU | — | GovernmentTransportationFinancial services | — | — | 0 | 0 | 0.0 | — | — |
| Kimsuky (G0094) aka Kimsuky, Black Banshee, Velvet Chollima… | state | 🇰🇵 KP | MSEmerald SleetCSVelvet ChollimaMandAPT43CISAKimsuky | Public AdministrationNational SecurityInternational AffairsEducational ServicesProfessional, Scientific & Technical Services+3 more | cmsMicrosoftAnoma+1 | Korea Hydro & Nuclear Power CoMinistry of UnificationUnited Nations | 3 | 171 | 10.6 | 0.4 | 2026 |
| Klarna Bank (Pagaya BNPL underwriting suit 2026) (COMP-KLARNA-PAGAYA) aka Klarna Bank (Pagaya BNPL underwriting suit 2026), Klarna, Klarna Bank AB… | competitor | 🇸🇪 SE | — | Financial services: BNPLSoftware: credit underwriting | — | Pagaya | 0 | 0 | 0.0 | 0.5 | — |
| Klaus Pflugbeil + Yilong Shao (Tesla battery) (INS-WANG-TESLA-2023) aka Klaus Pflugbeil + Yilong Shao (Tesla battery), Klaus Pflugbeil, Yilong Shao… | insider | 🇺🇸 US | — | Automotive: EV batteriesIndustrial equipment: battery assembly | — | 0 | 0 | 0.0 | 1.0 | — | |
| Klaus-Joachim Gebauer civil action (Volkswagen bribery) (INS-LOPEZ-BGH-2007) aka Klaus-Joachim Gebauer civil action (Volkswagen bribery), Gebauer VW affair, Volkswagen labour-relations scandal… | insider | 🇩🇪 DE | — | Automotive: vehicle manufacturingIndustrial: HR & labour relations | — | Volkswagen ⇄1 | 0 | 0 | 0.0 | 0.5 | — |
| Kun Shan 'Joey' Chun (former FBI technician) (INS-CHUN-FBI-2017) aka Kun Shan 'Joey' Chun (former FBI technician), Joey Chun, Kun Shan Chun… | insider | 🇺🇸 US | — | Government: federal law enforcementDefense: surveillance technology | — | FBI ⇄1 | 0 | 0 | 0.0 | 0.5 | — |
| L'Oréal SA (Olaplex 2019 trade-secret + patent verdict) (COMP-OLAPLEX-LOREAL) aka L'Oréal SA (Olaplex 2019 trade-secret + patent verdict), L'Oréal, Loreal… | competitor | 🇫🇷 FR | — | Consumer products: hair careSpecialty chemicals: cosmetics | — | Olaplex | 0 | 0 | 0.0 | 0.5 | — |
| LAPSUS$ (G1004) aka LAPSUS$, DEV-0537, Strawberry Tempest… | criminal | — | MSStrawberry TempestCSSLIPPY SPIDERMandUNC3661 | Public AdministrationManufacturingEducational ServicesMining, Quarrying, Oil & Gas ExtractionHealth Care & Social Assistance+4 more | — | 0 | 63 | 0.0 | 0.6 | — | |
| LG Display senior engineer (OLED transfer to BOE 2020) (INS-LG-DISPLAY-2020) aka LG Display senior engineer (OLED transfer to BOE 2020), LG Display OLED leak 2020… → COMP-BOE | insider | 🇰🇷 KR | — | Electronics: OLED displaysConsumer electronics | — | LG Display ⇄1 | 0 | 0 | 0.0 | 0.5 | — |
| LG Energy Solution (SK Innovation 2019-2021 ITC $1.8B) (COMP-LG-ENERGY-SK) aka LG Energy Solution (SK Innovation 2019-2021 ITC $1.8B), LG Energy Solution, LG Chem… | competitor | 🇰🇷 KR | — | Automotive: EV batteriesAutomotive: electric vehicles | — | — | 0 | 0 | 0.0 | — | — |
| Lazarus Group (G0032) aka Lazarus Group, Labyrinth Chollima, HIDDEN COBRA… | state | 🇰🇵 KP | MSDiamond SleetMSZINCMSCitrine SleetMSSapphire SleetMSMoonstone SleetMSOnyx Sleet | Arts, Entertainment & RecreationCredit Intermediation & Related Activities (Banking)Securities, Commodity Contracts & Other Financial InvestmentsNational SecurityAerospace Product & Parts Manufacturing+3 more | cmsMicrosoftPhp Everywhere Project+10 | Sony Pictures EntertainmentFEIB | 12 | 128 | 36.2 | 0.2 | 2022 |
| LazyScripter (G0140) aka LazyScripter… | unknown | — | — | Air Transportation | — | — | 0 | 30 | 0.0 | — | — |
| Leafminer (G0077) aka Leafminer, Raspite… | unknown | — | DrgRaspite | Public AdministrationCredit Intermediation & Related Activities (Banking)Electric Power Generation, Transmission & Distribution | — | — | 0 | 26 | 0.0 | — | — |
| Leonardo Finmeccanica defence-data theft (IT, 2017) (INS-LEONARDO-2017) aka Leonardo Finmeccanica defence-data theft (IT, 2017), Leonardo insider Naples 2017… | insider | 🇮🇹 IT | — | Defense: military electronicsDefense: simulation systems | — | Leonardo Finmeccanica | 0 | 0 | 0.0 | 0.5 | — |
| Leonardo S.p.A. (BAE / Lockheed civil defense-IP disputes) (COMP-LEONARDO-BAE) aka Leonardo S.p.A. (BAE / Lockheed civil defense-IP disputes), Leonardo, Leonardo SpA… | competitor | 🇮🇹 IT | — | Defense: military aircraftDefense contractors | — | 0 | 0 | 0.0 | 1.0 | — | |
| Leviathan (G0065) aka Leviathan, MUDCARP, Kryptonite Panda… | state | 🇨🇳 CN | MSGingham TyphoonCSKryptonite PandaMandTEMP.JumperMandAPT40MandTEMP.PeriscopeCISALeviathan | Educational ServicesAerospace Product & Parts ManufacturingMedical Equipment & SuppliesManufacturingPublic Administration+5 more | MicrosoftBoschSymantec | — | 3 | 73 | 5.7 | — | 2026 |
| Linwei 'Leon' Ding (Google AI / TPU architecture) (INS-DING-GOOGLE-2024) aka Linwei 'Leon' Ding (Google AI / TPU architecture), Leon Ding, Linwei Ding… | insider | 🇺🇸 US | — | Software: machine learningSemiconductor: AI accelerator architecture | — | Google ⇄2 | 0 | 0 | 0.0 | 0.5 | — |
| Liu Ruopeng (Duke → Kuang-Chi metamaterials) (INS-LIU-RUOPENG-2010) aka Liu Ruopeng (Duke → Kuang-Chi metamaterials), Liu Ruopeng, Ruopeng Liu… | insider | 🇺🇸 US | — | Academic research: metamaterialsAerospace: radar/stealth | — | Duke | 0 | 0 | 0.0 | 0.5 | — |
| Lizard Squad (HACK-LIZARD-SQUAD) aka Lizard Squad… | hacktivist | — | — | Entertainment: gaming servicesOnline services | — | 0 | 0 | 0.0 | 1.5 | — | |
| Lotus Blossom (G0030) aka Lotus Blossom, DRAGONFISH, Spring Dragon… | state | 🇨🇳 CN | MSRaspberry TyphoonCSLOTUS PANDA | Public AdministrationNational SecurityTelecommunicationsEducational ServicesProfessional, Scientific & Technical Services+1 more | AdobeAppleMicrosoft | — | 1 | 27 | 3.6 | — | 2022 |
| Lucid Motors (Tesla engineer-recruitment suits) (COMP-LUCID-TESLA) aka Lucid Motors (Tesla engineer-recruitment suits), Lucid, Lucid Group… | competitor | 🇺🇸 US | — | Automotive: electric vehiclesAutomotive: EV powertrain | — | — | 0 | 0 | 0.0 | — | — |
| Lufthansa Technik (Boeing IP dispute 2018-2020) (COMP-LUFTHANSA-TECHNIK) aka Lufthansa Technik (Boeing IP dispute 2018-2020), Lufthansa Technik, LHT… | competitor | 🇩🇪 DE | — | Aerospace: MRO servicesAerospace: engine maintenance | — | — | 0 | 0 | 0.0 | — | — |
| Lulz Boat (LulzSec splinter) (HACK-LULZ-BOAT) aka Lulz Boat (LulzSec splinter), The Lulz Boat, LulzSec Reborn… | hacktivist | — | — | GovernmentMediaEntertainment: gaming services | — | — | 0 | 0 | 0.0 | — | — |
| LulzSec (HACK-LULZSEC) aka LulzSec, Lulz Security… | hacktivist | — | — | Entertainment: gamingDefense contractorsGovernmentMedia | — | 0 | 0 | 0.0 | 1.2 | — | |
| LulzSec India (HACK-LULZSEC-INDIA) aka LulzSec India, LulzSecIndia… | hacktivist | — | — | GovernmentTelecommunications | — | TRAIDepartment of Telecommunications | 0 | 0 | 0.0 | 1.0 | — |
| LulzSec Peru (HACK-LULZSEC-PERU) aka LulzSec Peru, LulzSecPeru… | hacktivist | — | — | GovernmentMedia | — | — | 0 | 0 | 0.0 | — | — |
| LuminousMoth (G1014) aka LuminousMoth, MUSTANG PANDA, BRONZE PRESIDENT… | state | 🇨🇳 CN | MSTwill TyphoonCSMUSTANG PANDAMandTEMP.HEXKSPLuminousMoth | Public AdministrationUtilities | — | — | 0 | 42 | 0.0 | — | — |
| Luna Moth (MISP-f5022a01) aka Luna Moth, Silent Ransom, TG2729… | criminal | — | — | — | — | — | 0 | 1 | 0.0 | — | — |
| MTK / Realtek engineer recruitment ring indictment (TW, 2023) (INS-TW-IC-DESIGN-2023) aka MTK / Realtek engineer recruitment ring indictment (TW, 2023), Taiwan Realtek 2023 ring… | insider | 🇹🇼 TW | — | Semiconductor: chip designSemiconductor: connectivity ICs | — | 0 | 0 | 0.0 | 1.0 | — | |
| Machete (G0095) aka Machete, APT-C-43, El Machete… | state | — | — | National SecurityTelecommunicationsElectric Power Generation, Transmission & DistributionPublic Administration | — | — | 0 | 17 | 0.0 | — | — |
| Magic Hound (G0059) aka Magic Hound, TA453, COBALT ILLUSION… | state | 🇮🇷 IR | MSMint SandstormMSPhosphorusCSCharming KittenMandAPT35SWCOBALT ILLUSION | National SecurityExecutive, Legislative & Other General Government SupportEducational ServicesBroadcastingInternational Affairs+1 more | — | World Health Organization | 0 | 109 | 0.0 | 0.2 | — |
| Malteiro (G1026) aka Malteiro… | unknown | — | — | Credit Intermediation & Related Activities (Banking)Software Publishers | — | — | 0 | 19 | 0.0 | — | — |
| Maui ransomware (MISP-995c3772) aka Maui ransomware… | criminal | — | — | — | cmsMicrosoftPhp Everywhere Project+9 | — | 11 | 0 | 31.9 | — | 2022 |
| Mazda EV-component engineer disclosure (JP, 2020) (INS-MAZDA-EV-2020) aka Mazda EV-component engineer disclosure (JP, 2020), Mazda JP 2020 EV… | insider | 🇯🇵 JP | — | Automotive: EV powertrainAutomotive: vehicle manufacturing | — | Mazda | 0 | 0 | 0.0 | 0.5 | — |
| MediaTek Inc. (Qualcomm civil patent + non-compete disputes) (COMP-MEDIATEK-QUALCOMM) aka MediaTek Inc. (Qualcomm civil patent + non-compete disputes), MediaTek, MediaTek Inc… | competitor | 🇹🇼 TW | — | Semiconductor: mobile SoCsSemiconductor: design IP | — | — | 0 | 0 | 0.0 | — | — |
| MediaTek ex-engineers (Taiwan Trade Secrets Act, 2020) (INS-TAIWAN-MEDIATEK-2020) aka MediaTek ex-engineers (Taiwan Trade Secrets Act, 2020), MediaTek trade-secret case 2020… | insider | 🇹🇼 TW | — | Semiconductor: mobile SoCsSemiconductor: design IP | — | MediaTek ⇄2 | 0 | 0 | 0.0 | 0.5 | — |
| MediaTek senior engineer indictment (TW, 2022) (INS-MEDIATEK-2022) aka MediaTek senior engineer indictment (TW, 2022), MediaTek TW 2022… | insider | 🇹🇼 TW | — | Semiconductor: chip designSemiconductor: RF chip design | — | MediaTek ⇄2 | 0 | 0 | 0.0 | 0.5 | — |
| Medusa Group (G1051) aka Medusa Group… | unknown | — | CISAMedusa Group | Health Care & Social AssistanceEducational ServicesProfessional, Scientific & Technical ServicesInsurance Carriers & Related ActivitiesInformation+3 more | — | — | 0 | 82 | 0.0 | — | — |
| Megvii Technology (Face++ — US Entity-Listed) (COMP-MEGVII) aka Megvii Technology (Face++ — US Entity-Listed), Megvii, Face++… | competitor | 🇨🇳 CN | — | Software: computer visionSurveillance technology | — | 0 | 0 | 0.0 | 1.0 | — | |
| Mercedes-Benz / Daimler interior-design civil claim (DE 2019) (INS-DAIMLER-BENZ-2019) aka Mercedes-Benz / Daimler interior-design civil claim (DE 2019), Daimler interior IP 2019… | insider | 🇩🇪 DE | — | Automotive: vehicle interiorsAutomotive: HMI design | — | Daimler | 0 | 0 | 0.0 | 0.5 | — |
| Mercedes-Benz Group (NIO / BYD engineer-recruitment disputes) (COMP-MERCEDES-NIO) aka Mercedes-Benz Group (NIO / BYD engineer-recruitment disputes), Mercedes-Benz, Daimler AG… | competitor | 🇩🇪 DE | — | Automotive: vehicle manufacturingAutomotive: electric vehicles | — | — | 0 | 0 | 0.0 | — | — |
| Meta Platforms (Snap discovery dispute over rival documents) (COMP-META-SNAP-ANTITRUST) aka Meta Platforms (Snap discovery dispute over rival documents), Meta, Facebook… | competitor | 🇺🇸 US | — | Technology platforms: social mediaAdvertising technology | — | — | 0 | 0 | 0.0 | — | — |
| Metador (G1013) aka Metador… | unknown | — | — | TelecommunicationsEducational Services | — | — | 0 | 15 | 0.0 | — | — |
| Michael Woodford (Olympus whistleblower / accounting fraud) (INS-OLYMPUS-WOODFORD-2011) aka Michael Woodford (Olympus whistleblower / accounting fraud), Michael Woodford, Olympus Woodford… | insider | 🇬🇧 GB | — | Medical devices: endoscopyElectronics: imaging equipment | — | Olympus Corporation | 0 | 0 | 0.0 | 0.5 | — |
| Microsoft Corp. (Salesforce / Slack engineer recruitment claims) (COMP-MICROSOFT-SALESFORCE) aka Microsoft Corp. (Salesforce / Slack engineer recruitment claims), Microsoft, Microsoft Corporation… | competitor | 🇺🇸 US | — | Enterprise software: collaborationCloud computing: SaaS | — | — | 0 | 0 | 0.0 | — | — |
| Millennium Partners (Renaissance Technologies trade-secret 2003) (COMP-RENTECH-MILLENNIUM) aka Millennium Partners (Renaissance Technologies trade-secret 2003), Millennium, Millennium Management… | competitor | 🇺🇸 US | — | Financial services: hedge fundsSoftware: trading systems | — | Renaissance Technologies | 0 | 0 | 0.0 | 0.5 | — |
| MirrorFace (G1054) aka MirrorFace, Earth Kasha… | state | 🇨🇳 CN | — | BroadcastingNational SecurityInternational AffairsFinance & InsuranceManufacturing+3 more | network-edgeCitrix | — | 2 | 65 | 7.2 | — | 2023 |
| Mitsubishi Electric engineer (Tianma transfer 2020) (INS-MITSUBISHI-ELECTRIC-2020) aka Mitsubishi Electric engineer (Tianma transfer 2020), Mitsubishi Electric LCD leak 2020… → Tianma Microelectronics | insider | 🇯🇵 JP | — | Electronics: TFT LCD displaysConsumer electronics | — | Mitsubishi Electric | 0 | 0 | 0.0 | 0.5 | — |
| Mo Hailong (Pioneer corn seeds) (INS-MO-2016) aka Mo Hailong (Pioneer corn seeds), Mo Hailong, Robert Mo… → DBN Group / Beijing Dabeinong Technology | insider | 🇺🇸 US | — | Agritech: seed geneticsAgriculture: corn | — | 0 | 0 | 0.0 | 1.0 | — | |
| Mo Yun + co-defendants (Pioneer corn parallel case) (INS-LIU-LOCKHEED-2014) aka Mo Yun + co-defendants (Pioneer corn parallel case), Mo Yun, Yun Mo… | insider | 🇺🇸 US | — | Agritech: seed geneticsAgriculture: corn | — | Pioneer | 0 | 0 | 0.0 | 0.5 | — |
| Moafee (G0002) aka Moafee… | unknown | — | — | — | — | — | 0 | 2 | 0.0 | — | — |
| Mofang (G0103) aka Mofang, Superman, BRONZE WALKER… | state | 🇨🇳 CN | — | Public AdministrationNational SecurityMotor Vehicle ManufacturingManufacturingUtilities | — | — | 0 | 9 | 0.0 | — | — |
| Molerats (G0021) aka Molerats, Operation Molerats, Gaza Cybergang… | state | 🌍 PS | CSExtreme JackalMandMoleratsMandOperation MoleratsKSPMolerats | Public AdministrationNational SecurityBroadcasting | — | — | 0 | 25 | 0.0 | — | — |
| Molerats (hacktivist persona) (HACK-MOLERATS-HACKTIVIST) aka Molerats (hacktivist persona), TA402 public face, Extreme Jackal… | hacktivist | — | — | GovernmentMedia | — | — | 0 | 0 | 0.0 | — | — |
| Moonstone Sleet (G1036) aka Moonstone Sleet, Storm-1789… | state | 🇰🇵 KP | MSMoonstone Sleet | Aerospace Product & Parts ManufacturingSoftware PublishersEducational ServicesUtilitiesInformation+1 more | — | — | 0 | 42 | 0.0 | — | — |
| Moses Staff (G1009) aka Moses Staff, DEV-0500, Marigold Sandstorm… | hacktivist | 🇮🇷 IR | MSMarigold SandstormCSVENGEFUL KITTEN | Public AdministrationFinance & InsuranceTransportation & WarehousingMining, Quarrying, Oil & Gas ExtractionManufacturing+1 more | — | — | 0 | 20 | 0.0 | — | — |
| MoustachedBouncer (G1019) aka MoustachedBouncer… | state | 🇧🇾 BY | — | International Affairs | — | — | 0 | 11 | 0.0 | — | — |
| Mr Hamza (Algerian hacktivist channel) (HACK-MR-HAMZA) aka Mr Hamza (Algerian hacktivist channel), Mr. Hamza, Mr Hamza… | hacktivist | 🌍 DZ | — | GovernmentDefense contractorsAerospace | — | 0 | 0 | 0.0 | 0.7 | — | |
| MuddyWater (G0069) aka MuddyWater, Earth Vetala, MERCURY… | state | 🇮🇷 IR | MSMango SandstormCSStatic KittenMandTEMP.ZagrosMandMuddyWaterCscoMuddyWater | TelecommunicationsExecutive, Legislative & Other General Government SupportFinance & InsuranceNational SecurityOil & Gas Extraction+2 more | Anoma | — | 2 | 94 | 7.0 | — | 2026 |
| Mustang Panda (G0129) aka Mustang Panda, TA416, RedDelta… | state-contractor | 🇨🇳 CN | MSTWILL TYPHOONCSMustang PandaMandUNC6384MandTEMP.HexSWBRONZE PRESIDENTCscoMustang Panda | Executive, Legislative & Other General Government SupportInternational AffairsOther Services (except Public Administration)Professional, Scientific & Technical ServicesPublic Administration | MicrosoftAnoma | — | 2 | 114 | 3.9 | — | 2026 |
| Mustard Tempest (G1020) aka Mustard Tempest, DEV-0206, TA569… | unknown | — | MSMustard TempestMandUNC1543SWGOLD PRELUDE | Software Publishers | — | — | 0 | 18 | 0.0 | — | — |
| Mysterious Team Bangladesh (HACK-MYSTERIOUS-TEAM-BD) aka Mysterious Team Bangladesh, Mysterious Team, MTB… | hacktivist | 🌍 BD | — | GovernmentEducationFinancial services | — | — | 0 | 0 | 0.0 | — | — |
| NEODYMIUM (G0055) aka NEODYMIUM, G0055… | unknown | — | MSNEODYMIUM | — | AdobeMicrosoftOracle+5 | — | 12 | 0 | 42.8 | — | 2022 |
| NIO Inc. (alleged Tesla / Apple engineer beneficiary) (COMP-NIO) aka NIO Inc. (alleged Tesla / Apple engineer beneficiary), NIO, NIO Inc… | competitor | 🇨🇳 CN | — | Automotive: electric vehiclesAutomotive: autonomous vehicles | — | 0 | 0 | 0.0 | 1.5 | — | |
| NVIDIA Corp. (Valeo source-code 2023 verdict) (COMP-NVIDIA-VALEO) aka NVIDIA Corp. (Valeo source-code 2023 verdict), NVIDIA, NVIDIA Corporation… | competitor | 🇺🇸 US | — | Semiconductor: AI acceleratorsAutomotive: autonomous vehicles | — | Valeo | 0 | 0 | 0.0 | 0.5 | — |
| NXP Semiconductors (Chimera intrusion, 2017-2020) (INS-NXP-CHIMERA-2021) aka NXP Semiconductors (Chimera intrusion, 2017-2020), NXP Chimera… | insider | 🇳🇱 NL | — | Semiconductor: automotive chipsSemiconductor: design IP | — | NXP | 0 | 0 | 0.0 | 0.5 | — |
| Naikon (G0019) aka Naikon, PLA Unit 78020, OVERRIDE PANDA… | state | 🇨🇳 CN | CSOVERRIDE PANDA | Executive, Legislative & Other General Government SupportNational SecurityInternational AffairsPublic Administration | Microsoft | United Nations Development Programme (UNDP)Association of Southeast Asian Nations (ASEAN) | 1 | 23 | 2.7 | 0.5 | 2022 |
| Nestlé SA (food-technology civil non-compete disputes) (COMP-NESTLE-FOOD-TECH) aka Nestlé SA (food-technology civil non-compete disputes), Nestle, Nestlé… | competitor | 🇨🇭 CH | — | Food and beverage: technologyConsumer products: nutrition | — | UnileverDanoneMondelez+1 more | 0 | 0 | 0.0 | 2.0 | — |
| Network Battalion 65 (NB65) (HACK-NB65) aka Network Battalion 65 (NB65), NB65, Network Battalion 65… | hacktivist | — | — | GovernmentCritical infrastructureBanking | — | — | 0 | 0 | 0.0 | — | — |
| Nigel Stepney + Mike Coughlan (Ferrari → McLaren 'Spygate') (INS-STEPNEY-FERRARI-2007) aka Nigel Stepney + Mike Coughlan (Ferrari → McLaren 'Spygate'), Stepneygate, Spygate F1 2007… | insider | 🇮🇹 IT | — | Motorsport: Formula One aerodynamicsAutomotive: vehicle dynamics | — | Ferrari | 0 | 0 | 0.0 | 0.5 | — |
| Nippon Steel grain-oriented steel civil case (JP, 2012) (INS-JP-NIPPONSTEEL-2012) aka Nippon Steel grain-oriented steel civil case (JP, 2012), Nippon Steel Posco JP 2012… | insider | 🇯🇵 JP | — | Metallurgy: electrical steelEnergy: transformer cores | — | Nippon Steel | 0 | 0 | 0.0 | 0.5 | — |
| Nissan / Mitsui materials-engineer civil case (JP, 2018) (INS-NISSAN-MITSUI-2018) aka Nissan / Mitsui materials-engineer civil case (JP, 2018), Nissan Mitsui JP 2018… | insider | 🇯🇵 JP | — | Automotive: EV batteriesSpecialty chemicals: cathode materials | — | NissanMitsui Mining & Smelting | 0 | 0 | 0.0 | 1.0 | — |
| NoName057(16) (HACK-NONAME05716) aka NoName057(16), NoName05716, NoName… | hacktivist | 🇷🇺 RU | — | GovernmentCritical infrastructureTransportationFinancial services | — | UkraineEstoniaLithuania+2 more | 0 | 0 | 0.0 | 1.2 | — |
| Nokia (Huawei engineer-recruitment dispute 2007) (COMP-NOKIA-HUAWEI-2007) aka Nokia (Huawei engineer-recruitment dispute 2007), Nokia, Nokia Networks… | competitor | 🇫🇮 FI | — | Telecommunications: 3G/4G networksTelecommunications: base stations | — | Nokia ⇄2 | 0 | 0 | 0.0 | 0.5 | — |
| Nomadic Octopus (G0133) aka Nomadic Octopus, DustSquad… | state | 🇷🇺 RU | — | Executive, Legislative & Other General Government SupportInternational Affairs | — | — | 1 | 11 | 3.6 | — | 2026 |
| OPPO (Nokia / InterDigital SEP defendants 2021-2023) (COMP-OPPO-NOKIA) aka OPPO (Nokia / InterDigital SEP defendants 2021-2023), OPPO, Guangdong Oppo Mobile… | competitor | 🇨🇳 CN | — | Consumer electronics: smartphonesTelecommunications: mobile | — | — | 0 | 0 | 0.0 | — | — |
| OilRig (G0049) aka OilRig, COBALT GYPSY, IRN2… | state | 🇮🇷 IR | MSHazel SandstormCSHelix KittenCSTwisted KittenMandAPT34SWCOBALT GYPSY | Finance & InsurancePublic AdministrationOil & Gas ExtractionChemical ManufacturingTelecommunications+1 more | Microsoft | — | 1 | 103 | 1.2 | — | 2026 |
| OpChile (HACK-OP-CHILE) aka OpChile, Operation Chile, Pirate Bay Chile… | hacktivist | — | — | GovernmentBanking | — | Carabineros | 0 | 0 | 0.0 | 0.5 | — |
| OpFerguson (HACK-OP-FERGUSON) aka OpFerguson, Operation Ferguson, Anonymous Ferguson… | hacktivist | — | — | Law enforcementGovernment: stateGovernment | — | St. Louis County | 0 | 0 | 0.0 | 0.3 | — |
| OpISIS (HACK-OP-ISIS) aka OpISIS, Operation ISIS, Anonymous OpParis… | hacktivist | — | — | Online servicesMediaReligious institutions | — | Islamic State | 0 | 0 | 0.0 | 0.3 | — |
| OpIcarus (HACK-OP-ICARUS) aka OpIcarus, Operation Icarus… | hacktivist | — | — | BankingFinancial servicesStock exchanges | — | New York Stock Exchange | 0 | 0 | 0.0 | 0.3 | — |
| OpIsrael (annual Anonymous-aligned operation) (HACK-OPISRAEL) aka OpIsrael (annual Anonymous-aligned operation), OpIsrael, #OpIsrael… | hacktivist | — | — | GovernmentFinancial servicesCritical infrastructureUtilities | — | — | 0 | 0 | 0.0 | — | — |
| OpJerusalem (HACK-OPJERUSALEM) aka OpJerusalem, OpJerusalem campaign… | hacktivist | — | — | GovernmentOnline servicesMedia | — | — | 0 | 0 | 0.0 | — | — |
| OpKKK (HACK-OP-KKK) aka OpKKK, Operation KKK, HoodsOff… | hacktivist | — | — | Online servicesGovernment | — | 0 | 0 | 0.0 | 1.0 | — | |
| OpLastResort (HACK-OP-LAST-RESORT) aka OpLastResort, Operation Last Resort… | hacktivist | — | — | Government: federalGovernment | — | US Sentencing CommissionUS Department of Justice | 0 | 0 | 0.0 | 1.0 | — |
| OpMexico (HACK-OP-MEXICO) aka OpMexico, Operation Mexico, Anonymous Mexico… | hacktivist | — | — | GovernmentLaw enforcement | — | — | 0 | 0 | 0.0 | — | — |
| OpMyanmar (HACK-OP-MYANMAR) aka OpMyanmar, Anonymous Myanmar, Myanmar Hackers… | hacktivist | — | — | GovernmentTelecommunicationsBanking | — | Tatmadaw | 0 | 0 | 0.0 | 0.3 | — |
| OpOlympicHoax (HACK-OP-OLYMPIC-HOAX) aka OpOlympicHoax, OpOlympics… | hacktivist | — | — | GovernmentCritical infrastructure | — | — | 0 | 0 | 0.0 | — | — |
| OpPetrol / Cutting Sword of Justice (HACK-OP-SAUDI-ARAMCO) aka OpPetrol / Cutting Sword of Justice, Cutting Sword of Justice, OpPetrol… | hacktivist | — | — | Energy: gas turbinesCritical infrastructure | — | Saudi Aramco | 0 | 0 | 0.0 | 0.5 | — |
| OpSaudi (HACK-OP-OPSAUDI) aka OpSaudi, Operation Saudi, Saudi Cyber Army (anti-)… | hacktivist | — | — | GovernmentEnergy: gas turbines | — | — | 0 | 0 | 0.0 | — | — |
| OpWhiteRose (HACK-OP-WHITEROSE) aka OpWhiteRose, Operation White Rose… | hacktivist | — | — | GovernmentGovernment: federal | — | — | 0 | 0 | 0.0 | — | — |
| OpenAI (Google / DeepMind researcher-defection civil claims) (COMP-OPENAI-GOOGLE-DEEPMIND) aka OpenAI (Google / DeepMind researcher-defection civil claims), OpenAI, OpenAI LP… | competitor | 🇺🇸 US | — | Software: artificial intelligenceSoftware: machine learning | — | Google BrainDeepMindAnthropic | 0 | 0 | 0.0 | 1.5 | — |
| Orangeworm (G0071) aka Orangeworm… | unknown | — | — | Health Care & Social AssistanceChemical ManufacturingMedical Equipment & SuppliesProfessional, Scientific & Technical ServicesSoftware Publishers | — | — | 0 | 4 | 0.0 | — | — |
| PLATINUM (G0068) aka PLATINUM, TwoForOne, G0068… | unknown | — | MSPLATINUM | Public Administration | — | — | 0 | 15 | 0.0 | — | — |
| POLONIUM (G1005) aka POLONIUM, Plaid Rain, UNC4453… | state | 🌍 LB | MSPlaid RainMSPOLONIUMCSINCENDIARY JACKALMandUNC4453 | ManufacturingInformationAerospace Product & Parts ManufacturingNational Security | — | — | 0 | 11 | 0.0 | — | — |
| PROMETHIUM (G0056) aka PROMETHIUM, StrongPity, G0056… | state | 🇹🇷 TR | CscoPROMETHIUM | Public AdministrationTelecommunications | AdobeMicrosoftOracle+5 | — | 12 | 19 | 42.8 | — | 2022 |
| Pakistan Cyber Army (HACK-PAKISTAN-CYBER-ARMY) aka Pakistan Cyber Army, PCA, Pak Cyber Army… | hacktivist | 🇵🇰 PK | — | GovernmentDefense contractorsTelecommunications | — | CBINSGIndian Army | 0 | 0 | 0.0 | 1.0 | — |
| Palantir Technologies (i2 Group trade-secret 2010-2013) (COMP-PALANTIR) aka Palantir Technologies (i2 Group trade-secret 2010-2013), Palantir, Palantir Technologies Inc… | competitor | 🇺🇸 US | — | Software: intelligence analyticsDefense contractors | — | i2 Inc | 0 | 0 | 0.0 | 0.5 | — |
| Pangang Group (TiO2 chloride-route beneficiary) (COMP-PANGANG) aka Pangang Group (TiO2 chloride-route beneficiary), Pangang, Pangang Group… | competitor | 🇨🇳 CN | — | Specialty chemicals: titanium dioxideMetals: state-owned | — | — | 0 | 0 | 0.0 | — | — |
| Patchwork (G0040) aka Patchwork, Hangover Group, Dropping Elephant… | state | 🇮🇳 IN | CSQUILTED TIGERCSVICEROY TIGER | Public AdministrationInternational AffairsNational SecurityProfessional, Scientific & Technical ServicesOther Services (except Public Administration) | — | — | 0 | 63 | 0.0 | — | — |
| Pay2Key (HACK-PAY2KEY) aka Pay2Key, Pay2Key.Ransom… | hacktivist | 🇮🇷 IR | — | Technology platformsDefense contractorsFinancial services | — | — | 0 | 0 | 0.0 | — | — |
| Pegatron Corp. (Apple / Foxconn civil cross-disputes) (COMP-PEGATRON) aka Pegatron Corp. (Apple / Foxconn civil cross-disputes), Pegatron, Pegatron Corporation… | competitor | 🇹🇼 TW | — | Electronics: contract manufacturingConsumer electronics: assembly | — | — | 0 | 0 | 0.0 | — | — |
| Phantom Squad (HACK-PHANTOM-SQUAD) aka Phantom Squad, PhantomSquad… | hacktivist | — | — | Entertainment: gaming servicesOnline services | — | 0 | 0 | 0.0 | 1.5 | — | |
| Philips solar-display employee civil action (NL, 2014) (INS-PHILIPS-SOLAR-2014) aka Philips solar-display employee civil action (NL, 2014), Philips Dutch civil trade secret 2014… | insider | 🇳🇱 NL | — | Electronics: display panelsEnergy: solar PV | — | Philips | 0 | 0 | 0.0 | 0.5 | — |
| Pinterest (Facebook / Twitter civil non-compete claims) (COMP-PINTEREST-FACEBOOK) aka Pinterest (Facebook / Twitter civil non-compete claims), Pinterest, Pinterest Inc… | competitor | 🇺🇸 US | — | Technology platforms: social mediaAdvertising technology | — | 0 | 0 | 0.0 | 1.0 | — | |
| Pirelli (Continental tire-pattern dispute) (COMP-PIRELLI-CONTI-2013) aka Pirelli (Continental tire-pattern dispute), Pirelli, Pirelli & C SpA… | competitor | 🇮🇹 IT | — | Automotive: tiresManufacturing: rubber compounds | — | 0 | 0 | 0.0 | 1.5 | — | |
| PittyTiger (G0011) aka PittyTiger, APT24, PITTY PANDA… | state | 🇨🇳 CN | CSPITTY PANDAMandAPT24MandTemp.Pittytiger | Public AdministrationMining, Quarrying, Oil & Gas ExtractionAerospace Product & Parts Manufacturing | — | — | 0 | 3 | 0.0 | — | — |
| Play (G1040) aka Play… | criminal | — | CISAPlay | Public AdministrationHealth Care & Social AssistanceBroadcastingUtilitiesSoftware Publishers | — | — | 0 | 35 | 0.0 | — | — |
| Pony.ai (alleged Waymo / Apple engineer beneficiary) (COMP-PONY-AI) aka Pony.ai (alleged Waymo / Apple engineer beneficiary), Pony.ai, Pony AI Inc… | competitor | 🇨🇳 CN | — | Automotive: autonomous vehiclesSoftware: machine learning | — | 0 | 0 | 0.0 | 1.5 | — | |
| Poseidon Group (G0033) aka Poseidon Group, G0033… | state | 🇧🇷 BR | KSPPoseidon Group | Finance & InsuranceTelecommunicationsManufacturingMining, Quarrying, Oil & Gas ExtractionPublic Administration | — | — | 0 | 11 | 0.0 | — | — |
| Predatory Sparrow (HACK-PREDATORY-SPARROW) aka Predatory Sparrow, Gonjeshke Darande, Indra… | hacktivist | — | — | Critical infrastructure: railCritical infrastructure: steelCritical infrastructure: fuel distributionGovernment | — | — | 0 | 0 | 0.0 | — | — |
| Project Chanology (HACK-PROJECT-CHANOLOGY) aka Project Chanology, Chanology, OpChanology… | hacktivist | — | — | Religious institutionsOnline services | — | Church of Scientology | 0 | 0 | 0.0 | 0.5 | — |
| Putter Panda (G0024) aka Putter Panda, APT2, MSUpdater… | state | 🇨🇳 CN | CSPutter PandaMandAPT2 | Aerospace Product & Parts ManufacturingNational Security | — | — | 0 | 7 | 0.0 | — | — |
| Qualtrics (Medallia trade-secret civil claim 2019) (COMP-MEDALLIA-QUALTRICS) aka Qualtrics (Medallia trade-secret civil claim 2019), Qualtrics, Qualtrics International Inc… | competitor | 🇺🇸 US | — | Enterprise software: customer experienceSaaS | — | Medallia | 0 | 0 | 0.0 | 0.5 | — |
| Quanergy Systems (Velodyne LiDAR 2016 cross-suits) (COMP-QUANERGY-VELODYNE) aka Quanergy Systems (Velodyne LiDAR 2016 cross-suits), Quanergy, Quanergy Systems Inc… | competitor | 🇺🇸 US | — | Automotive: LiDAR sensorsAutomotive: autonomous vehicles | — | — | 0 | 0 | 0.0 | — | — |
| RTM (G0048) aka RTM, G0048… | unknown | — | — | Credit Intermediation & Related Activities (Banking)Software Publishers | — | — | 0 | 13 | 0.0 | — | — |
| RaidForums / BreachForums hacktivist ecosystem (HACK-RBN-DEFACEMENT-CREW) aka RaidForums / BreachForums hacktivist ecosystem, RaidForums, BreachForums… | hacktivist | 🇺🇸 US | — | Government: federalLaw enforcementHealthcareFinancial servicesTechnology platforms+1 more | — | FBI ⇄1 | 0 | 0 | 0.0 | 0.2 | — |
| RaidForums staff (HACK-RAIDFORUMS-STAFF) aka RaidForums staff, Omnipotent (RaidForums founder)… | hacktivist | — | — | Technology platformsGovernmentFinancial services | — | — | 0 | 0 | 0.0 | — | — |
| Rancor (G0075) aka Rancor, Rancor group, G0075… | state | 🇨🇳 CN | — | Public Administration | — | — | 0 | 16 | 0.0 | — | — |
| Reality Winner (INS-WINNER-2017) aka Reality Winner, Reality Leigh Winner… | insider | 🇺🇸 US | — | IntelligenceNational security | — | NSA ⇄2 | 0 | 0 | 0.0 | 0.5 | — |
| Red Hacker Alliance (HACK-RED-HACKER-ALLIANCE) aka Red Hacker Alliance, 红客联盟, Hongke Lianmeng… | hacktivist | 🇨🇳 CN | — | GovernmentMedia | — | — | 0 | 0 | 0.0 | — | — |
| RedCurl (G1039) aka RedCurl, Earth Kapre, Red Wolf… | unknown | — | — | Administrative & Support, Waste ManagementInsurance Carriers & Related ActivitiesCredit Intermediation & Related Activities (Banking) | — | — | 0 | 60 | 0.0 | — | — |
| RedEcho (G1042) aka RedEcho… | unknown | — | — | Electric Power Generation, Transmission & DistributionWater TransportationUtilitiesSoftware Publishers | — | — | 0 | 8 | 0.0 | — | — |
| RedHack (HACK-REDHACK) aka RedHack, Red Hack Turkey, Kızıl Hack… | hacktivist | — | — | GovernmentEnergy: gas turbinesTelecommunications | — | — | 0 | 0 | 0.0 | — | — |
| Renault 2011 alleged spy affair (later discredited) (INS-RENAULT-2011) aka Renault 2011 alleged spy affair (later discredited), Renault 2011, Renault EV spy case 2011… | insider | 🇫🇷 FR | — | Automotive: EV batteriesAutomotive: electric vehicles | — | Renault ⇄3 | 0 | 0 | 0.0 | 0.5 | — |
| Renault EV-battery 'spy affair' (2011, later debunked) (INS-RENAULT-EV-2011) aka Renault EV-battery 'spy affair' (2011, later debunked), Renault EV affair, Renault electric-vehicle espionage… | insider | 🇫🇷 FR | — | Automotive: EV batteriesAutomotive: vehicle manufacturing | — | Renault ⇄3 | 0 | 0 | 0.0 | 0.5 | — |
| Renault EV-program internal investigation (mishandled, 2011) (INS-RENAULT-LIBYA-2011) aka Renault EV-program internal investigation (mishandled, 2011), Renault EV affair 2011… | insider | 🇫🇷 FR | — | Automotive: EV batteriesAutomotive: EV powertrain | — | Renault ⇄3 | 0 | 0 | 0.0 | 0.5 | — |
| Rivian Automotive (Tesla 2020 trade-secret civil suit) (COMP-RIVIAN-TESLA-2020) aka Rivian Automotive (Tesla 2020 trade-secret civil suit), Rivian, Rivian Automotive Inc… | competitor | 🇺🇸 US | — | Automotive: electric vehiclesAutomotive: EV batteries | — | Tesla ⇄5 | 0 | 0 | 0.0 | 0.5 | — |
| Robert Bosch GmbH (BMW e-axle insider-recruitment 2017) (COMP-BOSCH-BMW-2017) aka Robert Bosch GmbH (BMW e-axle insider-recruitment 2017), Robert Bosch GmbH, Bosch… | competitor | 🇩🇪 DE | — | Automotive: EV powertrainAutomotive: parts manufacturing | — | — | 0 | 0 | 0.0 | — | — |
| Robert O'Rourke (Dura-Bar / Jiangsu rival) (INS-OROURKE-DURABAR-2019) aka Robert O'Rourke (Dura-Bar / Jiangsu rival), Robert O'Rourke… | insider | 🇺🇸 US | — | Metallurgy: cast-iron bar stockIndustrial: ferrous foundry | — | Dura-Bar | 0 | 0 | 0.0 | 0.5 | — |
| Robinhood Markets (Citadel and IEX HFT-engineer civil claims) (COMP-ROBINHOOD-CITADEL-HFT) aka Robinhood Markets (Citadel and IEX HFT-engineer civil claims), Robinhood, Robinhood Markets Inc… | competitor | 🇺🇸 US | — | Financial services: retail brokerageSoftware: trading systems | — | Citadel | 0 | 0 | 0.0 | 0.5 | — |
| Rocke (G0106) aka Rocke, Aged Libra… | unknown | — | CscoRocke | Securities, Commodity Contracts & Other Financial Investments | — | — | 0 | 50 | 0.0 | — | — |
| Ross Ulbricht ('Dread Pirate Roberts', Silk Road) (HACK-ULBRICHT-DPR) aka Ross Ulbricht ('Dread Pirate Roberts', Silk Road), DPR, Dread Pirate Roberts… | hacktivist | — | — | Financial services: dark marketsCryptocurrency | — | — | 0 | 0 | 0.0 | — | — |
| RustBolt (HACK-RUSTBOLT) aka RustBolt, RustBolt collective… | hacktivist | — | — | Critical infrastructureEnergy: gas turbinesUtilities | — | — | 0 | 0 | 0.0 | — | — |
| SAIC Motor (Volkswagen / GM JV-defection civil disputes) (COMP-SAIC) aka SAIC Motor (Volkswagen / GM JV-defection civil disputes), SAIC, SAIC Motor… | competitor | 🇨🇳 CN | — | Automotive: vehicle manufacturingAutomotive: electric vehicles | — | Shanghai-VWSAIC-GM | 0 | 0 | 0.0 | 1.0 | — |
| SAP (TomorrowNow / Oracle case) (COMP-SAP) aka SAP (TomorrowNow / Oracle case), SAP, SAP AG… | competitor | 🇩🇪 DE | — | Enterprise software: ERPSoftware: customer support | — | Oracle ⇄2 | 0 | 0 | 0.0 | 0.5 | — |
| SK Hynix engineer (SanDisk/Toshiba NAND counter-leak 2014) (INS-SK-HYNIX-2014) aka SK Hynix engineer (SanDisk/Toshiba NAND counter-leak 2014), SK Hynix NAND case 2014… | insider | 🇰🇷 KR | — | Semiconductor: NAND flash memory | — | SK Hynix ⇄1 | 0 | 0 | 0.0 | 1.0 | — |
| SK Innovation (LG Chem 2019-2021 ITC defendant) (COMP-SK-INNOVATION) aka SK Innovation (LG Chem 2019-2021 ITC defendant), SK Innovation, SK On… | competitor | 🇰🇷 KR | — | Automotive: EV batteriesAutomotive: electric vehicles | — | 0 | 0 | 0.0 | 0.5 | — | |
| SK Innovation employees referred for EV-battery secrets (KR, 2022) (INS-SK-LG-EVBATTERY-2022) aka SK Innovation employees referred for EV-battery secrets (KR, 2022), SK-LG battery 30 employees… | insider | 🇰🇷 KR | — | Automotive: EV batteriesEnergy: battery R&D | — | 0 | 0 | 0.0 | 0.5 | — | |
| Saab AB (Swedish defense civil IP cross-claims) (COMP-SAAB-DEFENSE) aka Saab AB (Swedish defense civil IP cross-claims), Saab, Saab AB… | competitor | 🇸🇪 SE | — | Defense: military aircraftDefense contractors | — | — | 0 | 0 | 0.0 | — | — |
| Safran-Suzhou JV insiders (CFM/LEAP engine conspiracy) (INS-SAFRAN-CFM-2018) aka Safran-Suzhou JV insiders (CFM/LEAP engine conspiracy), Safran-Snecma insider conspiracy… | insider | 🇫🇷 FR | — | Aerospace: jet enginesAerospace: commercial aviation | — | 0 | 0 | 0.0 | 1.0 | — | |
| Saint Bear (G1031) aka Saint Bear, Storm-0587, TA471… | state | 🇷🇺 RU | CSSaint Bear | Executive, Legislative & Other General Government SupportNational SecurityPublic AdministrationSoftware Publishers | — | — | 0 | 26 | 0.0 | — | — |
| Salt Typhoon (G1045) aka Salt Typhoon, GhostEmperor, FamousSparrow… | state | 🇨🇳 CN | MSSalt TyphoonCSOPERATOR PANDAMandUNC2286 | TelecommunicationsUtilities | — | — | 0 | 23 | 0.0 | — | — |
| Samsung Display engineer indictment (KR, 2017) (INS-KOREA-NIS-DISPLAY-2017) aka Samsung Display engineer indictment (KR, 2017), Samsung Display KR 2017… | insider | 🇰🇷 KR | — | Electronics: OLED displaysDisplay: foldable AMOLED | — | 0 | 0 | 0.0 | 0.5 | — | |
| Samsung Display engineer indictment (KR, 2019 / BOE) (INS-KOREA-NIS-DISPLAY-2019) aka Samsung Display engineer indictment (KR, 2019 / BOE), Samsung Display KR 2019 BOE… → COMP-BOE | insider | 🇰🇷 KR | — | Electronics: OLED displaysDisplay: backplane TFT | — | 0 | 0 | 0.0 | 0.5 | — | |
| Samsung Foundry former executive (PRC fab plans 2023) (INS-SAMSUNG-FOUNDRY-2023) aka Samsung Foundry former executive (PRC fab plans 2023), Samsung Foundry leak 2023, Choi Jin-seog… | insider | 🇰🇷 KR | — | Semiconductor: chip fabricationSemiconductor: foundry servicesSemiconductor: fab construction | — | Samsung FoundrySamsung Electronics | 0 | 0 | 0.0 | 0.7 | — |
| Samsung SDI (LG Chem / CATL civil disputes) (COMP-SAMSUNG-SDI) aka Samsung SDI (LG Chem / CATL civil disputes), Samsung SDI, Samsung SDI Co Ltd… | competitor | 🇰🇷 KR | — | Automotive: EV batteriesElectronics: lithium-ion cells | — | — | 0 | 0 | 0.0 | — | — |
| Sandworm Team (G0034) aka Sandworm Team, ELECTRUM, Telebots… | state | 🇷🇺 RU | MSSeashell BlizzardCSVoodoo BearMandAPT44MandTEMP.NobleSWIRON VIKINGDrgELECTRUM | Electric Power Generation, Transmission & DistributionInternational AffairsNational SecurityPublic AdministrationArts, Entertainment & Recreation+4 more | Microsoft | Organisation for the Prohibition of Chemical Weapons | 2 | 109 | 3.9 | 0.1 | 2026 |
| Scarlet Mimic (G0029) aka Scarlet Mimic, G0029, Golfing Taurus… | state | 🇨🇳 CN | — | Other Services (except Public Administration)Public Administration | MicrosoftAdobeApple | — | 3 | 2 | 10.6 | — | 2022 |
| Scattered Spider (G1015) aka Scattered Spider, Roasted 0ktapus, Octo Tempest… | unknown | — | MSOcto TempestCSScattered SpiderMandUNC3944CISAScattered Spider | TelecommunicationsAdministrative & Support, Waste ManagementSoftware PublishersProfessional, Scientific & Technical ServicesArts, Entertainment & Recreation+5 more | Microsoft | 1 | 84 | 1.2 | 0.3 | 2026 | |
| Schaeffler Group (Continental takeover insider-trading) (COMP-SCHAEFFLER-CONTI) aka Schaeffler Group (Continental takeover insider-trading), Schaeffler, Schaeffler AG… | competitor | 🇩🇪 DE | — | Automotive: bearingsIndustrial equipment: motion control | — | Continental ⇄1 | 0 | 0 | 0.0 | 0.5 | — |
| Schneider Electric ex-engineers criminal conviction (France 2018) (COMP-SCHNEIDER-2018) aka Schneider Electric ex-engineers criminal conviction (France 2018), Schneider Electric trade-secret… | competitor | 🇫🇷 FR | — | Industrial equipment: power managementIndustrial equipment: industrial automation | — | Schneider Electric | 0 | 0 | 0.0 | 0.5 | — |
| Sea Turtle (G1041) aka Sea Turtle, Teal Kurma, Marbled Dust… | state | 🇹🇷 TR | MSMarbled DustMandUNC1326CscoSea Turtle | Public AdministrationNational SecurityTelecommunicationsComputing Infrastructure Providers, Data Processing & HostingOil & Gas Extraction+1 more | — | — | 0 | 40 | 0.0 | — | — |
| SenseTime Group (US Entity-Listed AI vendor) (COMP-SENSETIME) aka SenseTime Group (US Entity-Listed AI vendor), SenseTime, 商汤科技… | competitor | 🇨🇳 CN | — | Software: computer visionSurveillance technology | — | 0 | 0 | 0.0 | 1.0 | — | |
| SentinelOne (Cylance / BlackBerry civil claims) (COMP-SENTINELONE-CYLANCE) aka SentinelOne (Cylance / BlackBerry civil claims), SentinelOne, SentinelOne Inc… | competitor | 🇺🇸 US | — | Cybersecurity: endpoint protectionCybersecurity: EDR | — | CylanceCarbon BlackBlackBerry | 0 | 0 | 0.0 | 1.5 | — |
| Sergey Aleynikov (INS-ALEYNIKOV-2010) aka Sergei Aleynikov, Sergey Aleynikov… | insider | 🇺🇸 US | — | Financial services: high-frequency tradingSoftware: trading systems | — | Goldman Sachs | 0 | 0 | 0.0 | 0.5 | — |
| ServiceNow (BMC Software trade-secret civil disputes) (COMP-SERVICENOW-BMC) aka ServiceNow (BMC Software trade-secret civil disputes), ServiceNow, ServiceNow Inc… | competitor | 🇺🇸 US | — | Enterprise software: ITSMCloud computing: SaaS | — | BMCCA Technologies | 0 | 0 | 0.0 | 1.0 | — |
| Shapour Moinian (former US Army pilot / aviation contractor) (INS-MOINIAN-2022) aka Shapour Moinian (former US Army pilot / aviation contractor), Shapour Moinian… | insider | 🇺🇸 US | — | Defense: military aircraftAerospace: avionics | — | — | 0 | 0 | 0.0 | — | — |
| Sherry Chen (NOAA hydrologist — charges dropped) (INS-CHEN-NOAA-2014) aka Sherry Chen (NOAA hydrologist — charges dropped), Xiafen Chen, Sherry Chen… | insider | 🇺🇸 US | — | Government: federal hydrologyCritical infrastructure: dam data | — | NOAA | 0 | 0 | 0.0 | 0.5 | — |
| ShinyHunters (HACK-SHINYHUNTERS) aka ShinyHunters, Shiny Hunters… | criminal | — | — | Technology platformsOnline servicesFinancial services | — | 0 | 6 | 0.0 | 4.7 | — | |
| SideCopy (G1008) aka SideCopy… | state | 🇵🇰 PK | — | Public Administration | — | — | 0 | 25 | 0.0 | — | — |
| Sidewinder (G0121) aka Sidewinder, T-APT-04, Rattlesnake… | state | 🇮🇳 IN | CSRAZOR TIGER | National SecurityPublic Administration | cmsAdobe | — | 1 | 42 | 4.3 | — | 2018 |
| SiegedSec (HACK-SIEGEDSEC) aka SiegedSec… | hacktivist | — | — | Government: stateThink tanksHealthcareDefense contractors | — | — | 0 | 0 | 0.0 | — | — |
| Siemens Energy (Westinghouse turbine-disc dispute 2019) (COMP-SIEMENS-WESTINGHOUSE) aka Siemens Energy (Westinghouse turbine-disc dispute 2019), Siemens Energy, Siemens AG… | competitor | 🇩🇪 DE | — | Energy: gas turbinesPower generation: utility-scale | — | — | 0 | 0 | 0.0 | — | — |
| Siemens Mobility v. RSS engineers (UK rail signalling) (INS-SIEMENS-RAIL-SUMMARY-2023) aka Siemens Mobility v. RSS engineers (UK rail signalling), Siemens v Yunex RSS UK… | insider | 🇬🇧 GB | — | Rail: signalling systemsCritical infrastructure: rail operations | — | Siemens | 0 | 0 | 0.0 | 0.5 | — |
| Siemens Mobility v. Rail Signalling Services (UK High Court 2023) (INS-SIEMENS-YUNEX-UK-2023) aka Siemens Mobility v. Rail Signalling Services (UK High Court 2023), Siemens v. RSS, Siemens Mobility UK trade-secret… | insider | 🇬🇧 GB | — | Transportation: rail signallingIndustrial equipment: traffic systems | — | Siemens Mobility | 0 | 0 | 0.0 | 0.5 | — |
| Silence (G0091) aka Silence, Whisper Spider, Silence group… | unknown | — | CSWhisper Spider | Credit Intermediation & Related Activities (Banking)Monetary Authorities — Central BankFinance & Insurance | — | — | 0 | 43 | 0.0 | — | — |
| Silent Librarian (G0122) aka Silent Librarian, TA407, COBALT DICKENS… | state | 🇮🇷 IR | SWCOBALT DICKENS | Educational ServicesPublic Administration | — | — | 0 | 20 | 0.0 | — | — |
| SilverTerrier (G0083) aka SilverTerrier… | state | 🌍 NG | — | InformationEducational ServicesManufacturing | — | — | 0 | 5 | 0.0 | — | — |
| Sinovel Wind Group (American Superconductor case) (COMP-SINOVEL) aka Sinovel Wind Group (American Superconductor case), Sinovel, Sinovel Wind Group… | competitor | 🇨🇳 CN | — | Energy: wind turbinesIndustrial equipment: power generation | — | American Superconductor (AMSC) | 0 | 0 | 0.0 | 0.5 | — |
| Snap Inc. (Apple Vision Pro defendant 2025-2026) (COMP-SNAP-APPLE-VISION) aka Snap Inc. (Apple Vision Pro defendant 2025-2026), Snap, Snap Inc.… | competitor | 🇺🇸 US | — | Consumer electronics: AR/VRSoftware: computer vision | — | Apple ⇄9 | 0 | 0 | 0.0 | 0.5 | — |
| Snowflake (Teradata civil claims over engineer defections) (COMP-SNOWFLAKE-TERADATA) aka Snowflake (Teradata civil claims over engineer defections), Snowflake, Snowflake Inc… | competitor | 🇺🇸 US | — | Enterprise software: data warehousingCloud computing: analytics | — | 0 | 0 | 0.0 | 1.5 | — | |
| Soldiers of Solomon (HACK-SOLDIERS-OF-SOLOMON) aka Soldiers of Solomon, Soldiers of Solomon Group, Edalat-e Ali ally… | hacktivist | — | — | GovernmentCritical infrastructure: fuel distribution | — | Iranian Atomic Energy Organization | 0 | 0 | 0.0 | 0.5 | — |
| Solntsepyok (Solntsepek front for GRU Sandworm) (HACK-SOLNTSEPYOK) aka Solntsepyok (Solntsepek front for GRU Sandworm), Solntsepek, Solntsepyok… | hacktivist | 🇷🇺 RU | — | TelecommunicationsGovernmentCritical infrastructure | — | Kyivstar | 0 | 0 | 0.0 | 0.3 | — |
| Sowbug (G0054) aka Sowbug, G0054… | state | — | — | Public Administration | — | — | 0 | 13 | 0.0 | — | — |
| Spotify Technology (VoxTonePRO/Mujae 2020 trade-secret) (COMP-SPOTIFY-VOXTONEPRO) aka Spotify Technology (VoxTonePRO/Mujae 2020 trade-secret), Spotify, Spotify Technology SA… | competitor | 🇸🇪 SE | — | Software: audio streamingAdvertising technology: audio ads | — | Mujae Group (VoxTonePRO) | 0 | 0 | 0.0 | 0.5 | — |
| Sri Lanka Cyber Force (HACK-SRI-LANKA-CYBER-FORCE) aka Sri Lanka Cyber Force, SLCF… | hacktivist | — | — | GovernmentMedia | — | — | 0 | 0 | 0.0 | — | — |
| Star Blizzard (G1033) aka Star Blizzard, SEABORGIUM, Callisto Group… | state | 🇷🇺 RU | MSStar BlizzardCSGOSSAMER BEARMandUNC4057CISAStar Blizzard | Educational ServicesNational SecurityPublic AdministrationOther Services (except Public Administration)Professional, Scientific & Technical Services | — | — | 0 | 31 | 0.0 | — | — |
| Stealth Falcon (G0038) aka Stealth Falcon, FruityArmor, G0038… | state | 🇦🇪 AE | — | BroadcastingOther Services (except Public Administration)Public Administration | — | — | 0 | 19 | 0.0 | — | — |
| Stellantis NV (Renault / PSA legacy civil engineer disputes) (COMP-STELLANTIS-RENAULT) aka Stellantis NV (Renault / PSA legacy civil engineer disputes), Stellantis, Stellantis NV… | competitor | 🇳🇱 NL | — | Automotive: vehicle manufacturingAutomotive: electric vehicles | — | Renault-Nissan | 0 | 0 | 0.0 | 0.5 | — |
| Storm-0501 (G1053) aka Storm-0501… | unknown | — | MSStorm-0501 | Public AdministrationJustice, Public Order & SafetyManufacturingTransportation & WarehousingHealth Care & Social Assistance+2 more | — | — | 0 | 62 | 0.0 | — | — |
| Storm-0530 (MISP-47945864) aka Storm-0530, DEV-0530, H0lyGh0st… | state | 🇰🇵 KP | — | — | cmsMicrosoftPhp Everywhere Project+9 | — | 11 | 0 | 31.9 | — | 2022 |
| Storm-0784 (HACK-STORM-0784) aka Storm-0784, Storm-0784 (Microsoft cluster)… | hacktivist | 🇮🇷 IR | — | GovernmentDefense contractorsCritical infrastructure | — | — | 0 | 0 | 0.0 | — | — |
| Storm-1811 (G1046) aka Storm-1811, UNC4393, CURLY SPIDER… | unknown | — | MSStorm-1811CSCURLY SPIDERMandUNC4393 | Software Publishers | — | — | 0 | 47 | 0.0 | — | — |
| Stormous (HACK-STORMOUS) aka Stormous, Stormous Team… | hacktivist | — | — | Financial servicesManufacturingGovernment | — | — | 0 | 0 | 0.0 | — | — |
| Strider (G0041) aka Strider, ProjectSauron, Sauron… | state | 🇺🇸 US | KSPProjectSauron | Executive, Legislative & Other General Government SupportNational SecurityTelecommunicationsCredit Intermediation & Related Activities (Banking)Professional, Scientific & Technical Services | — | — | 0 | 6 | 0.0 | — | — |
| Su Bin (Boeing C-17 / F-22 / F-35 data) (INS-SU-BIN-2016) aka Su Bin (Boeing C-17 / F-22 / F-35 data), Su Bin, Stephen Su… | insider | 🇺🇸 US | — | Aerospace: military aircraftDefense: fighter aircraftDefense contractors | — | Boeing ⇄1 | 0 | 0 | 0.0 | 0.3 | — |
| Suckfly (G0039) aka Suckfly, APT22, G0039… | state | 🇨🇳 CN | MandAPT22 | — | — | — | 0 | 7 | 0.0 | — | — |
| Syrian Electronic Army (HACK-SYRIAN-ELECTRONIC-ARMY) aka Syrian Electronic Army, SEA, الجيش السوري الإلكتروني… | hacktivist | 🌍 SY | — | MediaGovernmentOnline services | — | APReutersWashington Post+2 more | 0 | 0 | 0.0 | 1.7 | — |
| TA2541 (G1018) aka TA2541… | unknown | — | — | Air TransportationAerospace Product & Parts ManufacturingTransportation & WarehousingManufacturingNational Security | — | — | 0 | 42 | 0.0 | — | — |
| TA459 (G0062) aka TA459, G0062… | state | 🇨🇳 CN | — | Credit Intermediation & Related Activities (Banking)Public Administration | — | — | 0 | 8 | 0.0 | — | — |
| TA505 (G0092) aka TA505, Hive0065, Spandex Tempest… | state | 🇷🇺 RU | MSSpandex TempestCSGRACEFUL SPIDERCSMONTY SPIDER | Finance & InsuranceHealth Care & Social AssistanceRetail TradeEducational ServicesManufacturing+2 more | Microsoft | — | 1 | 51 | 3.2 | — | 2026 |
| TA551 (G0127) aka TA551, GOLD CABIN, Shathak… | unknown | — | SWGOLD CABIN | — | — | — | 0 | 23 | 0.0 | — | — |
| TA577 (G1037) aka TA577, Hive0118… | state | 🇷🇺 RU | — | Software Publishers | — | — | 0 | 11 | 0.0 | — | — |
| TA578 (G1038) aka TA578… | unknown | — | — | Software Publishers | — | — | 0 | 7 | 0.0 | — | — |
| TEMP.Veles (G0088) aka TEMP.Veles, XENOTIME, G0088… | state | 🇷🇺 RU | MandTEMP.VelesDrgXENOTIME | Oil & Gas ExtractionChemical ManufacturingElectric Power Generation, Transmission & DistributionUtilitiesSoftware Publishers | — | — | 0 | 0 | 0.0 | — | — |
| TSMC (GlobalFoundries 2019 patent cross-suits) (COMP-TSMC-GLOBALFOUNDRIES) aka TSMC (GlobalFoundries 2019 patent cross-suits), TSMC, Taiwan Semiconductor Manufacturing… | competitor | 🇹🇼 TW | — | Semiconductor: foundry servicesSemiconductor: chip fabrication | — | GlobalFoundries | 0 | 0 | 0.0 | 0.5 | — |
| Tanium Inc. (McAfee customer-list dispute) (COMP-TANIUM) aka Tanium Inc. (McAfee customer-list dispute), Tanium, Tanium Inc… | competitor | 🇺🇸 US | — | Cybersecurity: endpoint management | — | — | 0 | 0 | 0.0 | — | — |
| Tapandegan (HACK-TAPANDEGAN) aka Tapandegan, Palpitating Hearts, تپندگان… | hacktivist | — | — | Critical infrastructure: railGovernmentTelecommunications | — | — | 0 | 0 | 0.0 | — | — |
| Tata Consultancy Services (Epic Systems case) (COMP-TATA-TCS) aka Tata Consultancy Services (Epic Systems case), Tata Consultancy Services, TCS… | competitor | 🇮🇳 IN | — | IT services: consultingHealthcare software: hospital management | — | Epic Systems | 0 | 0 | 0.0 | 0.5 | — |
| Team GhostShell (HACK-TEAM-GHOSTSHELL) aka Team GhostShell, GhostShell, DeadMellox crew… | hacktivist | — | — | Educational institutionsGovernmentFinancial services | — | — | 0 | 0 | 0.0 | — | — |
| TeamTNT (G0139) aka TeamTNT, Adept Libra… | unknown | — | — | Securities, Commodity Contracts & Other Financial Investments | D2IqNetAppOpensuse+9 | — | 1 | 75 | 4.3 | — | 2019 |
| Ten ex-Samsung employees indicted (DRAM tech → CXMT) (INS-SAMSUNG-CXMT-2025) aka Ten ex-Samsung employees indicted (DRAM tech → CXMT), Samsung CXMT 10 indictment, Korea CXMT DRAM case… → ChangXin Memory Technologies (CXMT / DRAM) | insider | 🇰🇷 KR | — | Semiconductor: DRAM memorySemiconductor: HBM memory | — | Samsung ⇄1 | 0 | 0 | 0.0 | 0.5 | — |
| Thales Group (Atos / Safran civil defense-IP disputes) (COMP-THALES-DEFENSE) aka Thales Group (Atos / Safran civil defense-IP disputes), Thales, Thales SA… | competitor | 🇫🇷 FR | — | Defense contractorsDefense: radar and electronics | — | 0 | 0 | 0.0 | 1.5 | — | |
| The Jester (HACK-THE-JESTER) aka The Jester, th3j35t3r, Jester Actual… | hacktivist | — | — | Religious institutionsGovernmentMedia | — | WikiLeaks | 0 | 0 | 0.0 | 0.3 | — |
| The White Company (G0089) aka The White Company… | unknown | — | — | National SecurityExecutive, Legislative & Other General Government SupportPublic Administration | — | — | 0 | 12 | 0.0 | — | — |
| Threat Group-1314 (G0028) aka Threat Group-1314, TG-1314… | unknown | — | — | Utilities | — | — | 0 | 7 | 0.0 | — | — |
| Threat Group-3390 (G0027) aka Threat Group-3390, Earth Smilodon, TG-3390… | state | 🇨🇳 CN | MSLinen TyphoonMSCircle TyphoonCSEmissary PandaCSIron TigerMandAPT27MandTEMP.Hippo | Aerospace Product & Parts ManufacturingPublic AdministrationNational SecurityInformationMining, Quarrying, Oil & Gas Extraction+3 more | MicrosoftCpuidLinux | — | 5 | 83 | 18.2 | — | 2026 |
| Thrip (G0076) aka Thrip, G0076, ATK78… | state | — | — | TelecommunicationsAerospace Product & Parts ManufacturingNational Security | — | — | 0 | 8 | 0.0 | — | — |
| ThyssenKrupp industrial-data intrusion (2016) (INS-THYSSENKRUPP-2016) aka ThyssenKrupp industrial-data intrusion (2016), ThyssenKrupp 2016 breach… | insider | 🇩🇪 DE | — | Industrial equipment: steelIndustrial equipment: elevators | — | ThyssenKrupp | 0 | 0 | 0.0 | 0.5 | — |
| Tianma Microelectronics (COMP-TIANMA) aka Tianma, Tianma Microelectronics, 天马… | competitor | 🇨🇳 CN | — | Electronics: TFT LCD displaysConsumer electronics | — | — | 0 | 0 | 0.0 | — | — |
| ToddyCat (G1022) aka ToddyCat, Websiic… | unknown | — | KSPToddyCat | National SecurityExecutive, Legislative & Other General Government SupportPublic Administration | — | — | 0 | 38 | 0.0 | — | — |
| TomTom NV (Microsoft FAT32 / GPS patent dispute 2009) (COMP-TOMTOM-MICROSOFT-NAV) aka TomTom NV (Microsoft FAT32 / GPS patent dispute 2009), TomTom, TomTom NV… | competitor | 🇳🇱 NL | — | Automotive: navigation systemsSoftware: mapping | — | Microsoft ⇄2 | 0 | 0 | 0.0 | 0.5 | — |
| Tonto Team (G0131) aka Tonto Team, Earth Akhlut, BRONZE HUNTLEY… | state | 🇨🇳 CN | CSKarma PandaSWBRONZE HUNTLEYKSPCactusPete | Executive, Legislative & Other General Government SupportNational SecurityOil & Gas ExtractionMining (except Oil & Gas)Finance & Insurance+6 more | edrMicrosoftTrendmicro | — | 2 | 23 | 5.5 | — | 2026 |
| Transparent Tribe (G0134) aka Transparent Tribe, COPPER FIELDSTONE, APT36… | state | 🇵🇰 PK | CSMythic LeopardMandAPT36SWCOPPER FIELDSTONEKSPTransparent TribeCscoTransparent Tribe | National SecurityInternational AffairsProfessional, Scientific & Technical Services | Microsoft | — | 1 | 23 | 2.7 | — | 2022 |
| Tropic Trooper (G0081) aka Tropic Trooper, Pirate Panda, KeyBoy… | state | 🇨🇳 CN | CSPirate PandaMandAPT23 | Public AdministrationHealth Care & Social AssistanceTransportation & WarehousingComputer & Electronic Product Manufacturing | Microsoft | — | 1 | 56 | 1.2 | — | 2026 |
| Turla (G0010) aka Turla, IRON HUNTER, Group 88… | state | 🇷🇺 RU | MSSecret BlizzardCSVenomous BearCSWhite BearMandUNC4210SWIRON HUNTERKSPTurla | National SecurityInternational AffairsExecutive, Legislative & Other General Government SupportEducational ServicesProfessional, Scientific & Technical Services+4 more | — | — | 0 | 92 | 0.0 | — | — |
| Twilio (Bandwidth / Vonage civil claims after SendGrid) (COMP-TWILIO-SENDGRID) aka Twilio (Bandwidth / Vonage civil claims after SendGrid), Twilio, Twilio Inc… | competitor | 🇺🇸 US | — | Telecommunications: CPaaSSoftware: communications APIs | — | BandwidthVonage | 0 | 0 | 0.0 | 1.0 | — |
| Two Sigma Investments (alumni trade-secret civil disputes) (COMP-TWO-SIGMA) aka Two Sigma Investments (alumni trade-secret civil disputes), Two Sigma, Two Sigma Investments LP… | competitor | 🇺🇸 US | — | Financial services: quantitative tradingSoftware: trading systems | — | — | 0 | 0 | 0.0 | — | — |
| UMC (post-Jinhua semiconductor civil disputes) (COMP-UMC-OTHER) aka UMC (post-Jinhua semiconductor civil disputes), UMC, United Microelectronics… | competitor | 🇹🇼 TW | — | Semiconductor: foundry servicesSemiconductor: DRAM memory | — | 0 | 0 | 0.0 | 1.0 | — | |
| UNC3886 (G1048) aka UNC3886… | state | 🇨🇳 CN | MandUNC3886 | National SecurityInformationTelecommunicationsUtilities | — | — | 0 | 63 | 0.0 | — | — |
| UNC6040 (MISP-84669320) aka UNC6040… | unknown | — | MandUNC6040 | — | — | — | 0 | 5 | 0.0 | — | — |
| USDoD (HACK-USDOD) aka USDoD, EquationCorp, NetSec… | hacktivist | — | — | Defense contractorsGovernmentData brokersTechnology platforms | — | 0 | 0 | 0.0 | 0.8 | — | |
| USPS leak crew (USPS 2023) (HACK-USPS-LEAK-CREW) aka USPS leak crew (USPS 2023), USPS hack 2023… | hacktivist | — | — | Government: federal | — | US Postal Service | 0 | 0 | 0.0 | 1.0 | — |
| Uber Technologies (Waymo IP-theft beneficiary) (COMP-UBER) aka Uber Technologies (Waymo IP-theft beneficiary), Uber, Uber Technologies… | competitor | 🇺🇸 US | — | Automotive: autonomous vehiclesSoftware: machine learning | — | Waymo ⇄5 | 0 | 0 | 0.0 | 0.5 | — |
| Ukrainian Cyber Alliance (HACK-UCA) aka Ukrainian Cyber Alliance, UCA, UkrCyberAlliance… | hacktivist | 🇺🇦 UA | — | GovernmentDefense contractorsCritical infrastructure | — | TrigonaRoskomnadzor | 0 | 0 | 0.0 | 0.7 | — |
| Unilever PLC (Nestlé / P&G civil disputes) (COMP-UNILEVER-NESTLE) aka Unilever PLC (Nestlé / P&G civil disputes), Unilever, Unilever PLC… | competitor | 🇬🇧 GB | — | Consumer products: food and personal careConsumer products: nutrition | — | NestléProcter & Gamble | 0 | 0 | 0.0 | 1.0 | — |
| UserSec (HACK-USERSEC) aka UserSec, UserSec Collective… | hacktivist | 🇷🇺 RU | — | GovernmentFinancial services | — | NATO ⇄1 | 0 | 0 | 0.0 | 0.5 | — |
| VOID MANTICORE (G1055) aka VOID MANTICORE, COBALT MYSTIQUE, Handala Hack… | state | 🇮🇷 IR | MSRed SandstormCSBANISHED KITTEN | Public AdministrationMedical Equipment & SuppliesUtilitiesJustice, Public Order & Safety | — | 0 | 87 | 0.0 | 0.5 | — | |
| Veeva Systems (IQVIA trade-secret 2017-2025) (COMP-VEEVA-IQVIA) aka Veeva Systems (IQVIA trade-secret 2017-2025), Veeva, Veeva Systems Inc… | competitor | 🇺🇸 US | — | Enterprise software: life sciences CRMHealthcare software: data products | — | IQVIA | 0 | 0 | 0.0 | 0.5 | — |
| Velodyne LiDAR / Ouster Inc. (multiple IP disputes) (COMP-VELODYNE-OUSTER) aka Velodyne LiDAR / Ouster Inc. (multiple IP disputes), Velodyne, Velodyne Lidar… | competitor | 🇺🇸 US | — | Automotive: LiDAR sensorsAutomotive: autonomous vehicles | — | QuanergyHesai | 0 | 0 | 0.0 | 1.0 | — |
| Velvet Ant (G1047) aka Velvet Ant… | unknown | — | — | — | — | — | 0 | 31 | 0.0 | — | — |
| Volatile Cedar (G0123) aka Volatile Cedar, Lebanese Cedar, DeftTorero… | state | 🌍 LB | MSAmethyst Rain | TelecommunicationsBroadcastingEducational ServicesNational Security | — | — | 0 | 7 | 0.0 | — | — |
| Volkswagen AG (López/GM 1993 case) (COMP-VOLKSWAGEN-LOPEZ) aka Volkswagen AG (López/GM 1993 case), Volkswagen, VW… | competitor | 🇩🇪 DE | — | Automotive: vehicle manufacturingManufacturing: supply chainAutomotive: electric vehicles | — | 0 | 0 | 0.0 | 0.3 | — | |
| Volt Typhoon (G1017) aka Volt Typhoon, BRONZE SILHOUETTE, Vanguard Panda… | state | 🇨🇳 CN | MSVolt TyphoonCSVanguard PandaMandUNC3236SWBRONZE SILHOUETTE | Electric Power Generation, Transmission & DistributionWater, Sewage & Other SystemsTelecommunicationsTransportation & WarehousingWater Transportation+6 more | network-edgeIvantiAnoma | — | 4 | 98 | 15.6 | — | 2026 |
| WIRTE (G0090) aka WIRTE, Ashen Lepus… | state | 🌍 PS | KSPWIRTE | International AffairsFinance & InsuranceNational SecurityProfessional, Scientific & Technical ServicesInformation | — | — | 0 | 42 | 0.0 | — | — |
| WM Motor (Geely 2024 SPC trade-secret defendant) (COMP-WM-MOTOR) aka WM Motor (Geely 2024 SPC trade-secret defendant), WM Motor, Weltmeister… | competitor | 🇨🇳 CN | — | Automotive: electric vehiclesAutomotive: vehicle manufacturing | — | Geely | 0 | 0 | 0.0 | 0.5 | — |
| Walter Biot (Italian Navy / Russia espionage) (INS-BIOT-ITALY-2024) aka Walter Biot (Italian Navy / Russia espionage), Walter Biot… | insider | 🇮🇹 IT | — | Defense: naval systemsGovernment: classified intelligence | — | 0 | 0 | 0.0 | 1.0 | — | |
| Walter Lian-Heen Liew (INS-LIEW-2014) aka Walter Liew, Walter Lian-Heen Liew, Liew Lian-Heen… → Pangang Group (TiO2 chloride-route beneficiary) | insider | 🇺🇸 US | — | Specialty chemicals: titanium dioxideIndustrial coatings | — | DuPont | 0 | 0 | 0.0 | 0.5 | — |
| Water Galura (G1050) aka Water Galura, GOLD FEATHER… | unknown | — | — | Professional, Scientific & Technical ServicesCredit Intermediation & Related Activities (Banking)Publishing Industries (Including Software)Software Publishers | — | — | 0 | 4 | 0.0 | — | — |
| Waymo v. Uber (civil trade-secret, US) (COMP-WAYMO-UBER-CIVIL-2017) aka Waymo v. Uber (civil trade-secret, US), Waymo v. Uber… | competitor | 🇺🇸 US | — | Automotive: autonomous vehiclesAutomotive: LiDAR sensors | — | Waymo ⇄5 | 0 | 0 | 0.0 | 0.5 | — |
| WeRide (alleged Apple / Waymo engineer beneficiary) (COMP-WERIDE) aka WeRide (alleged Apple / Waymo engineer beneficiary), WeRide, WeRide.ai… | competitor | 🇨🇳 CN | — | Automotive: autonomous vehiclesSoftware: machine learning | — | 0 | 0 | 0.0 | 1.0 | — | |
| Weibao Wang (Apple autonomous-systems source code) (INS-WANG-APPLE-2023) aka Weibao Wang (Apple autonomous-systems source code), Weibao Wang… | insider | 🇺🇸 US | — | Automotive: autonomous vehiclesSoftware: machine learning | — | Apple ⇄9 | 0 | 0 | 0.0 | 0.5 | — |
| Wenfeng Lu (ev3 / Edwards Lifesciences medical devices) (INS-LU-MEDDEV-2014) aka Wenfeng Lu (ev3 / Edwards Lifesciences medical devices), Wenfeng Lu… | insider | 🇺🇸 US | — | Medical devices: cardiovascular implantsMedical devices: catheters | — | ev3/CovidienEdwards Lifesciences | 0 | 0 | 0.0 | 1.0 | — |
| Whitefly (G0107) aka Whitefly… | unknown | — | — | Hospitals | Microsoft | SingHealth | 1 | 15 | 4.3 | 1.0 | 2016 |
| Windigo (G0124) aka Windigo… | unknown | — | — | Justice, Public Order & SafetySoftware Publishers | — | — | 0 | 7 | 0.0 | — | — |
| Windshift (G0112) aka Windshift, Bahamut, Windy Phoenix… | unknown | — | — | Public AdministrationUtilities | — | — | 0 | 24 | 0.0 | — | — |
| Winnti Group (G0044) aka Winnti Group, Blackfly, APT41… | state | 🇨🇳 CN | MSBrass TyphoonMSLeopard TyphoonCSWICKED SPIDERCSWICKED PANDAMandAPT41 | Software Publishers | BoschSymantec | — | 2 | 8 | 4.4 | — | 2021 |
| Winter Vivern (G1035) aka Winter Vivern, TA473, UAC-0114… | state | 🇷🇺 RU | — | Executive, Legislative & Other General Government SupportOther Services (except Public Administration)UtilitiesPublic Administration | mailZimbra | — | 1 | 36 | 4.3 | — | 2021 |
| Wistron Corp. (Apple / Compal civil disputes) (COMP-WISTRON) aka Wistron Corp. (Apple / Compal civil disputes), Wistron, Wistron Corporation… | competitor | 🇹🇼 TW | — | Electronics: contract manufacturingConsumer electronics: assembly | — | — | 0 | 0 | 0.0 | — | — |
| Wizard Spider (G0102) aka Wizard Spider, UNC1878, TEMP.MixMaster… | state | 🇷🇺 RU | MSPeriwinkle TempestMSPistachio TempestCSWizard SpiderCSGrim SpiderMandUNC1878MandTEMP.MixMaster | HospitalsPublic AdministrationEducational ServicesManufacturingFinance & Insurance+2 more | Microsoft | — | 1 | 92 | 1.2 | — | 2026 |
| Workday (Oracle HCM civil claims) (COMP-WORKDAY-ORACLE) aka Workday (Oracle HCM civil claims), Workday, Workday Inc… | competitor | 🇺🇸 US | — | Enterprise software: HCMEnterprise software: financials | — | 0 | 0 | 0.0 | 1.0 | — | |
| XPeng Motors (XMotors — Apple autonomous beneficiary) (COMP-XPENG) aka XPeng Motors (XMotors — Apple autonomous beneficiary), XPeng, XPeng Motors… | competitor | 🇨🇳 CN | — | Automotive: autonomous vehiclesAutomotive: electric vehicles | — | Apple ⇄9 | 0 | 0 | 0.0 | 0.5 | — |
| XakNet Team (HACK-XAKNET) aka XakNet Team, XakNet… | hacktivist | 🇷🇺 RU | — | GovernmentEnergy: gas turbinesTelecommunications | — | — | 0 | 0 | 0.0 | — | — |
| Xiaolang Zhang (Apple self-driving) (INS-ZHANG-APPLE-2018) aka Xiaolang Zhang (Apple self-driving), Xiaolang Zhang, Zhang Xiaolang… → XPeng Motors (XMotors — Apple autonomous beneficiary) | insider | 🇺🇸 US | — | Automotive: autonomous vehiclesSoftware: machine learning | — | Apple ⇄9 | 0 | 0 | 0.0 | 0.5 | — |
| Xiaoqing Zheng (GE turbine technology) (INS-WANG-GE-2019) aka Xiaoqing Zheng (GE turbine technology), Xiaoqing Zheng, Zheng Xiaoqing… | insider | 🇺🇸 US | — | Energy: gas turbinesIndustrial equipment: power generation | — | GE Power | 0 | 0 | 0.0 | 0.5 | — |
| Xiaorong 'Shannon' You (Coca-Cola / Eastman BPA-free coatings) (INS-YOU-COCACOLA-2022) aka Xiaorong 'Shannon' You (Coca-Cola / Eastman BPA-free coatings), Xiaorong You, Shannon You… | insider | 🇺🇸 US | — | Specialty chemicals: BPA-free can coatingsSpecialty chemicals: pigments | — | AkzoNobelBASFDow+4 more | 0 | 0 | 0.0 | 3.5 | — |
| Xtal Inc. / Dongfang Jingyuan trade-secret theft (ASML) (INS-ASML-XTAL-2018) aka Xtal Inc. / Dongfang Jingyuan trade-secret theft (ASML), Xtal, ASML XTAL case… → Dongfang Jingyuan Electron (ASML software case) | insider | 🇳🇱 NL | — | Semiconductor: lithography equipmentSemiconductor: design software | — | ASML ⇄4 | 0 | 0 | 0.0 | 0.5 | — |
| Yangtze Memory Technologies (YMTC) (COMP-YMTC) aka Yangtze Memory Technologies (YMTC), YMTC, Yangtze Memory… | competitor | 🇨🇳 CN | — | Semiconductor: 3D NAND flash | — | — | 0 | 0 | 0.0 | — | — |
| Yanjun Xu (MSS officer, GE Aviation case) (INS-XU-2019) aka Yanjun Xu (MSS officer, GE Aviation case), Yanjun Xu, Xu Yanjun… | insider | 🇺🇸 US | — | Aerospace: jet enginesAerospace: commercial aviation | — | GE Aviation | 0 | 0 | 0.0 | 0.5 | — |
| Yanqing Ye (PLA lieutenant at Boston University) (INS-YE-BU-2020) aka Yanqing Ye (PLA lieutenant at Boston University), Yanqing Ye… | insider | 🇺🇸 US | — | Academia: physics/biomedical researchDefense: military research | — | Boston University | 0 | 0 | 0.0 | 0.5 | — |
| Yaskawa Electric industrial-robotics leak (JP, 2019) (INS-YASKAWA-2019) aka Yaskawa Electric industrial-robotics leak (JP, 2019), Yaskawa JP 2019… | insider | 🇯🇵 JP | — | Industrial: roboticsAutomation: motion control | — | Yaskawa Electric | 0 | 0 | 0.0 | 0.5 | — |
| Yi-Chi Shih (UCLA / Chengdu GaStone semiconductors) (INS-SHIH-UCLA-2019) aka Yi-Chi Shih (UCLA / Chengdu GaStone semiconductors), Shih Yi-chi, Yi-Chi Shih… | insider | 🇺🇸 US | — | Semiconductor: monolithic microwave integrated circuitsDefense: military electronics | — | Cree | 0 | 0 | 0.0 | 0.5 | — |
| Yoshitaka Sugita (Toshiba NAND theft 2014) (INS-TOSHIBA-NAND-2014) aka Yoshitaka Sugita (Toshiba NAND theft 2014), Yoshitaka Sugita… | insider | 🇯🇵 JP | — | Semiconductor: NAND flash memory | — | 0 | 0 | 0.0 | 2.0 | — | |
| Yu Long (United Technologies Research Center / F119-F135) (INS-LONG-UTRC-2016) aka Yu Long (United Technologies Research Center / F119-F135), Yu Long… | insider | 🇺🇸 US | — | Aerospace: jet enginesDefense: military aircraft | — | United Technologies Research Center | 0 | 0 | 0.0 | 0.5 | — |
| Yuanyuan Liu civil settlement (ASML / Xtal cohort) (INS-ASML-LIU-2015) aka Yuanyuan Liu civil settlement (ASML / Xtal cohort), Yuanyuan Liu, Yuanyuan Liu (ASML/Suzhou earlier IP transfer)… → Dongfang Jingyuan Electron (ASML software case) | insider | 🇳🇱 NL | — | Semiconductor: lithography equipmentSemiconductor: photomask softwareSoftware: chip-design tools | — | ASML ⇄4 | 0 | 0 | 0.0 | 0.3 | — |
| ZIRCONIUM (G0128) aka ZIRCONIUM, APT31, Violet Typhoon… | state | 🇨🇳 CN | MSViolet TyphoonCSJUDGMENT PANDAMandAPT31 | Executive, Legislative & Other General Government SupportInternational Affairs | Microsoft | — | 2 | 42 | 7.9 | — | 2013 |
| ZTE Corporation (Nokia / Ericsson SEP cross-disputes) (COMP-ZTE-NOKIA) aka ZTE Corporation (Nokia / Ericsson SEP cross-disputes), ZTE, ZTE Corporation… | competitor | 🇨🇳 CN | — | Telecommunications: network equipmentTelecommunications: 4G/5G infrastructure | — | 0 | 0 | 0.0 | 1.5 | — | |
| Zoom Video Communications (Cisco WebEx civil claims) (COMP-ZOOM-CISCO-WEBEX) aka Zoom Video Communications (Cisco WebEx civil claims), Zoom, Zoom Video Communications Inc… | competitor | 🇺🇸 US | — | Enterprise software: video conferencingCloud computing: communications | — | Cisco ⇄1 | 0 | 0 | 0.0 | 0.5 | — |
| admin@338 (G0018) aka admin@338, TEMPER PANDA, Admin338… | state | 🇨🇳 CN | CSTEMPER PANDAMandadmin@338 | Finance & InsuranceProfessional, Scientific & Technical ServicesPublic AdministrationSoftware Publishers | — | — | 0 | 18 | 0.0 | — | — |
| menuPass (G0045) aka menuPass, Cicada, POTASSIUM… | state | 🇨🇳 CN | MSPurple TyphoonCSStone PandaMandAPT10 | Health Care & Social AssistanceNational SecurityAerospace Product & Parts ManufacturingFinance & InsuranceWater Transportation+9 more | BoschSymantec | — | 2 | 65 | 4.4 | — | 2021 |
| scattered lapsus$ hunters (MISP-f18a87a4) aka scattered lapsus$ hunters, Scattered Lapsus Hunters… | criminal | — | — | — | — | — | 0 | 6 | 0.0 | — | — |
| thedarkoverlord (extortion-hacktivism hybrid) (HACK-THEDARKOVERLORD) aka thedarkoverlord (extortion-hacktivism hybrid), thedarkoverlord, TDO… | hacktivist | — | — | HealthcareEntertainment: mediaEducation | — | Netflix | 0 | 0 | 0.0 | 0.3 | — |