Ransomware needs a way in. Stolen credentials are the cheapest one.

K Subsea Group Ransomware Attack

Ransomware victimRansomed

everestGroup

NorwayCountry

Apr 13, 2026Discovered

Overview

View group profile

Industry

Energy & Utilities

Country

Norway

Discovered

4 months ago

Attack date

Apr 13, 2026

Confidence

100%

Severity

Medium

Status

Claimed

Threat group

everest

Total victims

160

First seen

Aug 2025

Last seen

Aug 2026

Group status

active

Sophistication

Impact score

101

Threat level

3.8/10

Aggressiveness10/10

Lethality0.2/10

Criticality0.8/10

Status breakdown

Data Leaked3.1%5

Claimed

this victim

96.9%155

Targeted sectors

Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Victim's position within group

Industry

Energy & Utilities

Known target sector

Country

Norway

Frequently targeted country

Other victims

View all (160)

Same group · everest

Keysight
United States
Claimed
Stadler
Switzerland
Claimed
Powerweave Group
India
Claimed
Mansfield Family Dentistry
United States
Claimed
Omnicell
United States
Claimed
Ingersoll Rand
United States
Claimed

Group activity

Monthly attacks · everest

160

total · avg 12.3/mo