Ransomware Intelligence

Ransomware needs a way in. Stolen credentials are the cheapest one.

Check Your Exposure

morrisgroupint Ransomware Attack

Ransomware victimRansomed

orionGroup

—Country

Jan 13, 2026Discovered

Overview

View group profile

Discovered

8 months ago

Confidence

70%

Severity

Medium

Status

Claimed

Threat group

Total victims

31

First seen

Oct 2025

Last seen

Jul 2026

Group status

active

Sophistication

0

Impact score

50

Threat level

1.9/10

Aggressiveness5/10

Lethality0/10

Criticality0.5/10

Status breakdown

Claimed

this victim

100.0%31

Targeted sectors

Education Financial Services Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Other victims

Same group · orion

Group activity

Monthly attacks · orion

31

total · avg 7.8/mo