Ransomware needs a way in. Stolen credentials are the cheapest one.

ORA-ELBA Group Ransomware Attack

groupe-ora.comData extortion

pearGroup

FranceCountry

Jun 30, 2026Discovered

Overview

View group profile

Domain

groupe-ora.com

Industry

Professional Services

Country

France

Discovered

3 months ago

Attack date

Jun 23, 2026

Confidence

100%

Severity

Medium

Status

Claimed

Threat group

pear

Total victims

First seen

Sep 2025

Last seen

Sep 2026

Group status

active

Sophistication

Impact score

Threat level

3.1/10

Aggressiveness5/10

Lethality0/10

Criticality4.4/10

Status breakdown

Claimed

this victim

100.0%84

Targeted sectors

Education Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Victim's position within group

Industry

Professional Services

Known target sector

Country

France

Frequently targeted country

Other victims

View all (84)

Same group · pear

Foss Inc.
United States
Claimed
Kovo Healthtech Corp
United States
Claimed
EdgeChem Jamaica Limited
Jamaica
Claimed
Next Level Urgent Care
United States
Claimed
Island Networks
Jamaica
Claimed
Mogren, Glessner & Ahrens
United States
Claimed

Group activity

Monthly attacks · pear

total · avg 6.5/mo