Ransomware needs a way in. Stolen credentials are the cheapest one.

townofnorwell.net Ransomware Attack

townofnorwell.netRansomed

3amGroup

United StatesCountry

Sep 4, 2025Discovered

Overview

View group profile

Domain

townofnorwell.net

Industry

Government & Defense

Country

United States

Discovered

11 months ago

Confidence

70%

Severity

Medium

Status

Claimed

Threat group

3am

Total victims

First seen

Sep 2025

Last seen

Jun 2026

Group status

active

Sophistication

Impact score

Threat level

1.9/10

Aggressiveness3.3/10

Lethality0/10

Criticality2.6/10

Status breakdown

Claimed

this victim

100.0%13

Targeted sectors

Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Technology

Victim's position within group

Industry

Government & Defense

Known target sector

Country

United States

Frequently targeted country

Other victims

View all (13)

Same group · 3am

Palmero
Argentina
Claimed
INSA INDELMA S.A.
Argentina
Claimed
BSynchro Holding
Germany
Claimed
molinoscabodi.com.ar
Argentina
Claimed
WS Soluções Corporativas Ltda.
Brazil
Claimed
AGROEXPORT INTERNACIONAL
Mexico
Claimed

Group activity

Monthly attacks · 3am

total · avg 3.3/mo