Ransomware group profile · #153 by claimed victims

Majinahanashi ransomware

Majinahanashi is a ransomware operation tracked by VULONE since August 2026. Its leak site has named 22 victims since August 2026, 7 of them in the last 30 days. The group most often targets Other, Hospitality, Retail & E-Commerce.

Active First seen Aug 2026

22Victims claimed on leak sites

7Victims in the last 30 days

22Victims in the last 90 days

14Countries hit

1Leak-site URLs tracked, 1 online

1 Sep 2026Latest claim recorded

Victimology

Who Majinahanashi claims to have breached, from 22 leak-site posts recorded by VULONE.

Claims per month last 12 months

Top sectors

Other3

Hospitality3

Retail & E-Commerce3

Technology3

Manufacturing2

Agriculture and Food Production1

Healthcare1

Energy & Utilities1

Top countries

Italy2

Colombia2

United States2

Spain2

Switzerland1

France1

Malaysia1

Lithuania1

Latest claimed victims 12 most recent

Victim	Sector	Country	Claimed
TERRACOM & MONTCAU terracom.es	Technology	ES	1 Sep 2026
TERRA* & MON** terracom.es	Technology	ES	29 Aug 2026
MONTCAU	Not Found	—	29 Aug 2026
PCA Group Sdn. Bhd. pca group sdn. bhd.	Other	MY	25 Aug 2026
PCA *****	Not Found	—	23 Aug 2026
Grand Ion Delemen Hotel	Hospitality	—	20 Aug 2026
The Margo Hotel themargohotel.com	Hospitality	GB	20 Aug 2026
PIO PIO piopio.com.co	Retail & E-Commerce	CO	16 Aug 2026
BONJOUR GROUP bonjourgroup.net	Other	IN	16 Aug 2026
KT RESTAURANT ktr.co.th	Hospitality	TH	16 Aug 2026
SON-VIDEO son-video.com	Retail & E-Commerce	FR	12 Aug 2026
GRUPO STARFOODS starfoods.pt	Agriculture and Food Production	PT	12 Aug 2026

All 22 Majinahanashi victims, searchable

Full victim list with claim posts, domains, timing and exports, plus the negotiation chats and leak-site screenshots VULONE archives for this crew.

Start free Sign in

Tactics, techniques and procedures

ATT&CK technique mapping for Majinahanashi is in progress. Victimology, infrastructure status and leak-site tracking are live above.

Indicators, detections and the full playbook

Hashes, C2 addresses, onion services, Sigma and YARA detections per technique, and the negotiation transcripts are available to signed-in analysts.

See full IOCs

Frequently asked

Is Majinahanashi ransomware still active?

Majinahanashi is tracked as active. The most recent leak-site claim VULONE recorded is dated 1 September 2026. 7 victims were claimed in the last 30 days.

How many victims has Majinahanashi claimed?

VULONE has recorded 22 leak-site victim claims attributed to Majinahanashi since August 2026, across 14 countries and 9 sectors.

Which industries does Majinahanashi target?

The sectors most often named on the Majinahanashi leak site are Other, Hospitality, Retail & E-Commerce.

Which countries are most affected by Majinahanashi?

Most Majinahanashi victims recorded by VULONE are located in Italy, Colombia, United States.

Where does VULONE get Majinahanashi victim data?

Claims are collected continuously from the group's own leak sites and cross-checked with ransomware.live and RansomLook. A claim is the group's assertion, not a confirmed breach.

Other ransomware groups

Victim claims are collected from leak sites and enrichment partners (ransomware.live, RansomLook) and represent the group's own assertions, not confirmed breaches. Profile last updated 16 September 2026. Questions or corrections: [email protected].