Ransomware group profile · #248 by claimed victims

Minteye ransomware

MintEye is a ransomware group with concentrated activity in North America, targeting professional services, construction, engineering, architecture, and logistics sectors, with victims documented in the US and Chile; limited public technical analysis is available.

Active First seen Dec 2025

5Victims claimed on leak sites

0Victims in the last 30 days

0Victims in the last 90 days

2Countries hit

2Leak-site URLs tracked, 0 online

12 Dec 2025Latest claim recorded

Victimology

Who Minteye claims to have breached, from 5 leak-site posts recorded by VULONE.

Claims per month last 12 months

Top sectors

Professional Services2

Financial Services1

Agriculture and Food Production1

Transportation1

Top countries

United States4

Chile1

Latest claimed victims 5 most recent

Victim	Sector	Country	Claimed
Keylogistics Chile SA keylogistics.cl	Transportation	CL	12 Dec 2025
Inter-American Tropical Tuna Commission (IATTC) iattc.org	Agriculture and Food Production	US	12 Dec 2025
Sponseller Group, Inc. sponsellergroup.com	Professional Services	US	12 Dec 2025
Cranford, Buckley, Schultze, Tomchin, Allen & Buie, P.A. southcharlottelawfirm.com	Financial Services	US	12 Dec 2025
David M. Schwarz Architects dmsas.com	Professional Services	US	12 Dec 2025

All 5 Minteye victims, searchable

Full victim list with claim posts, domains, timing and exports, plus the negotiation chats and leak-site screenshots VULONE archives for this crew.

Start free Sign in

Tactics, techniques and procedures

ATT&CK technique mapping for Minteye is in progress. Victimology, infrastructure status and leak-site tracking are live above.

Indicators, detections and the full playbook

Hashes, C2 addresses, onion services, Sigma and YARA detections per technique, and the negotiation transcripts are available to signed-in analysts.

See full IOCs

Frequently asked

Is Minteye ransomware still active?

Minteye is tracked as active. The most recent leak-site claim VULONE recorded is dated 12 December 2025.

How many victims has Minteye claimed?

VULONE has recorded 5 leak-site victim claims attributed to Minteye since December 2025, across 2 countries and 4 sectors.

Which industries does Minteye target?

The sectors most often named on the Minteye leak site are Professional Services, Financial Services, Agriculture and Food Production.

Which countries are most affected by Minteye?

Most Minteye victims recorded by VULONE are located in United States, Chile.

Where does VULONE get Minteye victim data?

Claims are collected continuously from the group's own leak sites and cross-checked with ransomware.live and RansomLook. A claim is the group's assertion, not a confirmed breach.

Other ransomware groups

Victim claims are collected from leak sites and enrichment partners (ransomware.live, RansomLook) and represent the group's own assertions, not confirmed breaches. Profile last updated 16 September 2026. Questions or corrections: [email protected].