Coinbasecartel Claims Demand.io as a Ransomware Victim
Summary
Ransomware.live reports that actor coinbasecartel claimed Demand.io as a victim, demanded payment, and threatened disruption to data or operations. The claim is unconfirmed.
Key points
- The record names Demand.io, a U.S. technology company, as the claimed victim.
- The claim is attributed to ransomware actor coinbasecartel and linked to the actor’s listing at hxxp://fjg4zi4opkxkvdz7mvwp7h6goe4tcby3hhkrz43pht4j3vakhy75znyd[.]onion/companies/demand.
- The post says the actor demanded payment and threatened disruption to data or operations.
- The publisher states it cannot confirm the claim’s accuracy.
Article Details
- Victim
- Demand.io
- Claim Date
- 2026-06-12
- Encryption Status
- Unknown; the source does not confirm encryption.
- Exfiltration Status
- Unknown; the source does not confirm exfiltration.
- Ransom Demand
- The ransomware group reportedly demanded payment; amount not disclosed. The claim is unverified.
- Leak Status
- No leak or publication is reported; only a ransomware-group claim is described.
Threat Actors
Countries
Industries
E-commerceDemand.io, a United States technology company in e-commerce and AI shopping tools, was targeted in a ransomware claim by threat actor coinbasecartel.TechnologyDemand.io, a United States technology company in e-commerce and AI shopping tools, was targeted in a ransomware claim by threat actor coinbasecartel.