Threat Actor
ByteToBreach
- First Reported
- Mar 12, 2026
- Latest Reported
- Oct 14, 2026
Reported Context (9)
- An actor using this handle claims to have copied 10 databases from Ampath Laboratories; the claim has not been independently verified. Actor Claims to Have Copied Ampath Laboratories Databases, Including 80M+ Admission Records
- A forum user using this name claimed to have RFZO databases and to have distributed the data through five file mirrors. The claim is unverified. Forum User Claims Serbian Health Insurance Databases Were Leaked
- Reportedly hacked Romania’s National Agency for Cadastre and Property Registration (ANCPI), stole information, and attempted to extort the agency. French Tax Authority Says Breach Exposed Data of 678,000 People
- Posted the unverified claim of compromising Magyar Ãllamkincstár and accessing systems including Oracle Identity Manager vaults and VMware vCenter. Actor Claims Access to Hungary’s State Treasury, Including vCenter and Identity Manager
- Identified by the article as the threat actor and attributed to the alleged breach and ransomware activity; the claims are unverified. Romanian Land Registry Agency Reportedly Listed for Sale After Alleged Breach
MITRE ATT&CK (6)
Vendors (3)
Products (12)
Tools (2)
Industries (2)
Countries (6)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.
