cmdorganization
Known ransomware group ACTIVE Currently active
CMD is a new kind of company that specializes in corporate system security and in identifying vulnerabilities across all aspects of the software used by a company. CMD operates on a global scale recognizing the critical importance of timeliness and confidentiality.
8
Total Claims
5
Critical
—
Records Claimed
3
Industries Hit
Active span: May 2, 2026 – May 31, 2026 · 8 organizations targeted
Currently active
Actor Threat Profile
Activity Timeline
Peak: May 2026 (8)May 2026
LessMore
May 2026Share this profile
Top Targeted Industries
Healthcare 5
Education 1
Construction 1
Tradecraft & Infrastructure
0
Documented tools
0 / 0
MITRE tactics / techniques
2
Known leak sites
Targeted Organizations
Claims by cmdorganization
Critical
Ransomware Claim: Hospice Savannah
Hospice Savannah
cmdorganization
Ransomware Healthcare
Jun 2, 2026 Critical
Ransomware Claim: Capital Family Physicians
Capital Family Physicians
cmdorganization
Ransomware Healthcare
Jun 1, 2026 Low
Ransomware Claim: Lake Washington School District
Lake Washington School District
cmdorganization
Ransomware Education
Jun 1, 2026 Critical
Ransomware Claim: Stonehenge Therapeutic Community
Stonehenge Therapeutic Community
cmdorganization
Ransomware Healthcare
May 18, 2026 Critical
Ransomware Claim: WholeHealth Chicago
WholeHealth Chicago
cmdorganization
Ransomware Healthcare
May 16, 2026 Critical
Ransomware Claim: Houston Eye Associates
Houston Eye Associates
cmdorganization
Ransomware Healthcare
May 15, 2026 Low
Ransomware Claim: JG Stewart Construction
JG Stewart Construction
cmdorganization
Ransomware Construction
May 4, 2026 Low
Ransomware Claim: Zampell
Zampell
cmdorganization
Ransomware
May 4, 2026