Ransomware Tracker (Entry #152): dAn0n

The report summarizes the activity of the dAn0n hacker group first observed in Spring 2024: a data-broker extortion operation that stole and sold victim data and publicly posted 19 victims on a clear-net/dark-web leak site. Their distinguishing tactic was an overt, multi-step "Status" extortion workflow designed to pressure victims (deadlines, notifying leadership/insurers/clients/regulators). The group ceased in August 2024 and later reappeared in 2025 as White Lock, which employed traditional crypto-ransomware.