DETECTO/ThreatDossier
DashboardPricingThreatsRun Free ScanSign In
DETECTO/ThreatDossier

Security intelligence for MSPs, consultants, and businesses. Find breached credentials, compliance gaps, and exposed infrastructure before attackers do.

Product

  • Scan a Domain
  • Pricing
  • Dashboard
  • Sign In

Resources

  • Threat Intelligence
  • Ransomware Groups

Legal

  • Privacy Policy
  • Terms of Service

© 2026 DETECTO. All rights reserved.

Threats/Groups/Sabbath

Sabbath

Inactive

sabbath

First seen: 2021-11-22T22:41:09.998609+00:00Total victims: 17

Sabbath (also known as 54BB47h, operated by UNC2190) is a ransomware group active from mid-2021 that emerged as a rebrand of the Arcane ransomware, targeting critical infrastructure in the US and Canada — particularly hospitals, schools, and natural resources — using double extortion, backup destruction, and affiliate recruitment on Russian-language dark web forums.

0Total Victims
0Countries Targeted
0Sectors Targeted
0Avg Attacks/Month

Activity Timelinelast 24 months

Top Targeted Sectors

Top Targeted Countries

No country data available

Recent Victimsshowing 17 of 17

NameCountrySectorDate
aria-label=Google>—Not Found2022-02-28T18:25:03.577007+00:00
JALEEL TRADERS LLC—Agriculture and Food Production2022-01-15T20:23:49.417218+00:00
ASL Napoli 3 Sud Network Seized—Not Found2022-01-14T15:17:55.967374+00:00
Protected: PRIVATE POST ITALY—Not Found2022-01-12T17:29:02.137450+00:00
Summit College—Education2022-01-04T13:27:47.440748+00:00
Close drawer—Not Found2022-01-04T12:29:41.532838+00:00
Close search modal—Not Found2022-01-04T12:29:41.236325+00:00
TRIGYN 2 0 | Data Leak—Technology2021-12-28T12:17:49.536902+00:00
Prenax—Not Found2021-12-20T12:18:27.060976+00:00
Social Enterprise (SEC)—Business Services2021-12-12T14:16:40.420204+00:00
Trigyn Technologies Ltd—Technology2021-12-10T12:18:31.238731+00:00
Flagship—Consumer Services2021-11-22T22:41:11.270369+00:00
Stoningtonschools—Education2021-11-22T22:41:11.057185+00:00
AISD—Education2021-11-22T22:41:10.801058+00:00
Starline—Manufacturing2021-11-22T22:41:10.543577+00:00
RocTechnologies—Technology2021-11-22T22:41:10.283111+00:00
MCP Services LLC—Business Services2021-11-22T22:41:09.998609+00:00

Data from ransomware.live