Royal (cyber gang)

Royal/BlackSuit
Formation2022
TypeHacking
PurposeMoney

Royal is a cybercriminal ransomware organization known for its aggressive targeting, its high ransom demands, and its use of double extortion (where compromised data is not only encrypted, but also exfiltrated). Royal does not use affiliates. Formed in 2022, it was renamed Blacksuit in 2024.

Royal has targeted a wide range of industries, including healthcare, finance, and critical infrastructure. Ransom demands by the group range have typically ranged from $1 million to $10 million in Bitcoin.