// UNCLASSIFIED // CLEARED FOR PUBLIC RELEASE //
FILE PUB-ENTDTG 0600Z
ColdRecon › Threat Groups › Hatman
Threat Group Dossier

Hatman

CLEARED FOR PUBLIC RELEASE · OPEN-SOURCE INTELLIGENCE
Hatman — 2 attributed incidents across our corpus.
Incidents on file2
First seen2026-08-20
Last seen2026-08-21
Top sector—

Techniques observed (MITRE ATT&CK)

T1486 Data Encrypted for Impact (2)

Attributed breaches

2026-08-21
ransomware
McDonald's, Vodafone, and others
2026-08-20
ransomware
McDonald's, Vodafone, and others

Track this in real time.

ColdRecon watches the public signal so you don't have to — a daily brief and a live detection-coverage desk. Request clearance.

Request Clearance →