CMD Organization has claimed 30 victims since surfacing on trackers in late May 2026, with 7 posted in the last 30 days alone, indicating a steady and possibly accelerating operational tempo. The victim sample spans a mix of small and mid-sized targets, professional services firms, electrical contractors, a jewelry business, and at least one educational institution, suggesting opportunistic targeting rather than a fixed sector focus. No sector or country breakdown is available from the tracker, and no MITRE ATT&CK technique catalogue has been published for this group, so specific tooling and intrusion methods remain unconfirmed. The group's self-description is not on file, leaving its claimed motives and any extortion rhetoric unverified. Its short public track record and the pace of victim postings mark it as a newly active double-extortion operation still building a naming-and-shaming presence.