Payouts King has surfaced 14 claimed victims since its first appearance in late May 2026, with five posted in the past 30 days, a pace that suggests active, ongoing operations rather than a one-off campaign. The claimed target list skews toward the US, with additional hits in Italy, and spans technology alongside other unspecified sectors, indicating an opportunistic rather than sector-locked targeting pattern. The group is described in open-source reporting as running standard double-extortion operations, pairing file encryption with data theft and leak-site pressure, though that framing originates from the group's own messaging and should be treated as a claim rather than a confirmed methodology. No MITRE ATT&CK technique set has been catalogued for this group yet, limiting technical attribution beyond the double-extortion label. Recent named claims, including Turner and Casta Diva Group, show the group continuing to post multiple victims per week through early and mid-August 2026.