Ransomware Group intelligence

Cactus

Inactive

Track Cactus with 248 published victims and 3 known leak locations in a single intelligence view.

BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Victims 248 Known published victims in this dataset
First discovered 2023-07-20 Earliest victim discovery date
Last discovered 2025-03-21 Latest victim discovery date
Inactive since 548 days Days since the latest known victim
Top country United States 105 victims
Known locations 3 Leak or negotiation infrastructure tracked

Overview

Cactus is tracked by Breach House as a ransomware group with 248 published victims.

United States is currently the most targeted country in this dataset.

3 known leak locations are currently associated with this group.

Leak Status Distribution

  • Leaked 0 0.0%
  • Pending 248 100.0%
  • Deleted 0 0.0%

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (3)

    Label Type Availability Links
    Leak location 3 Onion service Up checked 5h ago sonarmsng5vzwqezlvtu2iiwwdn3dxkhotftikhowpfjuzg7p3ca5eid.onion
    Leak location 2 Onion service Down checked 5h ago cactus5dqnqkppa5ayckiyk6dttpqwczdqphv5mxh4dkk5ct544q5aad.onion
    Leak location 1 Onion service Down checked 5h ago cactusbloguuodvqjmnzlwetjlpj6aggc6iocwhuupb47laukux7ckid.onion

    Top Activity Sectors (16)

    Victims (248)

    Search, filter and paginate the victim timeline for Cactus. Showing 101–200 of 248.

    Type Target Discovered Country Business Category Intel Link Leak status
    Ransomware fbttransport.com id13120 View details United States Transportation / Travel / Logistics pending
    Ransomware daystar.com id13119 View details United States Finance / Legal / Insurance pending
    Ransomware deskcenter.com id13117 View details Germany Communication / Marketing pending
    Ransomware suminoe.us id13070 View details United States Communication / Marketing pending
    Ransomware sofidel.com id13063 View details Italy Communication / Marketing pending
    Ransomware sky-light.com id13062 View details Denmark Communication / Marketing pending
    Ransomware reawire.com id13061 View details United States Communication / Marketing pending
    Ransomware transportlaberge.com id12944 View details Canada Transportation / Travel / Logistics pending
    Ransomware sanyo-shokai.co.jp id12943 View details Japan Communication / Marketing pending
    Ransomware jmthompson.com id12941 View details United States Communication / Marketing pending
    Ransomware ctsystem.com id12940 View details Taiwan, Province of China Communication / Marketing pending
    Ransomware ctgbrands.com id12939 View details United States Communication / Marketing pending
    Ransomware fpr-us.com id12916 View details United States Communication / Marketing pending
    Ransomware dollmar.com id12794 View details Italy Communication / Marketing pending
    Ransomware familyguardian.com id12793 View details Bahamas Communication / Marketing pending
    Ransomware espackeuro.com id12792 View details Spain Communication / Marketing pending
    Ransomware schuettemetals.com id12621 View details United States Manufacturing / Engineering pending
    Ransomware fulcrum.pro id12583 View details United States Communication / Marketing pending
    Ransomware scanda.com.mx id12516 View details Mexico Finance / Legal / Insurance pending
    Ransomware acfin.cl id12515 View details Chile Communication / Marketing pending
    Ransomware iddink.nl id12166 View details Netherlands Communication / Marketing pending
    Ransomware ghimli.com id12115 View details Australia Communication / Marketing pending
    Ransomware saglobal.com id12109 View details Canada Energy pending
    Ransomware concordegroup.ca id12108 View details Canada Healthcare / Pharma pending
    Ransomware ebir.com id12107 View details Spain Communication / Marketing pending
    Ransomware coastalcargogroup.com id12106 View details United States Transportation / Travel / Logistics pending
    Ransomware xdconnects.com id11720 View details Netherlands Communication / Marketing pending
    Ransomware drmarbys.com id11704 View details United States Communication / Marketing pending
    Ransomware regulatormarine.com id11674 View details United States Communication / Marketing pending
    Ransomware mcalvain.com id11509 View details United States Communication / Marketing pending
    Ransomware regencyfurniture.com id11483 View details United States Communication / Marketing pending
    Ransomware aerodynamicinc.com id11467 View details United States Communication / Marketing pending
    Ransomware besttrans.com id11466 View details United States Communication / Marketing pending
    Ransomware qosina.com id11402 View details United States Communication / Marketing pending
    Ransomware contenderboats.com id11385 View details United States Communication / Marketing pending
    Ransomware newagesys.com id11340 View details United States Communication / Marketing pending
    Ransomware kelson.on.ca id11339 View details Canada Communication / Marketing pending
    Ransomware eclinicalsol.com id11267 View details United States Healthcare / Pharma pending
    Ransomware grupatopex.com id11266 View details Poland Communication / Marketing pending
    Ransomware plymouth.com id11162 View details United States Communication / Marketing pending
    Ransomware cleshar.co.uk id11158 View details United Kingdom Communication / Marketing pending
    Ransomware ammega.com id11157 View details Netherlands Communication / Marketing pending
    Ransomware renypicot.es id11156 View details Spain Communication / Marketing pending
    Ransomware abtexelgroup.com id11009 View details Netherlands Communication / Marketing pending
    Ransomware remkes.nl id10949 View details Netherlands Communication / Marketing pending
    Ransomware advancedprosolutions.com id10910 View details United States Communication / Marketing pending
    Ransomware se.com id10907 View details France Communication / Marketing pending
    Ransomware parksite.com id10726 View details United States Communication / Marketing pending
    Ransomware gocco.com id10695 View details Spain Communication / Marketing pending
    Ransomware spbglobal.com id10694 View details Spain Communication / Marketing pending
    Ransomware oogp.com id10589 View details United States Communication / Marketing pending
    Ransomware jaygroup.com id10576 View details United States Communication / Marketing pending
    Ransomware asburyauto.com id10408 View details United States Communication / Marketing pending
    Ransomware acutis.com id10401 View details United States Communication / Marketing pending
    Ransomware dtsolutions.net id10400 View details United States Services pending
    Ransomware intercityinvestments.com id10399 View details United States Public Sector pending
    Ransomware hi-cone.com id10398 View details United States Communication / Marketing pending
    Ransomware bellgroup.co.uk id10329 View details United Kingdom Communication / Marketing pending
    Ransomware coop.se id10328 View details Sweden Communication / Marketing pending
    Ransomware tridon.com.au id10327 View details Australia Communication / Marketing pending
    Ransomware gdi.com id10324 View details Canada Communication / Marketing pending
    Ransomware bachoco.com.mx id10323 View details Mexico Communication / Marketing pending
    Ransomware pbssystems.com id10322 View details Communication / Marketing pending
    Ransomware quakerwindows.com id10274 View details Energy pending
    Ransomware dillarddoor.com id10246 View details United States Communication / Marketing pending
    Ransomware cts.co.uk id10245 View details United Kingdom Communication / Marketing pending
    Ransomware hunterbuildings.com id10244 View details Construction / Real Estate pending
    Ransomware larlyn.com id10243 View details Other pending
    Ransomware wkw-group.com id10242 View details Services pending
    Ransomware dbmgroup.com id10241 View details Services pending
    Ransomware LAJOLLAGROUP id10071 View details United States Construction / Real Estate pending
    Ransomware CTS id10048 View details United Kingdom Other pending
    Ransomware MEDIMARKET id10043 View details Belgium Healthcare / Pharma pending
    Ransomware ODALYS id10042 View details France Hospitality / Food & Beverage / Tourism pending
    Ransomware CIE id10041 View details Spain Manufacturing / Engineering pending
    Ransomware NNDOMAIN id10040 View details United States Construction / Real Estate pending
    Ransomware ISC id10039 View details Denmark Energy pending
    Ransomware DILLARD id10038 View details United States Communication / Marketing pending
    Ransomware Dillard Door & Security id9994 View details Communication / Marketing pending
    Ransomware ISC Consulting Engineers id9955 View details Denmark Services pending
    Ransomware CIE Automotive id9887 View details Manufacturing / Engineering pending
    Ransomware National Nail Corp id9886 View details Construction / Real Estate pending
    Ransomware FYIdoctors id9736 View details Canada Healthcare / Pharma pending
    Ransomware Axiom Construction & Consulting id9735 View details Construction / Real Estate pending
    Ransomware Medi-Market id9734 View details Belgium Healthcare / Pharma pending
    Ransomware Odalys Vacances id9733 View details Hospitality / Food & Beverage / Tourism pending
    Ransomware Verhelst id9653 View details Belgium Construction / Real Estate pending
    Ransomware Petersen Health Care id9652 View details Healthcare / Pharma pending
    Ransomware Paul Stuart id9651 View details Finance / Legal / Insurance pending
    Ransomware GEOCOM id9407 View details Uruguay Communication / Marketing pending
    Ransomware MultiMasters id9406 View details Belgium Services pending
    Ransomware UTI Group id9405 View details Romania Communication / Marketing pending
    Ransomware SCS SpA id9104 View details Public Sector pending
    Ransomware OmniVision Technologies id9103 View details IT pending
    Ransomware The Hurley Group id8992 View details Construction / Real Estate pending
    Ransomware Cornerstone Projects Group id8971 View details Construction / Real Estate pending
    Ransomware RICOR Global Limited id8970 View details Slovakia Manufacturing / Engineering pending
    Ransomware UTC Overseas id8875 View details Transportation / Travel / Logistics pending
    Ransomware Unitex Textile Rental Services id8874 View details Services pending
    Ransomware Orthum Bau id8861 View details Construction / Real Estate pending