We've just wrapped up the new design, along with a ton of other improvements. Check them all out in the Changelog.

Ransomware Group intelligence

Curious Worm

Active

Track Curious Worm with 9 published victims and 1 known leak locations in a single intelligence view.

BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Victims 9 Known published victims in this dataset
First discovered 2026-11-11 Earliest victim discovery date
Last discovered 2026-11-11 Latest victim discovery date
Inactive since 1 days Days since the latest known victim
Top country United States 5 victims
Known locations 1 Leak or negotiation infrastructure tracked

Overview

Curious Worm is tracked by Breach House as a ransomware group with 9 published victims.

United States is currently the most targeted country in this dataset.

1 known leak locations are currently associated with this group.

Leak Status Distribution

  • Leaked 2 22.2%
  • Pending 7 77.8%
  • Deleted 0 0.0%

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (1)

    Label Type Availability Links
    Leak location 1 Onion service Up checked 2h ago hhevzhgcokx6xlzh4o4exuo2kryy6ectpb7trm5ut2g3u4trskptv7ad.onion

    Top Activity Sectors (5)

    Victims (9)

    Search, filter and paginate the victim timeline for Curious Worm. Showing 1–9 of 9.

    Type Target Discovered Country Business Category Intel Link Leak status
    Ransomware sacheminc.com id38827 View details Canada Manufacturing / Engineering pending
    Ransomware sbhny.org id38828 View details United States Healthcare / Pharma pending
    Ransomware shannonhealth.com id38829 View details Ireland Healthcare / Pharma leaked
    Ransomware baronandbudd.com id38830 View details United Kingdom Finance / Legal / Insurance pending
    Ransomware raleighortho.com id38832 View details United States Healthcare / Pharma leaked
    Ransomware lifelinescreening.com id38833 View details United States Healthcare / Pharma pending
    Ransomware safcodental.com id38834 View details Saudi Arabia Healthcare / Pharma — pending
    Ransomware marquiscompanies.com id38835 View details United States Construction / Real Estate pending
    Ransomware atlashp.com id38836 View details United States IT pending