Ransomware Group intelligence

Krybit

Active

Track Krybit with 209 published victims and 6 known leak locations in a single intelligence view.

BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Victims 209 Known published victims in this dataset
First discovered 2026-04-03 Earliest victim discovery date
Last discovered 2026-09-03 Latest victim discovery date
Inactive since 2 days Days since the latest known victim
Top country Mexico 18 victims
Known locations 6 Leak or negotiation infrastructure tracked

Overview

Krybit is tracked by Breach House as a ransomware group with 209 published victims.

Mexico is currently the most targeted country in this dataset.

6 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (6)

    Label Type Availability Links
    Leak location 4 Onion service Up checked 4h ago krybitxdpxohsmjooeb3gbgpmdddreh6mnflzac6bnezz74b7yje67yd.onion
    Leak location 5 Onion service Up checked 4h ago krybieodq754vlwufrsuxaswxb5zpxyibaawmed2jaduoz2e5m56hmid.onion
    Leak location 6 Onion service Up checked 4h ago krybivdln3oc3twbin4budgznzq7dmcolldnsx455lspxxe23b56y5qd.onion
    Leak location 3 Onion service Up checked 4h ago krybitx3fh5krdnhegyp2ob3lhizsaiadturtio3ginf7it5gsdgu2yd.onion
    Leak location 1 Onion service Up checked 4h ago krybitqsdzwmhnitvwuhvsntfgf2wrhxveyxroxpc44c6gkft2cqldyd.onion
    Leak location 2 Web location Down checked 4h ago krybitqsdzwmhnitvwuhvsntfgf2wrhxveyxroxpc44c6gkft2cqldyd.

    Top Activity Sectors (16)

    Victims (209)

    Search, filter and paginate the victim timeline for Krybit. Showing 1–100 of 209.

    Type Target Discovered Country Business Category Intel Link
    Ransomware ligacancerguate.org id32449 View details Guatemala Other
    Ransomware ligacancerguate.org id32449 View details Guatemala Other
    Ransomware seashellhospital.com id32388 View details India Healthcare / Pharma
    Ransomware seashellhospital.com id32388 View details India Healthcare / Pharma
    Ransomware uicc.org id32389 View details Switzerland Public Sector
    Ransomware uicc.org id32389 View details Switzerland Public Sector
    Ransomware tum.com.mx id32390 View details Mexico Retail / E-commerce
    Ransomware tum.com.mx id32390 View details Mexico Retail / E-commerce
    Ransomware www.alphaplantes.com id32391 View details France Agriculture / Food
    Ransomware www.alphaplantes.com id32391 View details France Agriculture / Food
    Ransomware www.alphaplantes.com id32391 View details Canada Agriculture / Food
    Ransomware reignwoodpark.com id32392 View details China Hospitality / Food & Beverage / Tourism
    Ransomware reignwoodpark.com id32392 View details China Hospitality / Food & Beverage / Tourism
    Ransomware orex.co.th id32376 View details Thailand IT
    Ransomware orex.co.th id32376 View details Thailand IT
    Ransomware amptc.net id32377 View details United States IT
    Ransomware amptc.net id32377 View details United States IT
    Ransomware dmt-group.com id32378 View details Germany IT
    Ransomware dmt-group.com id32378 View details Germany IT
    Ransomware jswlaw.bt id32379 View details Bhutan Finance / Legal / Insurance
    Ransomware jswlaw.bt id32379 View details Bhutan Finance / Legal / Insurance
    Ransomware vedantaainstitute.in id32380 View details India Education
    Ransomware vedantaainstitute.in id32380 View details India Education
    Ransomware meccahighfeed.blogspot.com id32381 View details Saudi Arabia Other
    Ransomware meccahighfeed.blogspot.com id32381 View details Saudi Arabia Other
    Ransomware transportesmontejo.com id32382 View details Mexico Transportation / Travel / Logistics
    Ransomware transportesmontejo.com id32382 View details Mexico Transportation / Travel / Logistics
    Ransomware southsign.in id32383 View details India IT
    Ransomware southsign.in id32383 View details India IT
    Ransomware hccd-construction.com id32384 View details United States Construction / Real Estate
    Ransomware hccd-construction.com id32384 View details United States Construction / Real Estate
    Ransomware finodayacapital.com id32149 View details United States Finance / Legal / Insurance
    Ransomware finodayacapital.com id32149 View details United States Finance / Legal / Insurance
    Ransomware cgcgabon.com id32150 View details Gabon Services
    Ransomware cgcgabon.com id32150 View details Gabon Services
    Ransomware karkinos.in id32151 View details India IT
    Ransomware karkinos.in id32151 View details India IT
    Ransomware ferretornillos.gt id32152 View details Guatemala IT
    Ransomware ferretornillos.gt id32152 View details Guatemala IT
    Ransomware www.sankovn.com id32153 View details Viet Nam IT
    Ransomware www.sankovn.com id32153 View details Viet Nam IT
    Ransomware www.neooftalmo.com.br id32159 View details Brazil Services
    Ransomware www.neooftalmo.com.br id32159 View details Brazil Services
    Ransomware lemonfarm.com id32160 View details United States Agriculture / Food
    Ransomware lemonfarm.com id32160 View details United States Agriculture / Food
    Ransomware wmiemporium.com id32161 View details United States Retail / E-commerce
    Ransomware wmiemporium.com id32161 View details United States Retail / E-commerce
    Ransomware mimafoods.net id32162 View details Brazil Agriculture / Food
    Ransomware mimafoods.net id32162 View details Brazil Agriculture / Food
    Ransomware sysconth.com id32163 View details Brazil IT
    Ransomware sysconth.com id32163 View details Brazil IT
    Ransomware jindallifescience.com id32164 View details India Healthcare / Pharma
    Ransomware jindallifescience.com id32164 View details India Healthcare / Pharma
    Ransomware vascara.com id32165 View details Brazil Retail / E-commerce
    Ransomware vascara.com id32165 View details Brazil Retail / E-commerce
    Ransomware resi.com id32062 View details Germany IT
    Ransomware resi.com id32062 View details Germany IT
    Ransomware sunsea.co.th id31883 View details Thailand
    Ransomware www.mestojilemnice.cz id31899 View details Czechia
    Ransomware automotoresrosedal.com.ar id31900 View details Argentina
    Ransomware sipresitalia.it id31901 View details Italy
    Ransomware www.hsi.info id31902 View details Hong Kong
    Ransomware hisstw.com id31582 View details Taiwan, Province of China IT
    Ransomware hisstw.com id31582 View details Taiwan, Province of China IT
    Ransomware labindia.com id31583 View details India Manufacturing / Engineering
    Ransomware labindia.com id31583 View details India Manufacturing / Engineering
    Ransomware lhyk.com.sg id31584 View details Singapore Other
    Ransomware lhyk.com.sg id31584 View details Singapore Other
    Ransomware www.kilpi-koskinen.fi id31560 View details Finland Construction / Real Estate
    Ransomware www.kilpi-koskinen.fi id31560 View details Finland Construction / Real Estate
    Ransomware www.apsanet.com.ar id31561 View details Argentina IT
    Ransomware www.apsanet.com.ar id31561 View details Argentina IT
    Ransomware studiotibaldi.it id31485 View details Italy IT
    Ransomware studiotibaldi.it id31485 View details Italy IT
    Ransomware reflet2000.fr id31393 View details France Retail / E-commerce
    Ransomware reflet2000.fr id31393 View details France Retail / E-commerce
    Ransomware www.actini.com id31394 View details France IT
    Ransomware www.actini.com id31394 View details France IT
    Ransomware www.ernat-bureau-etudes.fr id31395 View details France Manufacturing / Engineering
    Ransomware www.ernat-bureau-etudes.fr id31395 View details France Manufacturing / Engineering
    Ransomware www.serengetiestates.co.za id31396 View details South Africa Construction / Real Estate
    Ransomware www.serengetiestates.co.za id31396 View details South Africa Construction / Real Estate
    Ransomware www.hymiasa.com id31397 View details Peru Manufacturing / Engineering
    Ransomware www.hymiasa.com id31397 View details Peru Manufacturing / Engineering
    Ransomware cesmac.edu.br id31239 View details Brazil Education
    Ransomware cesmac.edu.br id31239 View details Brazil Education
    Ransomware www.prohealth.sg id31166 View details Singapore Healthcare / Pharma
    Ransomware www.prohealth.sg id31166 View details Singapore Healthcare / Pharma
    Ransomware www.dcpartner.co.za id31158 View details South Africa Finance / Legal / Insurance
    Ransomware www.dcpartner.co.za id31158 View details South Africa Finance / Legal / Insurance
    Ransomware nigeria.asa-international.com id31159 View details Nigeria Finance / Legal / Insurance
    Ransomware nigeria.asa-international.com id31159 View details Nigeria Finance / Legal / Insurance
    Ransomware www.ville-rinxent.fr id31154 View details France Public Sector
    Ransomware www.ville-rinxent.fr id31154 View details France Public Sector
    Ransomware countrymotors.com.mx id31155 View details Mexico Retail / E-commerce
    Ransomware countrymotors.com.mx id31155 View details Mexico Retail / E-commerce
    Ransomware www.buzztrading104.co.za id31157 View details South Africa Finance / Legal / Insurance
    Ransomware www.buzztrading104.co.za id31157 View details South Africa Finance / Legal / Insurance
    Ransomware nilepet.com id30779 View details Egypt Energy
    Ransomware nilepet.com id30779 View details Egypt Energy