Ransomware Group intelligence

M3rx

Active

Track M3rx with 20 published victims and 2 known leak locations in a single intelligence view.

Victims 20 Known published victims in this dataset
First discovered 2026-04-29 Earliest victim discovery date
Last discovered 2026-05-27 Latest victim discovery date
Inactive since 7 days Days since the latest known victim
Top country United States 4 victims
Known locations 2 Leak or negotiation infrastructure tracked

Overview

M3rx is tracked by Breach House as a ransomware group with 20 published victims.

United States is currently the most targeted country in this dataset.

2 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (2)

    Label Type Availability Links
    Leak location 1 Onion service Unknown 4k6plf4h2cm2nco6ae3inrsxnmqgl6lllmwefydhnlcq4tuhwbj4qpad.onion
    Leak location 2 Onion service Unknown pippahtohg6qgioqu3ixrsueefuw7thythmmeanyrgwn3eixcuu6jvqd.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (20)

    Search, filter and paginate the victim timeline for M3rx.

    Type Target Discovered Country Business Category Intel Link
    Ransomware jichasa.com id29472 View details Mexico Finance / Legal / Insurance
    Ransomware dosocho.es id29200 View details Spain Manufacturing / Engineering
    Ransomware soft-inc.com id29201 View details Japan IT
    Ransomware psbsementi.it id29203 View details Italy Agriculture / Food
    Ransomware grupo55.com id29204 View details Spain Finance / Legal / Insurance
    Ransomware pvdd.ca id28914 View details Canada Construction / Real Estate
    Ransomware datasavior.com id28915 View details United States IT
    Ransomware kbtoys.com.au id28916 View details Australia Retail / E-commerce
    Ransomware alge-stop.dk id28917 View details Denmark Services
    Ransomware emtco.com id28793 View details United States Energy
    Ransomware it-freitag.de id28794 View details Germany IT
    Ransomware manateeair.com id28795 View details United States Services
    Ransomware dmschweiz.ch id28486 View details Switzerland IT
    Ransomware anvilarts.org.uk id28487 View details United Kingdom Other
    Ransomware primeproperties.com.au id28488 View details Australia Construction / Real Estate
    Ransomware airdriephysio.com id28489 View details United Kingdom Healthcare / Medicine
    Ransomware rainforestclean.com id28490 View details United States Services
    Ransomware rotak.it id28491 View details Italy IT
    Ransomware osoftec.com id28492 View details Germany IT
    Ransomware boxtopia.co.uk id28493 View details United Kingdom Manufacturing / Engineering