Ransomware Group intelligence

Payload

Active

Track Payload with 50 published victims and 2 known leak locations in a single intelligence view.

Victims 50 Known published victims in this dataset
First discovered 2026-02-17 Earliest victim discovery date
Last discovered 2026-05-21 Latest victim discovery date
Inactive since 13 days Days since the latest known victim
Top country United States 5 victims
Known locations 2 Leak or negotiation infrastructure tracked

Overview

Payload is tracked by Breach House as a ransomware group with 50 published victims.

United States is currently the most targeted country in this dataset.

2 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (2)

    Label Type Availability Links
    Leak location 1 Onion service Unknown payloadrz5yw227brtbvdqpnlhq3rdcdekdnn3rgucbcdeawq2v6vuyd.onion
    Leak location 2 Onion service Unknown payloadynyvabjacbun4uwhmxc7yvdzorycslzmnleguxjn7glahsvqd.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (50)

    Search, filter and paginate the victim timeline for Payload.

    Type Target Discovered Country Business Category Intel Link
    Ransomware G Theodor Freese id29292 View details Germany Manufacturing / Engineering
    Ransomware A-Sonic Logistic Solutions id29293 View details Transportation / Travel / Logistics
    Ransomware Internal Medicine and Pediatrics of Cullman id29294 View details United States Healthcare / Pharma
    Ransomware Robinsons id29295 View details Singapore Retail / E-commerce
    Ransomware Tang Seng Nitrogen & Pump Systems Pte. Ltd. id29260 View details Singapore Energy
    Ransomware Elohim Law Corporation id29261 View details Singapore Finance / Legal / Insurance
    Ransomware Kabushiki Gaisha Hodozuka Setsubi id29262 View details Japan Construction / Real Estate
    Ransomware Gorey Community School id29122 View details Ireland Education
    Ransomware Inteceng.com.my (+ Tsksynergy.com.my + Amemanufacturing.com.my + Woodnova.com.my) id29123 View details Malaysia Construction / Real Estate
    Ransomware PROM (Peakside Ros Outlet Management) id28472 View details Construction / Real Estate
    Ransomware Rural Municipality of Gimli id28602 View details Canada Public Sector
    Ransomware Peroni Sosa Tellechea Burt & Narvaja id28663 View details Uruguay Finance / Legal / Insurance
    Ransomware meditron.com.ve id28664 View details Venezuela, Bolivarian Republic of Healthcare / Medicine
    Ransomware b3-bruck.at id28665 View details Austria Hospitality / Food & Beverage / Tourism
    Ransomware caravaningcity.com id28666 View details Germany Retail / E-commerce
    Ransomware JOH Investments Limited id28732 View details Jamaica Transportation / Travel / Logistics
    Ransomware Better House id28741 View details Construction / Real Estate
    Ransomware Al Sulaiti Law Firm id28742 View details Qatar Finance / Legal / Insurance
    Ransomware Franziskusschule Wilhelmshaven id28255 View details Germany Education
    Ransomware Marino Food Products Pvt id28254 View details Sri Lanka Agriculture / Food
    Ransomware Sunlight Express Airways id28253 View details Philippines Transportation / Travel / Logistics
    Ransomware orientalweavers.com id28252 View details Egypt Manufacturing / Engineering
    Ransomware TFE Group id28251 View details Australia Transportation / Travel / Logistics
    Ransomware El Wastani Petroleum Company (WASCO) id27962 View details Libya Energy
    Ransomware United Finance Egypt id27844 View details Egypt Finance / Legal / Insurance
    Ransomware Tscherne Consulting Steuerberatung GmbH id27843 View details Austria Finance / Legal / Insurance
    Ransomware SAYEGH id27800 View details Lebanon Manufacturing / Engineering
    Ransomware NKAR Travels & Tours id27725 View details Sri Lanka Hospitality / Food & Beverage / Tourism
    Ransomware Q2 Artificial Lift Services id27643 View details Canada Energy
    Ransomware Don-Nan id27642 View details United States Manufacturing / Engineering
    Ransomware A A Al Moosa Enterprises (ARENCO Group) id27637 View details United Arab Emirates Construction / Real Estate
    Ransomware carlysle.net id27607 View details United States Services
    Ransomware Vancompare Insurance id27562 View details United Kingdom Finance / Legal / Insurance
    Ransomware iGLS id27538 View details Spain Healthcare / Medicine
    Ransomware HOPPECKE Singapore id27504 View details Singapore Energy
    Ransomware TS Lines Philippines id27484 View details Philippines Services
    Ransomware Lucky Innovative Manufacturing Corporation id27454 View details Philippines Manufacturing / Engineering
    Ransomware Notaría 89 id27453 View details Mexico Public Sector
    Ransomware Royal Bahrain Hospital id27346 View details Bahrain Healthcare / Pharma
    Ransomware J.T. Pack of Foods id27335 View details Thailand Manufacturing / Engineering
    Ransomware Grid Fine Finishes id27334 View details United Kingdom Construction / Real Estate
    Ransomware Alcoholes Finos Dominicanos id27333 View details Dominican Republic Manufacturing / Engineering
    Ransomware In.Sa.Cor id27332 View details United States Construction / Real Estate
    Ransomware Easy Servizi id27331 View details Italy Construction / Real Estate
    Ransomware Thai Solar Energy Public id27330 View details Thailand Energy
    Ransomware United Limsun International Trading id27329 View details Philippines Retail / E-commerce
    Ransomware Tyler Media id27328 View details United States Communication / Marketing
    Ransomware Río Grande (Puerto Rico) id27327 View details Puerto Rico Public Sector
    Ransomware sodic.com id26619 View details Egypt Construction / Real Estate
    Ransomware Almacenes Distribuidores de la Frontera id26618 View details Mexico Energy