Ransomware Group intelligence
Pysa
InactiveTrack Pysa with 309 published victims and 1 known leak locations in a single intelligence view.
Overview
Pysa is tracked by Breach House as a ransomware group with 309 published victims.
Canada is currently the most targeted country in this dataset.
1 known leak locations are currently associated with this group.
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (1)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 1 | Onion service | Unknown | pysa2bitc5ldeyfak4seeruqymqs4sj5wt5qkcq7aoyg4h2acqieywad.onion |
Top Activity Sectors
No sector intelligence available.
Ransom Notes (0)
▼No ransom notes available for this group.
Tools Used
▼No tools used available.
YARA Rules (0)
▼No YARA rules available.
Indicators of Compromise (0)
▼No IoCs available for this group.
Negotiation Chats (0)
▼No negotiation chats available.
Research Sources
No external research sources linked yet.
Victims (309)
Search, filter and paginate the victim timeline for Pysa. Showing 1–100 of 309.
| Type | Target | Discovered | Country | Business Category | Intel Link |
|---|---|---|---|---|---|
| Ransomware | ΤÎΧÎÎÎÎÎÎÎÎ Î ÎÎÎÎ ÎΣΤÎÎÎÎ ÎΥΠΡÎÎ¥ id4209 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | CHR Solutions id2072 View details | Services | — | ||
|
No additional victim description available. |
|||||
| Ransomware | The Skinners Kent Academy id1880 View details | Education | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Kent County Council id1879 View details | Public Sector | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Rusty Hardin & Associates id1878 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | R.E. Pedrotti Co. id1877 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | UEMOA id1876 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Skatetown id1875 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | CHRYSO id1874 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | itimCloud id1873 View details | IT | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Bayonet id1872 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Fly Arik Air id1871 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Las Vegas Cancer Center id1870 View details | Energy | — | ||
|
No additional victim description available. |
|||||
| Ransomware | CarpenterProjects id1869 View details | Communication / Marketing | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Westmont Helena id1868 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Woodchurch High School id1867 View details | Education | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Emkay Food Sales id1866 View details | Retail / E-commerce | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Premier Energy id1865 View details | Energy | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Schmincke Künstlerfarben id1864 View details | Services | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Stratford Land id1863 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Dr Schneider id1862 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Rockbridge and Bath County id1861 View details | Public Sector | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Nordic Pharma id1860 View details | Healthcare / Pharma | — | ||
|
No additional victim description available. |
|||||
| Ransomware | The Leschaco Group id1859 View details | Services | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Eason Horticultural Resources id1858 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | ΤÎΧÎÎÎÎÎÎÎÎ Î ÎÎÎÎ ÎΣΤÎÎÎÎ ÎΥΠΡÎÎ¥ id1857 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | SWL id1856 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Lucton School id1855 View details | Education | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Hickory Veterinary Hospital id1854 View details | Healthcare / Pharma | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Westvale Primary School id1853 View details | Education | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Property Damage Restoration id1852 View details | Construction / Real Estate | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Garner Dental Group id1851 View details | Healthcare / Pharma | — | ||
|
No additional victim description available. |
|||||
| Ransomware | MVS Mailers id1850 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | EHS id1849 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Comstock Johnson Architects id1848 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | La Bodega id1847 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Gulfport MS id1846 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Pitts Baptist Church id1845 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Emi Jay id1844 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Niemi Bil i LuleÃ¥ id1843 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Department of Justice and Constitutional Development id1842 View details | IT | — | ||
|
No additional victim description available. |
|||||
| Ransomware | MPRL E&P id1841 View details | Communication / Marketing | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Capitol Beauty School id1840 View details | Education | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Bryant Industrial Services id1839 View details | Manufacturing / Engineering | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Alternatives, Inc. id1838 View details | Services | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Family Dental Health id1837 View details | Healthcare / Pharma | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Community Brands id1836 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Vision Source id1835 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | AECOM id1834 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Jalasoft id1833 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Astera Software id1832 View details | IT | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Thunderbird Adventist Academy id1831 View details | Education | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Raj Transport Inc. id1830 View details | Transportation / Travel / Logistics | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Metaenergia id1829 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Florida Heart Associates id1828 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Family Dentist Newbury id1827 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | ProActive Works id1826 View details | Communication / Marketing | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Diputación de Segovia id1825 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | City of Bridgeport, WV id1824 View details | Public Sector | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Ferrara id1823 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Universitat Autònoma de Barcelona id1822 View details | Hospitality / Food & Beverage / Tourism | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Höerskool Labori Paarl id1715 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Cenikor id1714 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Suntide Commercial Realty id1713 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Motor Appliance Corporation id1712 View details | Services | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Townley Grammar School id1681 View details | Education | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Ruskin Community High School id1680 View details | Education | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Weiss Properties id1679 View details | Communication / Marketing | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Lesk Engineering id1649 View details | Manufacturing / Engineering | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Our Lady's Abingdon id1648 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Western Urethane id1647 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | QPharma id1646 View details | Healthcare / Pharma | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Price Davis LLC id1645 View details | Communication / Marketing | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Campus Sacre Coeur Wien Gymnasium id1644 View details | Education | — | ||
|
No additional victim description available. |
|||||
| Ransomware | CreateInfor id1643 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | InfoSync IT Solutions id1642 View details | Services | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Hall Technologies Inc id1641 View details | IT | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Consolidated High School District 230 id1542 View details | Education | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Santélys id1541 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Instituto Mixto de Ayuda Social id1540 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Ardagh Group id1539 View details | Services | — | ||
|
No additional victim description available. |
|||||
| Ransomware | ITS, Inc. id1538 View details | Services | — | ||
|
No additional victim description available. |
|||||
| Ransomware | St Benet Biscop id1537 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Jurysync id1536 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Adore Fashions id1535 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | HMCC id1534 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Associated Solutions id1533 View details | Services | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Ocean View Nursing & Rehabilitation id1532 View details | Healthcare / Pharma | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Betson Enterprises id1366 View details | Communication / Marketing | — | ||
|
No additional victim description available. |
|||||
| Ransomware | One Community Health id1365 View details | Healthcare / Pharma | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Jesse Engineering Co id1364 View details | Manufacturing / Engineering | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Grupo SAN id1363 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Spartanburg & Pelham OB-GYN id1362 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Haverhill High School id1361 View details | Education | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Woodlake Unified id1360 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | HABI id1359 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Drug Alcohol Testing id1351 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Sacschool id1104 View details | Education | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Liberty Linehaul id1103 View details | Other | — | ||
|
No additional victim description available. |
|||||
| Ransomware | Faic id1102 View details | Other | — | ||
|
No additional victim description available. |
|||||