Ransomware Group intelligence

Pysa

Inactive

Track Pysa with 309 published victims and 1 known leak locations in a single intelligence view.

Victims 309 Known published victims in this dataset

First discovered 2020-07-01 Earliest victim discovery date

Last discovered 2022-09-20 Latest victim discovery date

Inactive since 1397 days Days since the latest known victim

Top country Canada 2 victims

Known locations 1 Leak or negotiation infrastructure tracked

Pysa is tracked by Breach House as a ransomware group with 309 published victims.

Canada is currently the most targeted country in this dataset.

1 known leak locations are currently associated with this group.

Top Countries

Distribution

Label	Type	Availability	Links
Leak location 1	Onion service	Unknown	`pysa2bitc5ldeyfak4seeruqymqs4sj5wt5qkcq7aoyg4h2acqieywad.onion`

No sector intelligence available.

Ransom Notes (0)

▼

No ransom notes available for this group.

Tools Used

▼

No tools used available.

YARA Rules (0)

▼

No YARA rules available.

Indicators of Compromise (0)

▼

No IoCs available for this group.

Negotiation Chats (0)

▼

No negotiation chats available.

No external research sources linked yet.

Victims (309)

Search, filter and paginate the victim timeline for Pysa. Showing 101–200 of 309.

Type	Target	Discovered	Country	Business Category	Intel Link
Ransomware	Diamond Box id1101 View details	2021-09-09		Other	—
No additional victim description available. ID 1101
Ransomware	Allard id1100 View details	2021-09-09		Other	—
No additional victim description available. ID 1100
Ransomware	Fincamex id1099 View details	2021-09-09		Services	—
No additional victim description available. ID 1099
Ransomware	Matthews id1098 View details	2021-09-09		Other	—
No additional victim description available. ID 1098
Ransomware	Oliviers id1097 View details	2021-09-09		Other	—
No additional victim description available. ID 1097
Ransomware	Poliview id1096 View details	2021-09-09		Other	—
No additional victim description available. ID 1096
Ransomware	Famisanar id1095 View details	2021-09-09		Other	—
No additional victim description available. ID 1095
Ransomware	Saludladera id1094 View details	2021-09-09		Other	—
No additional victim description available. ID 1094
Ransomware	Pjfitzpatrick id1093 View details	2021-09-09		Other	—
No additional victim description available. ID 1093
Ransomware	CDPO id1092 View details	2021-09-09		Other	—
No additional victim description available. ID 1092
Ransomware	Aebel id1091 View details	2021-09-09		Other	—
No additional victim description available. ID 1091
Ransomware	HAC id1090 View details	2021-09-09		Other	—
No additional victim description available. ID 1090
Ransomware	Ribasalvarez id1089 View details	2021-09-09		Other	—
No additional victim description available. ID 1089
Ransomware	Noorulislam id1088 View details	2021-09-09		Other	—
No additional victim description available. ID 1088
Ransomware	Grupocif id1087 View details	2021-09-09		Other	—
No additional victim description available. ID 1087
Ransomware	Cretsenbelledonne id1086 View details	2021-09-09		Other	—
No additional victim description available. ID 1086
Ransomware	Groupe Lefebvre M.R.P. id1085 View details	2021-09-09		Services	—
No additional victim description available. ID 1085
Ransomware	The Masonic Home of Florida id1084 View details	2021-09-09		Other	—
No additional victim description available. ID 1084
Ransomware	Q3 Academy id1083 View details	2021-09-09		Education	—
No additional victim description available. ID 1083
Ransomware	Piedmont Orthopedics \| OrthoAtlanta id1082 View details	2021-09-09		Other	—
No additional victim description available. ID 1082
Ransomware	MCLINC id1081 View details	2021-09-09		Services	—
No additional victim description available. ID 1081
Ransomware	WHSE id1080 View details	2021-09-09		Other	—
No additional victim description available. ID 1080
Ransomware	John Hardy id1079 View details	2021-09-09		Other	—
No additional victim description available. ID 1079
Ransomware	Marseille Provence id1078 View details	2021-09-09		Communication / Marketing	—
No additional victim description available. ID 1078
Ransomware	Alliance Building Services id1077 View details	2021-09-09		Construction / Real Estate	—
No additional victim description available. ID 1077
Ransomware	Wichita Sheet Metal id1076 View details	2021-09-09		Manufacturing / Engineering	—
No additional victim description available. ID 1076
Ransomware	Illinois Valley Community College id1075 View details	2021-09-09		Education	—
No additional victim description available. ID 1075
Ransomware	Monty Holding Group id1074 View details	2021-09-09		Services	—
No additional victim description available. ID 1074
Ransomware	The Dantherm Group id1073 View details	2021-09-09		Services	—
No additional victim description available. ID 1073
Ransomware	The Sixth Form Bolton id1072 View details	2021-09-09		Other	—
No additional victim description available. ID 1072
Ransomware	Lindenwold id1071 View details	2021-09-09		Other	—
No additional victim description available. ID 1071
Ransomware	The CFC id1070 View details	2021-09-09		Other	—
No additional victim description available. ID 1070
Ransomware	Dublin id1069 View details	2021-09-09		Other	—
No additional victim description available. ID 1069
Ransomware	Upper Columbia Academy id1068 View details	2021-09-09		Education	—
No additional victim description available. ID 1068
Ransomware	The Seifert Logistics Group id1067 View details	2021-09-09		Transportation / Travel / Logistics	—
No additional victim description available. ID 1067
Ransomware	Uxbridge College id1066 View details	2021-09-09		Education	—
No additional victim description available. ID 1066
Ransomware	Assured Imaging id1065 View details	2021-09-09		Other	—
No additional victim description available. ID 1065
Ransomware	Grand Homes id1064 View details	2021-09-09		Other	—
No additional victim description available. ID 1064
Ransomware	The Teka Group id1063 View details	2021-09-09		Services	—
No additional victim description available. ID 1063
Ransomware	ACE Glass id1062 View details	2021-09-09		Other	—
No additional victim description available. ID 1062
Ransomware	Bosley id1061 View details	2021-09-09		Other	—
No additional victim description available. ID 1061
Ransomware	MK Products id1060 View details	2021-09-09		Communication / Marketing	—
No additional victim description available. ID 1060
Ransomware	Myerscough College id1059 View details	2021-09-09		Education	—
No additional victim description available. ID 1059
Ransomware	UCEL id1058 View details	2021-09-09		Other	—
No additional victim description available. ID 1058
Ransomware	Tor Vergata id1057 View details	2021-09-09		Other	—
No additional victim description available. ID 1057
Ransomware	West Central Foodservice id1056 View details	2021-09-09		Agriculture / Food	—
No additional victim description available. ID 1056
Ransomware	Kuenne Gruppe id1055 View details	2021-09-09		Other	—
No additional victim description available. ID 1055
Ransomware	Irish Farmers Journals id1054 View details	2021-09-09		Agriculture / Food	—
No additional victim description available. ID 1054
Ransomware	CASES id1053 View details	2021-09-09		Other	—
No additional victim description available. ID 1053
Ransomware	Rafaela Alimentos id1052 View details	2021-09-09		Other	—
No additional victim description available. ID 1052
Ransomware	ASE Bucuresti id1051 View details	2021-09-09		Other	—
No additional victim description available. ID 1051
Ransomware	Heartland id1050 View details	2021-09-09		Other	—
No additional victim description available. ID 1050
Ransomware	Winters Independent School District id1049 View details	2021-09-09		Education	—
No additional victim description available. ID 1049
Ransomware	IQA id1048 View details	2021-09-09		Other	—
No additional victim description available. ID 1048
Ransomware	Bakers S.A. Limited id1047 View details	2021-09-09		Other	—
No additional victim description available. ID 1047
Ransomware	Econocom id1046 View details	2021-09-09	France	Other	—
No additional victim description available. ID 1046
Ransomware	Avelia id1045 View details	2021-09-09		Other	—
No additional victim description available. ID 1045
Ransomware	Mongoldford id1044 View details	2021-09-09		NGOs / Associations	—
No additional victim description available. ID 1044
Ransomware	CWF Group Inc. id1043 View details	2021-09-09		Services	—
No additional victim description available. ID 1043
Ransomware	Telhai id1042 View details	2021-09-09		Other	—
No additional victim description available. ID 1042
Ransomware	Ayuntamiento de Guadarrama id1041 View details	2021-09-09		Other	—
No additional victim description available. ID 1041
Ransomware	Market Pioneer id1040 View details	2021-09-09		Retail / E-commerce	—
No additional victim description available. ID 1040
Ransomware	Roughrider Internation Ltd. id1039 View details	2021-09-09		Services	—
No additional victim description available. ID 1039
Ransomware	Bruce Turner id1038 View details	2021-09-09		Other	—
No additional victim description available. ID 1038
Ransomware	Mendes JÃºnior id1037 View details	2021-09-09		Other	—
No additional victim description available. ID 1037
Ransomware	Affinity Education id1036 View details	2021-09-09		Education	—
No additional victim description available. ID 1036
Ransomware	Gemitchellco id1035 View details	2021-09-09		Services	—
No additional victim description available. ID 1035
Ransomware	Rontis Medical id1034 View details	2021-09-09		Healthcare / Pharma	—
No additional victim description available. ID 1034
Ransomware	Mirai id1033 View details	2021-09-09		Other	—
No additional victim description available. ID 1033
Ransomware	Tech 2000 id1032 View details	2021-09-09		IT	—
No additional victim description available. ID 1032
Ransomware	Benchmark Family Services id1031 View details	2021-09-09		Services	—
No additional victim description available. ID 1031
Ransomware	Dayliff id1030 View details	2021-09-09		Other	—
No additional victim description available. ID 1030
Ransomware	Merchant Taylors' School id1029 View details	2021-09-09		Education	—
No additional victim description available. ID 1029
Ransomware	Riggins Company id1028 View details	2021-09-09		Services	—
No additional victim description available. ID 1028
Ransomware	St. Margaretâs Hospice Care id1027 View details	2021-09-09		Other	—
No additional victim description available. ID 1027
Ransomware	Bene Ficencia id1026 View details	2021-09-09		Other	—
No additional victim description available. ID 1026
Ransomware	Grupo Infoar id1025 View details	2021-09-09		Other	—
No additional victim description available. ID 1025
Ransomware	McKinney id1024 View details	2021-09-09		Other	—
No additional victim description available. ID 1024
Ransomware	Overlake Obstetricians & Gynecologists,PC id1023 View details	2021-09-09		Other	—
No additional victim description available. ID 1023
Ransomware	St. Mary School Hyde Park id1022 View details	2021-09-09		Education	—
No additional victim description available. ID 1022
Ransomware	Torello Moving Strategies id1021 View details	2021-09-09		Other	—
No additional victim description available. ID 1021
Ransomware	Max. Aarts id1020 View details	2021-09-09		Other	—
No additional victim description available. ID 1020
Ransomware	Mid-Florida Pathology id1019 View details	2021-09-09		Other	—
No additional victim description available. ID 1019
Ransomware	Serinus Energy Plc id1018 View details	2021-09-09		Energy	—
No additional victim description available. ID 1018
Ransomware	Outwest Express LLC id1017 View details	2021-09-09		Communication / Marketing	—
No additional victim description available. ID 1017
Ransomware	King Henrys id1016 View details	2021-09-09		Other	—
No additional victim description available. ID 1016
Ransomware	Summit Appliance id1015 View details	2021-09-09		Other	—
No additional victim description available. ID 1015
Ransomware	Brickhaus id1014 View details	2021-09-09		Other	—
No additional victim description available. ID 1014
Ransomware	Finance Evolution id1013 View details	2021-09-09		Finance / Legal / Insurance	—
No additional victim description available. ID 1013
Ransomware	Nama Khoi Municipality id1012 View details	2021-09-09		Public Sector	—
No additional victim description available. ID 1012
Ransomware	Thinkware id1011 View details	2021-09-09		Other	—
No additional victim description available. ID 1011
Ransomware	Brookfield Public Schools id1010 View details	2021-09-09		Education	—
No additional victim description available. ID 1010
Ransomware	Salesianum School id1009 View details	2021-09-09		Education	—
No additional victim description available. ID 1009
Ransomware	Provenza Floors id1008 View details	2021-09-09		Communication / Marketing	—
No additional victim description available. ID 1008
Ransomware	CCS id1007 View details	2021-09-09		Other	—
No additional victim description available. ID 1007
Ransomware	Palos Community Consolidated School District 118 id1006 View details	2021-09-09		Education	—
No additional victim description available. ID 1006
Ransomware	DFW Communications,Inc. id1005 View details	2021-09-09		Communication / Marketing	—
No additional victim description available. ID 1005
Ransomware	The FitzWimark School id1004 View details	2021-09-09		Education	—
No additional victim description available. ID 1004
Ransomware	Ãstre Toten Kommune Voksenopplring id1003 View details	2021-09-09		Other	—
No additional victim description available. ID 1003
Ransomware	Blueknight Energy Partners id1002 View details	2021-09-09		Energy	—
No additional victim description available. ID 1002

Pysa

Overview

Top Countries

Known Leak Locations (1)

Top Activity Sectors