Ransomware Group intelligence

Pysa

Inactive

Track Pysa with 309 published victims and 1 known leak locations in a single intelligence view.

Victims 309 Known published victims in this dataset

First discovered 2020-07-01 Earliest victim discovery date

Last discovered 2022-09-20 Latest victim discovery date

Inactive since 1397 days Days since the latest known victim

Top country Canada 2 victims

Known locations 1 Leak or negotiation infrastructure tracked

Pysa is tracked by Breach House as a ransomware group with 309 published victims.

Canada is currently the most targeted country in this dataset.

1 known leak locations are currently associated with this group.

Top Countries

Distribution

Label	Type	Availability	Links
Leak location 1	Onion service	Unknown	`pysa2bitc5ldeyfak4seeruqymqs4sj5wt5qkcq7aoyg4h2acqieywad.onion`

No sector intelligence available.

Ransom Notes (0)

▼

No ransom notes available for this group.

Tools Used

▼

No tools used available.

YARA Rules (0)

▼

No YARA rules available.

Indicators of Compromise (0)

▼

No IoCs available for this group.

Negotiation Chats (0)

▼

No negotiation chats available.

No external research sources linked yet.

Victims (309)

Search, filter and paginate the victim timeline for Pysa. Showing 201–300 of 309.

Type	Target	Discovered	Country	Business Category	Intel Link
Ransomware	The Bascom id1001 View details	2021-09-09		Other	—
No additional victim description available. ID 1001
Ransomware	Bridgwater & Taunton College id1000 View details	2021-09-09		Education	—
No additional victim description available. ID 1000
Ransomware	Neenan Company id999 View details	2021-09-09		Services	—
No additional victim description available. ID 999
Ransomware	Romanoff Group id998 View details	2021-09-09		Services	—
No additional victim description available. ID 998
Ransomware	Jebco Agencies Inc. id997 View details	2021-09-09		Services	—
No additional victim description available. ID 997
Ransomware	Wisconsin Public Radio id996 View details	2021-09-09		Public Sector	—
No additional victim description available. ID 996
Ransomware	Intecs group id995 View details	2021-09-09		Services	—
No additional victim description available. ID 995
Ransomware	Prairie View A&M University id994 View details	2021-09-09		Education	—
No additional victim description available. ID 994
Ransomware	Flamingo Horticulture id993 View details	2021-09-09		NGOs / Associations	—
No additional victim description available. ID 993
Ransomware	Little Elm id992 View details	2021-09-09		Other	—
No additional victim description available. ID 992
Ransomware	Peters Bosel Lawyers id991 View details	2021-09-09		Finance / Legal / Insurance	—
No additional victim description available. ID 991
Ransomware	Implanta Spa id990 View details	2021-09-09		Other	—
No additional victim description available. ID 990
Ransomware	Wolf Lake Industrial Center and Terminals id989 View details	2021-09-09		Manufacturing / Engineering	—
No additional victim description available. ID 989
Ransomware	Tucker Oil Company Inc. id988 View details	2021-09-09		Energy	—
No additional victim description available. ID 988
Ransomware	Cleveland Institute of Music id987 View details	2021-09-09		Education	—
No additional victim description available. ID 987
Ransomware	Grand Annecy Agglomeration id986 View details	2021-09-09		Other	—
No additional victim description available. ID 986
Ransomware	Doak Shirreff Lawyers id985 View details	2021-09-09	Canada	Finance / Legal / Insurance	—
No additional victim description available. ID 985
Ransomware	Fairfax University of America id984 View details	2021-09-09		Education	—
No additional victim description available. ID 984
Ransomware	Brain:IT id983 View details	2021-09-09		Other	—
No additional victim description available. ID 983
Ransomware	Powerblanket id982 View details	2021-09-09		Energy	—
No additional victim description available. ID 982
Ransomware	Viport id981 View details	2021-09-09		Other	—
No additional victim description available. ID 981
Ransomware	Grant Supplies id980 View details	2021-09-09		Other	—
No additional victim description available. ID 980
Ransomware	Plantaciones de PlÃ¡tano id979 View details	2021-09-09		Other	—
No additional victim description available. ID 979
Ransomware	Siesacloud id978 View details	2021-09-09		IT	—
No additional victim description available. ID 978
Ransomware	Syracuse New Times id977 View details	2021-09-09		Other	—
No additional victim description available. ID 977
Ransomware	Prefeitura de BalneÃ¡rio CamboriÃº id976 View details	2021-09-09		Communication / Marketing	—
No additional victim description available. ID 976
Ransomware	Lo Studio Bartoli & Arveda id975 View details	2021-09-09		Hospitality / Food & Beverage / Tourism	—
No additional victim description available. ID 975
Ransomware	ProSource Wholesale id974 View details	2021-09-09		Communication / Marketing	—
No additional victim description available. ID 974
Ransomware	American Industrial Felt & Supply, Inc id973 View details	2021-09-09		Manufacturing / Engineering	—
No additional victim description available. ID 973
Ransomware	Esteyco id972 View details	2021-09-09		Other	—
No additional victim description available. ID 972
Ransomware	D.W. Haber & Son id971 View details	2021-09-09		Other	—
No additional victim description available. ID 971
Ransomware	Dallas Production id970 View details	2021-09-09		Manufacturing / Engineering	—
No additional victim description available. ID 970
Ransomware	IDS Online Store id969 View details	2021-09-09		Retail / E-commerce	—
No additional victim description available. ID 969
Ransomware	Zionsville Community Schools id968 View details	2021-09-09		Education	—
No additional victim description available. ID 968
Ransomware	Blackhawk Mining id967 View details	2021-09-09		Other	—
No additional victim description available. ID 967
Ransomware	Baldwin Wallace University id966 View details	2021-09-09		Education	—
No additional victim description available. ID 966
Ransomware	La ChÃ¢taigneraie id965 View details	2021-09-09		Other	—
No additional victim description available. ID 965
Ransomware	A Superior Towing id964 View details	2021-09-09		Other	—
No additional victim description available. ID 964
Ransomware	OnLINE FM id963 View details	2021-09-09		Other	—
No additional victim description available. ID 963
Ransomware	Ogden Golf & Country Club id962 View details	2021-09-09		Other	—
No additional victim description available. ID 962
Ransomware	BABB Security Systems id961 View details	2021-09-09		Services	—
No additional victim description available. ID 961
Ransomware	Repro X-Press id960 View details	2021-09-09		Communication / Marketing	—
No additional victim description available. ID 960
Ransomware	EBSU id959 View details	2021-09-09		Other	—
No additional victim description available. ID 959
Ransomware	Paysoft id958 View details	2021-09-09		Other	—
No additional victim description available. ID 958
Ransomware	Tenderloin Housing Clinic id957 View details	2021-09-09		Healthcare / Pharma	—
No additional victim description available. ID 957
Ransomware	FirstCash Inc id956 View details	2021-09-09		Services	—
No additional victim description available. ID 956
Ransomware	Florence-Darlington Technical College id955 View details	2021-09-09		Education	—
No additional victim description available. ID 955
Ransomware	Momentum Transportation id954 View details	2021-09-09		Transportation / Travel / Logistics	—
No additional victim description available. ID 954
Ransomware	Woodholme Gastroenterology Associates id953 View details	2021-09-09		Energy	—
No additional victim description available. ID 953
Ransomware	Forest City Fire Protection id952 View details	2021-09-09		Communication / Marketing	—
No additional victim description available. ID 952
Ransomware	Western Flyer Express id951 View details	2021-09-09		Communication / Marketing	—
No additional victim description available. ID 951
Ransomware	City of Covington Louisiana id950 View details	2021-09-09		Public Sector	—
No additional victim description available. ID 950
Ransomware	Bridgeway Inc id949 View details	2021-09-09		Services	—
No additional victim description available. ID 949
Ransomware	Transam Carriers id948 View details	2021-09-09		Other	—
No additional victim description available. ID 948
Ransomware	Dale Operating Company id947 View details	2021-09-09		Services	—
No additional victim description available. ID 947
Ransomware	Levante UD id946 View details	2021-09-09		Other	—
No additional victim description available. ID 946
Ransomware	Upstate Home Care id945 View details	2021-09-09		Public Sector	—
No additional victim description available. ID 945
Ransomware	Modern Data Systems id944 View details	2021-09-09		Services	—
No additional victim description available. ID 944
Ransomware	Immanuel Lutheran Church and School id943 View details	2021-09-09		Education	—
No additional victim description available. ID 943
Ransomware	Millersville University id942 View details	2021-09-09		Education	—
No additional victim description available. ID 942
Ransomware	Marlboro Pediatric Dentistryâ id941 View details	2021-09-09		Other	—
No additional victim description available. ID 941
Ransomware	Public Restroom Company id940 View details	2021-09-09		Public Sector	—
No additional victim description available. ID 940
Ransomware	Grover Corparation id939 View details	2021-09-09		Services	—
No additional victim description available. ID 939
Ransomware	Aireko id938 View details	2021-09-09		Other	—
No additional victim description available. ID 938
Ransomware	Legacy Housing Corporation id937 View details	2021-09-09		Construction / Real Estate	—
No additional victim description available. ID 937
Ransomware	Wiener Laboratorios id936 View details	2021-09-09		Other	—
No additional victim description available. ID 936
Ransomware	Eagle Eye Produce id935 View details	2021-09-09		Communication / Marketing	—
No additional victim description available. ID 935
Ransomware	Ciruli Brothers id934 View details	2021-09-09		Other	—
No additional victim description available. ID 934
Ransomware	JVSmith Companies id933 View details	2021-09-09		Other	—
No additional victim description available. ID 933
Ransomware	Home Grown Grocery Food Supermarket id932 View details	2021-09-09		Retail / E-commerce	—
No additional victim description available. ID 932
Ransomware	Gering Public Schools id931 View details	2021-09-09		Education	—
No additional victim description available. ID 931
Ransomware	Affton School District id930 View details	2021-09-09		Education	—
No additional victim description available. ID 930
Ransomware	Worldwide Oilfield Machine id929 View details	2021-09-09		Energy	—
No additional victim description available. ID 929
Ransomware	Divorce Lawyer in Reading & Douglassville, PA id928 View details	2021-09-09		Finance / Legal / Insurance	—
No additional victim description available. ID 928
Ransomware	Drug Alcohol Testing and Screening Compliance in Texas id927 View details	2021-09-09		Other	—
No additional victim description available. ID 927
Ransomware	Dayton Door Sales id926 View details	2021-09-09		Retail / E-commerce	—
No additional victim description available. ID 926
Ransomware	Children's Network of Southwest Florida id925 View details	2021-09-09		Telecommunications	—
No additional victim description available. ID 925
Ransomware	Zamora id924 View details	2021-09-09		Other	—
No additional victim description available. ID 924
Ransomware	ATC Transportation id923 View details	2021-09-09		Transportation / Travel / Logistics	—
No additional victim description available. ID 923
Ransomware	Commack Fire Department id922 View details	2021-09-09		Public Sector	—
No additional victim description available. ID 922
Ransomware	Zane State College id921 View details	2021-09-09		Education	—
No additional victim description available. ID 921
Ransomware	AFP Elevator id920 View details	2021-09-09		Other	—
No additional victim description available. ID 920
Ransomware	Alliance Architecture id919 View details	2021-09-09		Construction / Real Estate	—
No additional victim description available. ID 919
Ransomware	Aztec Events id918 View details	2021-09-09		Other	—
No additional victim description available. ID 918
Ransomware	Buffalo Schools id917 View details	2021-09-09		Education	—
No additional victim description available. ID 917
Ransomware	St Bede's College id916 View details	2021-09-09		Education	—
No additional victim description available. ID 916
Ransomware	Hyper Microsystems id915 View details	2021-09-09		Services	—
No additional victim description available. ID 915
Ransomware	Geotechnical Consultants Inc. id914 View details	2021-09-09		IT	—
No additional victim description available. ID 914
Ransomware	Cyclone Steel id913 View details	2021-09-09		Manufacturing / Engineering	—
No additional victim description available. ID 913
Ransomware	OHL Judlau id912 View details	2021-09-09		Other	—
No additional victim description available. ID 912
Ransomware	The Fashion Group International id911 View details	2021-09-09		Services	—
No additional victim description available. ID 911
Ransomware	Upstate HomeCare id910 View details	2021-09-09		Public Sector	—
No additional victim description available. ID 910
Ransomware	Vermont Personal Injury Lawyers id909 View details	2021-09-09		Finance / Legal / Insurance	—
No additional victim description available. ID 909
Ransomware	Sarmad Steel id908 View details	2021-09-09		Manufacturing / Engineering	—
No additional victim description available. ID 908
Ransomware	Bulley id907 View details	2021-09-09		Other	—
No additional victim description available. ID 907
Ransomware	the NET - Northeast Tennessee Media Group id906 View details	2021-09-09		Communication / Marketing	—
No additional victim description available. ID 906
Ransomware	Famous Supply id905 View details	2021-09-09		Other	—
No additional victim description available. ID 905
Ransomware	LJ Hooker Aspley id904 View details	2021-09-09		Other	—
No additional victim description available. ID 904
Ransomware	WPSD Local 6 id903 View details	2021-09-09		Other	—
No additional victim description available. ID 903
Ransomware	Karavan Trailers id902 View details	2021-09-09		Other	—
No additional victim description available. ID 902

Pysa

Overview

Top Countries

Known Leak Locations (1)

Top Activity Sectors