Ransomware Group intelligence

Pysa

Inactive

Track Pysa with 309 published victims and 1 known leak locations in a single intelligence view.

Victims 309 Known published victims in this dataset
First discovered 2020-07-01 Earliest victim discovery date
Last discovered 2022-09-20 Latest victim discovery date
Inactive since 1397 days Days since the latest known victim
Top country Canada 2 victims
Known locations 1 Leak or negotiation infrastructure tracked

Overview

Pysa is tracked by Breach House as a ransomware group with 309 published victims.

Canada is currently the most targeted country in this dataset.

1 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (1)

    Label Type Availability Links
    Leak location 1 Onion service Unknown pysa2bitc5ldeyfak4seeruqymqs4sj5wt5qkcq7aoyg4h2acqieywad.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (309)

    Search, filter and paginate the victim timeline for Pysa. Showing 301–309 of 309.

    Type Target Discovered Country Business Category Intel Link
    Ransomware Logansport Community School Corporation id901 View details Education —
    Ransomware FCS Financial id900 View details Finance / Legal / Insurance —
    Ransomware Danko Emergency Equipment id899 View details Other —
    Ransomware HVAC Facility & Plant Maintenance Tools id898 View details Other —
    Ransomware HPW id897 View details Other —
    Ransomware My Cloud Star id896 View details IT —
    Ransomware Hackney Council id491 View details United Kingdom Public Sector —
    Ransomware Nonin Medical id474 View details United States Healthcare / Pharma —
    Ransomware Durham Radio id433 View details Canada Other —