Ransomware Group intelligence

Ransomhub

Inactive

Track Ransomhub with 843 published victims and 3 known leak locations in a single intelligence view.

Victims 843 Known published victims in this dataset
First discovered 2024-02-10 Earliest victim discovery date
Last discovered 2025-03-31 Latest victim discovery date
Inactive since 474 days Days since the latest known victim
Top country United States 347 victims
Known locations 3 Leak or negotiation infrastructure tracked

Overview

Ransomhub is tracked by Breach House as a ransomware group with 843 published victims.

United States is currently the most targeted country in this dataset.

3 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (3)

    Label Type Availability Links
    Leak location 1 Onion service Unknown ransomxifxwc5eteopdobynonjctkxxvap77yqifu2emfbecgbqdw6qd.onion
    Leak location 2 Onion service Unknown ransomgxjnwmu5ceqwo2jrjssxpoicolmgismfpnslaixg3pgpe5qcad.onion
    Leak location 3 Onion service Unknown fpwwt67hm3mkt6hdavkfyqi42oo3vkaggvjj4kxdr2ivsbzyka5yr2qd.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (843)

    Search, filter and paginate the victim timeline for Ransomhub. Showing 1–100 of 843.

    Type Target Discovered Country Business Category Intel Link
    Ransomware intellioan.com id18878 View details United States Other
    Ransomware jackpotjunction.com id18877 View details United States Hospitality / Food & Beverage / Tourism
    Ransomware europtec.com id18875 View details Germany IT
    Ransomware delta-life.com id18874 View details Germany Other
    Ransomware www.assisi.nl id18804 View details Netherlands Other
    Ransomware phaus.us&phakr.com&phabodysystems.com id18771 View details United States Services
    Ransomware www.bassi.it id18770 View details Italy Communication / Marketing
    Ransomware www.allmilmoe.com id18750 View details Germany Communication / Marketing
    Ransomware brattenelectrictn.com id18744 View details United States Other
    Ransomware www.hongthongrice.com id18727 View details Thailand Agriculture / Food
    Ransomware www.fkm-elemente.de id18726 View details Germany Communication / Marketing
    Ransomware conterra.com id18725 View details Germany Services
    Ransomware www.DSelectrical.com id18719 View details United States Other
    Ransomware www.carolinaac.com id18698 View details United States Services
    Ransomware www.garbinc.com id18697 View details United States Communication / Marketing
    Ransomware www.mododoc.com id18696 View details United States Retail / E-commerce
    Ransomware www.argentosc.com id18695 View details Argentina Other
    Ransomware www.ripplejunction.com id18694 View details United States Retail / E-commerce
    Ransomware www.creativelogisticservices.com id18693 View details United States Transportation / Travel / Logistics
    Ransomware www.afnigc.ca id18692 View details Canada Other
    Ransomware www.cormidom.com.do id18691 View details Dominican Republic Manufacturing / Engineering
    Ransomware www.lions-online.org id18690 View details Germany Other
    Ransomware www.solidworld.it id18675 View details Italy Communication / Marketing
    Ransomware www.s3s.com id18674 View details United States Other
    Ransomware www.rivaldt.com id18673 View details Brazil Other
    Ransomware OMLTD.CO.JP id18672 View details Japan Services
    Ransomware technicare.com id18671 View details United States IT
    Ransomware cisd.org id18670 View details United States Other
    Ransomware mnm.hu id18669 View details Hungary Other
    Ransomware texascompressionservices.com id18668 View details United States Communication / Marketing
    Ransomware www.exemplar.com id18666 View details Italy Other
    Ransomware www.solventacentroamerica.com id18633 View details Guatemala Finance / Legal / Insurance
    Ransomware gbsn.com.br id18599 View details Brazil Other
    Ransomware www.scpautomation.com id18597 View details Canada Manufacturing / Engineering
    Ransomware www.gestionquintessence.com id18596 View details Canada Services
    Ransomware www.engines.man.eu id18595 View details EU Energy
    Ransomware www.engines.man.eu id18595 View details Germany Energy
    Ransomware www.abmenviro.ca id18594 View details Canada Services
    Ransomware www.accessfinanceonline.com id18593 View details United States Finance / Legal / Insurance
    Ransomware www.ahmadiyya.ca id18592 View details Canada Communication / Marketing
    Ransomware www.elizajennings.org id18591 View details United States Communication / Marketing
    Ransomware www.sinkdirect.com id18590 View details United States Communication / Marketing
    Ransomware www.broadmoormethodist.org id18589 View details United States Other
    Ransomware www.parklandmanufacturing.com id18588 View details Manufacturing / Engineering
    Ransomware www.solinst.com id18587 View details Canada Communication / Marketing
    Ransomware www.allstarhealthcaresolutions.com id18586 View details United States Healthcare / Pharma
    Ransomware www.njcalwe.com id18585 View details Other
    Ransomware www.gcsnet.com id18584 View details Other
    Ransomware www.core-1.com id18583 View details Services
    Ransomware www.esquirebrands.com id18582 View details United States Communication / Marketing
    Ransomware www.avalonapparel.com id18581 View details United States Communication / Marketing
    Ransomware www.oneupinnovations.com id18580 View details United States Communication / Marketing
    Ransomware www.mslglobalexp.com id18565 View details India Services
    Ransomware www.georgehay.co.uk id18560 View details United Kingdom Finance / Legal / Insurance
    Ransomware www.janvier-labs.com id18559 View details France Services
    Ransomware controlledair.com id18525 View details United States Services
    Ransomware www.baxterlaboratories.com id18477 View details Australia Communication / Marketing
    Ransomware ccktech.com id18476 View details United Kingdom IT
    Ransomware oneill.com id18471 View details United States Communication / Marketing
    Ransomware www.jhayber.com id18470 View details Spain Communication / Marketing
    Ransomware www.ameda.com id18445 View details United States Communication / Marketing
    Ransomware idcconstruction.com id18422 View details United States Construction / Real Estate
    Ransomware jennyyoo.com id18420 View details United States Communication / Marketing
    Ransomware www.raymond.in id18403 View details India Retail / E-commerce
    Ransomware dtrglaw.com id18402 View details United States Finance / Legal / Insurance
    Ransomware www.visualisation.one id18354 View details Germany Communication / Marketing
    Ransomware dccsagroup.com&csahome.com id18307 View details Indonesia Services
    Ransomware www.hexosys.com id18301 View details Hong Kong IT
    Ransomware www.dcarosolutions.com id18257 View details Colombia Services
    Ransomware mitchellmcnutt.com id18256 View details United States Finance / Legal / Insurance
    Ransomware www.jpwindustries.com id18255 View details United States Energy
    Ransomware total-ps.com id18248 View details United States Finance / Legal / Insurance
    Ransomware bayvillage.org id18244 View details United States Public Sector
    Ransomware wheats.com id18239 View details United States Other
    Ransomware srmg.com.au id18238 View details Australia Services
    Ransomware www.portlandschools.org id18229 View details United States Education
    Ransomware www.hinton.ca id18228 View details Canada Communication / Marketing
    Ransomware www.centersheetmetal.com id18226 View details United States Manufacturing / Engineering
    Ransomware www.convention.qc.ca id18225 View details Canada Communication / Marketing
    Ransomware hickorylaw.com id18224 View details United States Finance / Legal / Insurance
    Ransomware lovesac.com id18223 View details United States Communication / Marketing
    Ransomware www.black-star.fr id18185 View details France Communication / Marketing
    Ransomware www.japanrebuilt.jp id18181 View details Japan Communication / Marketing
    Ransomware www.sunsweet.com id18180 View details United States Communication / Marketing
    Ransomware www.cda.be id18179 View details Belgium IT
    Ransomware dsrny.com id18170 View details United States Construction / Real Estate
    Ransomware goencon.com id18162 View details United States IT
    Ransomware familychc.com id18149 View details United States Healthcare / Pharma
    Ransomware andreyevengineering.com id18148 View details Russian Federation Manufacturing / Engineering
    Ransomware www.casinoessentials.com id18104 View details United States Communication / Marketing
    Ransomware www.journeyoilfield.net id18103 View details United States Energy
    Ransomware www.townofbourne.com id18086 View details United States Public Sector
    Ransomware teamwass.com id17847 View details United States Services
    Ransomware www.nasonptc.com id17846 View details United States Manufacturing / Engineering
    Ransomware www.envirolabsinc.com id17834 View details United States Energy
    Ransomware www.kppm.com id17833 View details United States Services
    Ransomware www.newburghhealthcarecenter.com id17827 View details United States Healthcare / Pharma
    Ransomware www.obrienavocats.qc.ca id17825 View details Canada Finance / Legal / Insurance
    Ransomware www.cmsg.cl id17824 View details Chile Services
    Ransomware www.amerasphalt.com id17823 View details United States Communication / Marketing