Ransomware Group intelligence

Ransomhub

Inactive

Track Ransomhub with 842 published victims and 3 known leak locations in a single intelligence view.

BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Victims 842 Known published victims in this dataset
First discovered 2024-02-10 Earliest victim discovery date
Last discovered 2025-03-31 Latest victim discovery date
Inactive since 568 days Days since the latest known victim
Top country United States 347 victims
Known locations 3 Leak or negotiation infrastructure tracked

Overview

Ransomhub is tracked by Breach House as a ransomware group with 842 published victims.

United States is currently the most targeted country in this dataset.

3 known leak locations are currently associated with this group.

Leak Status Distribution

  • Leaked 0 0.0%
  • Pending 842 100.0%
  • Deleted 0 0.0%

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (3)

    Label Type Availability Links
    Leak location 3 Onion service Down checked 4h ago fpwwt67hm3mkt6hdavkfyqi42oo3vkaggvjj4kxdr2ivsbzyka5yr2qd.onion
    Leak location 2 Onion service Down checked 4h ago ransomgxjnwmu5ceqwo2jrjssxpoicolmgismfpnslaixg3pgpe5qcad.onion
    Leak location 1 Onion service Down checked 4h ago ransomxifxwc5eteopdobynonjctkxxvap77yqifu2emfbecgbqdw6qd.onion

    Top Activity Sectors (17)

    Victims (842)

    Search, filter and paginate the victim timeline for Ransomhub. Showing 1–100 of 842.

    Type Target Discovered Country Business Category Intel Link Leak status
    Ransomware intellioan.com id18878 View details United States Other pending
    Ransomware jackpotjunction.com id18877 View details United States Hospitality / Food & Beverage / Tourism pending
    Ransomware europtec.com id18875 View details Germany IT pending
    Ransomware delta-life.com id18874 View details Germany Other pending
    Ransomware www.assisi.nl id18804 View details Netherlands Other pending
    Ransomware phaus.us&phakr.com&phabodysystems.com id18771 View details United States Services pending
    Ransomware www.bassi.it id18770 View details Italy Communication / Marketing pending
    Ransomware www.allmilmoe.com id18750 View details Germany Communication / Marketing pending
    Ransomware brattenelectrictn.com id18744 View details United States Other pending
    Ransomware www.hongthongrice.com id18727 View details Thailand Agriculture / Food pending
    Ransomware www.fkm-elemente.de id18726 View details Germany Communication / Marketing pending
    Ransomware conterra.com id18725 View details Germany Services pending
    Ransomware www.DSelectrical.com id18719 View details United States Other pending
    Ransomware www.carolinaac.com id18698 View details United States Services pending
    Ransomware www.garbinc.com id18697 View details United States Communication / Marketing pending
    Ransomware www.mododoc.com id18696 View details United States Retail / E-commerce pending
    Ransomware www.argentosc.com id18695 View details Argentina Other pending
    Ransomware www.ripplejunction.com id18694 View details United States Retail / E-commerce pending
    Ransomware www.creativelogisticservices.com id18693 View details United States Transportation / Travel / Logistics pending
    Ransomware www.afnigc.ca id18692 View details Canada Other pending
    Ransomware www.cormidom.com.do id18691 View details Dominican Republic Manufacturing / Engineering pending
    Ransomware www.lions-online.org id18690 View details Germany Other pending
    Ransomware www.solidworld.it id18675 View details Italy Communication / Marketing pending
    Ransomware www.s3s.com id18674 View details United States Other pending
    Ransomware www.rivaldt.com id18673 View details Brazil Other pending
    Ransomware OMLTD.CO.JP id18672 View details Japan Services pending
    Ransomware technicare.com id18671 View details United States IT pending
    Ransomware cisd.org id18670 View details United States Other pending
    Ransomware mnm.hu id18669 View details Hungary Other pending
    Ransomware texascompressionservices.com id18668 View details United States Communication / Marketing pending
    Ransomware www.exemplar.com id18666 View details Italy Other pending
    Ransomware www.solventacentroamerica.com id18633 View details Guatemala Finance / Legal / Insurance pending
    Ransomware gbsn.com.br id18599 View details Brazil Other pending
    Ransomware www.scpautomation.com id18597 View details Canada Manufacturing / Engineering pending
    Ransomware www.gestionquintessence.com id18596 View details Canada Services pending
    Ransomware www.engines.man.eu id18595 View details Germany Energy pending
    Ransomware www.abmenviro.ca id18594 View details Canada Services pending
    Ransomware www.accessfinanceonline.com id18593 View details United States Finance / Legal / Insurance pending
    Ransomware www.ahmadiyya.ca id18592 View details Canada Communication / Marketing pending
    Ransomware www.elizajennings.org id18591 View details United States Communication / Marketing pending
    Ransomware www.sinkdirect.com id18590 View details United States Communication / Marketing pending
    Ransomware www.broadmoormethodist.org id18589 View details United States Other pending
    Ransomware www.parklandmanufacturing.com id18588 View details Manufacturing / Engineering pending
    Ransomware www.solinst.com id18587 View details Canada Communication / Marketing pending
    Ransomware www.allstarhealthcaresolutions.com id18586 View details United States Healthcare / Pharma pending
    Ransomware www.njcalwe.com id18585 View details Other pending
    Ransomware www.gcsnet.com id18584 View details Other pending
    Ransomware www.core-1.com id18583 View details Services pending
    Ransomware www.esquirebrands.com id18582 View details United States Communication / Marketing pending
    Ransomware www.avalonapparel.com id18581 View details United States Communication / Marketing pending
    Ransomware www.oneupinnovations.com id18580 View details United States Communication / Marketing pending
    Ransomware www.mslglobalexp.com id18565 View details India Services pending
    Ransomware www.georgehay.co.uk id18560 View details United Kingdom Finance / Legal / Insurance pending
    Ransomware www.janvier-labs.com id18559 View details France Services pending
    Ransomware controlledair.com id18525 View details United States Services pending
    Ransomware www.baxterlaboratories.com id18477 View details Australia Communication / Marketing pending
    Ransomware ccktech.com id18476 View details United Kingdom IT pending
    Ransomware oneill.com id18471 View details United States Communication / Marketing pending
    Ransomware www.jhayber.com id18470 View details Spain Communication / Marketing pending
    Ransomware www.ameda.com id18445 View details United States Communication / Marketing pending
    Ransomware idcconstruction.com id18422 View details United States Construction / Real Estate pending
    Ransomware jennyyoo.com id18420 View details United States Communication / Marketing pending
    Ransomware www.raymond.in id18403 View details India Retail / E-commerce pending
    Ransomware dtrglaw.com id18402 View details United States Finance / Legal / Insurance pending
    Ransomware www.visualisation.one id18354 View details Germany Communication / Marketing pending
    Ransomware dccsagroup.com&csahome.com id18307 View details Indonesia Services pending
    Ransomware www.hexosys.com id18301 View details Hong Kong IT pending
    Ransomware www.dcarosolutions.com id18257 View details Colombia Services pending
    Ransomware mitchellmcnutt.com id18256 View details United States Finance / Legal / Insurance pending
    Ransomware www.jpwindustries.com id18255 View details United States Energy pending
    Ransomware total-ps.com id18248 View details United States Finance / Legal / Insurance pending
    Ransomware bayvillage.org id18244 View details United States Public Sector pending
    Ransomware wheats.com id18239 View details United States Other pending
    Ransomware srmg.com.au id18238 View details Australia Services pending
    Ransomware www.portlandschools.org id18229 View details United States Education pending
    Ransomware www.hinton.ca id18228 View details Canada Communication / Marketing pending
    Ransomware www.centersheetmetal.com id18226 View details United States Manufacturing / Engineering pending
    Ransomware www.convention.qc.ca id18225 View details Canada Communication / Marketing pending
    Ransomware hickorylaw.com id18224 View details United States Finance / Legal / Insurance pending
    Ransomware lovesac.com id18223 View details United States Communication / Marketing pending
    Ransomware www.black-star.fr id18185 View details France Communication / Marketing pending
    Ransomware www.japanrebuilt.jp id18181 View details Japan Communication / Marketing pending
    Ransomware www.sunsweet.com id18180 View details United States Communication / Marketing pending
    Ransomware www.cda.be id18179 View details Belgium IT pending
    Ransomware dsrny.com id18170 View details United States Construction / Real Estate pending
    Ransomware goencon.com id18162 View details United States IT pending
    Ransomware familychc.com id18149 View details United States Healthcare / Pharma pending
    Ransomware andreyevengineering.com id18148 View details Russian Federation Manufacturing / Engineering pending
    Ransomware www.casinoessentials.com id18104 View details United States Communication / Marketing pending
    Ransomware www.journeyoilfield.net id18103 View details United States Energy pending
    Ransomware www.townofbourne.com id18086 View details United States Public Sector pending
    Ransomware teamwass.com id17847 View details United States Services pending
    Ransomware www.nasonptc.com id17846 View details United States Manufacturing / Engineering pending
    Ransomware www.envirolabsinc.com id17834 View details United States Energy pending
    Ransomware www.kppm.com id17833 View details United States Services pending
    Ransomware www.newburghhealthcarecenter.com id17827 View details United States Healthcare / Pharma pending
    Ransomware www.obrienavocats.qc.ca id17825 View details Canada Finance / Legal / Insurance pending
    Ransomware www.cmsg.cl id17824 View details Chile Services pending
    Ransomware www.amerasphalt.com id17823 View details United States Communication / Marketing pending
    Ransomware www.emeryair.net id17822 View details United States Transportation / Travel / Logistics pending