Ransomware Group intelligence

Ransomhub

Inactive

Track Ransomhub with 843 published victims and 3 known leak locations in a single intelligence view.

Victims 843 Known published victims in this dataset
First discovered 2024-02-10 Earliest victim discovery date
Last discovered 2025-03-31 Latest victim discovery date
Inactive since 474 days Days since the latest known victim
Top country United States 347 victims
Known locations 3 Leak or negotiation infrastructure tracked

Overview

Ransomhub is tracked by Breach House as a ransomware group with 843 published victims.

United States is currently the most targeted country in this dataset.

3 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (3)

    Label Type Availability Links
    Leak location 1 Onion service Unknown ransomxifxwc5eteopdobynonjctkxxvap77yqifu2emfbecgbqdw6qd.onion
    Leak location 2 Onion service Unknown ransomgxjnwmu5ceqwo2jrjssxpoicolmgismfpnslaixg3pgpe5qcad.onion
    Leak location 3 Onion service Unknown fpwwt67hm3mkt6hdavkfyqi42oo3vkaggvjj4kxdr2ivsbzyka5yr2qd.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (843)

    Search, filter and paginate the victim timeline for Ransomhub. Showing 101–200 of 843.

    Type Target Discovered Country Business Category Intel Link
    Ransomware www.emeryair.net id17822 View details United States Transportation / Travel / Logistics
    Ransomware welcompanies.com id17807 View details United States Transportation / Travel / Logistics
    Ransomware www.avalon-hotel.com id17790 View details United States Hospitality / Food & Beverage / Tourism
    Ransomware www.rgb.com id17789 View details United States IT
    Ransomware www.wpisd.com id17788 View details United States Education
    Ransomware www.ateliermonarque.com id17787 View details Canada Retail / E-commerce
    Ransomware www.confabca.com id17786 View details Costa Rica Communication / Marketing
    Ransomware hgmlegal.com id17785 View details New Zealand Finance / Legal / Insurance
    Ransomware compactmould.com id17760 View details Canada Communication / Marketing
    Ransomware denbyco.co.uk id17755 View details United Kingdom Services
    Ransomware www.famcomachine.com id17731 View details United States Communication / Marketing
    Ransomware ondaralogistica.com id17716 View details Spain Services
    Ransomware alleghenybradford.com id17704 View details United States Manufacturing / Engineering
    Ransomware www.electro-fusion.com id17701 View details United Kingdom Communication / Marketing
    Ransomware www.midwestvascular.net id17700 View details United States Communication / Marketing
    Ransomware www.witheyaddison.com id17699 View details Canada Services
    Ransomware www.nola-law.com id17698 View details United States Finance / Legal / Insurance
    Ransomware guadeloupeformation.com id17693 View details France Communication / Marketing
    Ransomware headcount.com id17692 View details United States IT
    Ransomware jindalgroup.com id17691 View details India Manufacturing / Engineering
    Ransomware www.elecgalapagos.com.ec id17686 View details Ecuador Energy
    Ransomware www.fla-esq.com id17685 View details United States Communication / Marketing
    Ransomware www.saracenproperties.com id17684 View details United States Communication / Marketing
    Ransomware eaglepost.com id17678 View details United States Communication / Marketing
    Ransomware gilcar.co id17677 View details Colombia Construction / Real Estate
    Ransomware www.okddsi.net id17676 View details United States Communication / Marketing
    Ransomware www.pransystems.com id17661 View details United States Communication / Marketing
    Ransomware www.phdental.com id17660 View details United States Healthcare / Pharma
    Ransomware www.riverdale.edu id17659 View details United States Education
    Ransomware haleycomfort.com id17635 View details United States Communication / Marketing
    Ransomware www.mwmechanicalinc.com id17615 View details United States Communication / Marketing
    Ransomware www.alphamedctr.com id17614 View details United States Healthcare / Pharma
    Ransomware www.ccttechnologies.com id17613 View details United States IT
    Ransomware www.copleystoughton.com id17612 View details United States Healthcare / Pharma
    Ransomware www.macmed.com id17611 View details United States Healthcare / Pharma
    Ransomware www.macter.com id17602 View details Pakistan Healthcare / Pharma
    Ransomware lekiaviation.com id17587 View details Denmark Transportation / Travel / Logistics
    Ransomware bisindustries.com id17586 View details Australia Services
    Ransomware saulttribe.com/kewadin.com id17552 View details Hospitality / Food & Beverage / Tourism
    Ransomware www.rowetactical.com id17551 View details Australia Communication / Marketing
    Ransomware www.transcend-info.com id17550 View details Taiwan, Province of China Communication / Marketing
    Ransomware www.naga.ae id17549 View details United Arab Emirates Communication / Marketing
    Ransomware www.cityoftarrant.com id17548 View details United States Public Sector
    Ransomware www.imgenterprises.com id17547 View details United States Communication / Marketing
    Ransomware www.solardatasystems.com id17546 View details United States Energy
    Ransomware www.310tempering.com id17545 View details United States Manufacturing / Engineering
    Ransomware www.colacouronnelocations.com id17544 View details Haiti Communication / Marketing
    Ransomware www.calspa.it id17532 View details Italy Communication / Marketing
    Ransomware brockbanks.co.uk id17522 View details United Kingdom Finance / Legal / Insurance
    Ransomware enventuregt.com id17511 View details United States IT
    Ransomware snoqualmietribe.us id17510 View details United States Communication / Marketing
    Ransomware alderconstruction.com id17488 View details United States Construction / Real Estate
    Ransomware steveallcorn.remax.com id17487 View details United States Construction / Real Estate
    Ransomware bergconst.com id17486 View details United States Construction / Real Estate
    Ransomware burdickpainting.com id17485 View details United States Services
    Ransomware columbiacabinets.com id17484 View details United States Other
    Ransomware ekvallbyrne.com id17483 View details Sweden Finance / Legal / Insurance
    Ransomware krmcustomhomes.com id17482 View details United States Communication / Marketing
    Ransomware laderalending.com id17481 View details United States Communication / Marketing
    Ransomware minnesotaexteriors.com id17480 View details United States Communication / Marketing
    Ransomware rogerspetro.com id17479 View details Canada Energy
    Ransomware sundanceliving.com id17478 View details United States Healthcare / Pharma
    Ransomware thejdkgroup.com id17477 View details United States Hospitality / Food & Beverage / Tourism
    Ransomware twncomm.com id17476 View details Taiwan, Province of China Telecommunications
    Ransomware askgs.ma id17471 View details Morocco Other
    Ransomware slchc.edu id17470 View details United States Healthcare / Pharma
    Ransomware weathersa.co.za id17469 View details South Africa Agriculture / Food
    Ransomware primesourcestaffing.com id17419 View details United States Communication / Marketing
    Ransomware komline.com id17417 View details United States Healthcare / Pharma
    Ransomware bazcooil.com id17416 View details United States Energy
    Ransomware sdfab.com id17415 View details United States Other
    Ransomware kaplanstahler.com id17414 View details United States Communication / Marketing
    Ransomware www.jsp.com id17413 View details United States Communication / Marketing
    Ransomware Hpisd.org id17280 View details United States Education
    Ransomware wwcsd.net id17279 View details United States Education
    Ransomware teamues.com id17263 View details United States Construction / Real Estate
    Ransomware sautech.edu id17260 View details United States IT
    Ransomware zsattorneys.com id17252 View details United States Finance / Legal / Insurance
    Ransomware annegrady.org id17233 View details United States Services
    Ransomware escada.com id17207 View details Germany Energy
    Ransomware sportadmin.se id17180 View details Sweden NGOs / Associations
    Ransomware www.aymcdonald.com id17177 View details United States Communication / Marketing
    Ransomware capstoneins.ca id17176 View details Canada Services
    Ransomware clarkfreightways.com id17175 View details Canada Transportation / Travel / Logistics
    Ransomware alojaimi.com id17163 View details Saudi Arabia Construction / Real Estate
    Ransomware www.aswgr.com id17162 View details United States Communication / Marketing
    Ransomware heartlandrvs.com id17161 View details United States Communication / Marketing
    Ransomware gaheritagefcu.org id17160 View details United States Finance / Legal / Insurance
    Ransomware www.wongfleming.com id17138 View details United States Finance / Legal / Insurance
    Ransomware smithmidland.com id17137 View details United States Communication / Marketing
    Ransomware www.origene.com id17136 View details United States Communication / Marketing
    Ransomware midwaymetals.com.vn id17003 View details Viet Nam Manufacturing / Engineering
    Ransomware www.pcm.com.mx id16852 View details Mexico Communication / Marketing
    Ransomware samsill.com id16782 View details United States Communication / Marketing
    Ransomware archaeologicalresearchservices.com id16780 View details United Kingdom Services
    Ransomware www.missionbank.bank id16775 View details United States Finance / Legal / Insurance
    Ransomware sdkgroup.com id16766 View details Hong Kong Services
    Ransomware www.manpower.com id16765 View details United States Energy
    Ransomware ilemgroup.com id16762 View details Switzerland IT
    Ransomware www.grohe.com id16761 View details Germany Communication / Marketing