Ransomware Group intelligence

Ransomhub

Inactive

Track Ransomhub with 842 published victims and 3 known leak locations in a single intelligence view.

BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Victims 842 Known published victims in this dataset
First discovered 2024-02-10 Earliest victim discovery date
Last discovered 2025-03-31 Latest victim discovery date
Inactive since 569 days Days since the latest known victim
Top country United States 347 victims
Known locations 3 Leak or negotiation infrastructure tracked

Overview

Ransomhub is tracked by Breach House as a ransomware group with 842 published victims.

United States is currently the most targeted country in this dataset.

3 known leak locations are currently associated with this group.

Leak Status Distribution

  • Leaked 0 0.0%
  • Pending 842 100.0%
  • Deleted 0 0.0%

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (3)

    Label Type Availability Links
    Leak location 2 Onion service Down checked just now ransomgxjnwmu5ceqwo2jrjssxpoicolmgismfpnslaixg3pgpe5qcad.onion
    Leak location 3 Onion service Down checked just now fpwwt67hm3mkt6hdavkfyqi42oo3vkaggvjj4kxdr2ivsbzyka5yr2qd.onion
    Leak location 1 Onion service Down checked 1m ago ransomxifxwc5eteopdobynonjctkxxvap77yqifu2emfbecgbqdw6qd.onion

    Top Activity Sectors (17)

    Victims (842)

    Search, filter and paginate the victim timeline for Ransomhub. Showing 201–300 of 842.

    Type Target Discovered Country Business Category Intel Link Leak status
    Ransomware precisionmechsd.com id16749 View details United States Communication / Marketing pending
    Ransomware whychoosebw.com id16748 View details Communication / Marketing pending
    Ransomware boardman-hamilton.com id16747 View details United States Finance / Legal / Insurance pending
    Ransomware miedemaproduce.com id16746 View details United States Communication / Marketing pending
    Ransomware supremegroup.co.in id16737 View details India Communication / Marketing pending
    Ransomware bsegroup.it id16682 View details Italy Services pending
    Ransomware www.solariumrevestimentos.com.br id16681 View details Brazil Energy pending
    Ransomware www.liteputer.com.tw id16680 View details Taiwan, Province of China Communication / Marketing pending
    Ransomware AKConstructors.com id16669 View details United States Communication / Marketing pending
    Ransomware www.eurocert.pl id16661 View details Poland Services pending
    Ransomware udb.net id16653 View details United States Other pending
    Ransomware Intelservice.com id16632 View details Nigeria Services pending
    Ransomware healthcarewithinreach.org id16609 View details United States Healthcare / Pharma pending
    Ransomware mi.edu id16605 View details United States Education pending
    Ransomware amerplumb.com id16578 View details United States Communication / Marketing pending
    Ransomware www.wisesocon.com id16575 View details Thailand Construction / Real Estate pending
    Ransomware xtremmedia.com id16571 View details Spain Communication / Marketing pending
    Ransomware www.leaguecenter.org id16569 View details United States Communication / Marketing pending
    Ransomware www.temotekstil.com.tr id16568 View details Türkiye Healthcare / Pharma pending
    Ransomware www.excelresourcing.co.uk id16567 View details United Kingdom Communication / Marketing pending
    Ransomware www.mie.com.my id16566 View details Malaysia Manufacturing / Engineering pending
    Ransomware www.rotaryeng.co.th id16565 View details Thailand Services pending
    Ransomware www.primalwear.com id16564 View details United States Communication / Marketing pending
    Ransomware www.fairhallzhang.com id16563 View details Canada Communication / Marketing pending
    Ransomware castlehillha.co.uk id16559 View details United Kingdom Communication / Marketing pending
    Ransomware drive-lines.com id16558 View details United States Healthcare / Pharma pending
    Ransomware sahpetrol.com.tr id16538 View details Türkiye Energy pending
    Ransomware acquafertil.com.br id16537 View details Brazil Services pending
    Ransomware molars.co.ke id16501 View details Kenya Healthcare / Pharma pending
    Ransomware www.alliancemat.com id16482 View details United States Communication / Marketing pending
    Ransomware www.geedingconstruction.com id16481 View details United States Construction / Real Estate pending
    Ransomware groupegm.com id16471 View details France Hospitality / Food & Beverage / Tourism pending
    Ransomware lianbeng.sg id16468 View details Singapore Construction / Real Estate pending
    Ransomware www.metlife.com id16462 View details United States Finance / Legal / Insurance pending
    Ransomware asesoriacamen.es id16439 View details Spain Services pending
    Ransomware www.psccorporation.com id16438 View details Singapore Services pending
    Ransomware nigico.gr id16424 View details Greece Manufacturing / Engineering pending
    Ransomware diazfoodsolutions.es id16413 View details Spain Services pending
    Ransomware sensualcollection.com id16385 View details United States Retail / E-commerce pending
    Ransomware intellinet-es.com id16301 View details Argentina Communication / Marketing pending
    Ransomware www.semfin.com id16300 View details Switzerland Services pending
    Ransomware www.mccoyglobal.com id16299 View details Canada Energy pending
    Ransomware www.marietta-city.org id16239 View details United States Public Sector pending
    Ransomware www.groupe-setcar.com.tn id16238 View details Tunisia Services pending
    Ransomware gilariver.org id16236 View details United States Communication / Marketing pending
    Ransomware tabocas.com.br id16230 View details Brazil Energy pending
    Ransomware planetgroup.co.il id16216 View details Israel Services pending
    Ransomware www.tekni-plex.com id16215 View details United States Communication / Marketing pending
    Ransomware choicemg.com id16151 View details United States Services pending
    Ransomware medisecure.com.au id16150 View details Australia Communication / Marketing pending
    Ransomware redknee.com id16149 View details Canada Communication / Marketing pending
    Ransomware nbleisuretrust.org id16148 View details United Kingdom NGOs / Associations pending
    Ransomware www.specialtree.com id16121 View details United States Healthcare / Pharma pending
    Ransomware bushandburchett.com id16114 View details United States Communication / Marketing pending
    Ransomware SWDAKOTAH.COM id16113 View details United States Communication / Marketing pending
    Ransomware www.aflak.com.sa id16098 View details Saudi Arabia Services pending
    Ransomware scania.pl id16097 View details Poland Services pending
    Ransomware Levinlaw.com id16041 View details United States Finance / Legal / Insurance pending
    Ransomware tekni-plex.com id16033 View details United States Healthcare / Pharma pending
    Ransomware www.hashem-contracting.com id16032 View details Saudi Arabia Communication / Marketing pending
    Ransomware recope.go.cr id16003 View details Costa Rica Energy pending
    Ransomware tectaamerica.com id15958 View details United States Manufacturing / Engineering pending
    Ransomware womenscare.com id15943 View details United States Healthcare / Pharma pending
    Ransomware greenscape.us.com id15942 View details United States Communication / Marketing pending
    Ransomware www.lasalleinc.com id15935 View details Canada Construction / Real Estate pending
    Ransomware mpdory.com id15934 View details United States Hospitality / Food & Beverage / Tourism pending
    Ransomware inia.es id15933 View details Spain Agriculture / Food pending
    Ransomware pro-mec.com id15890 View details Italy Communication / Marketing pending
    Ransomware hanwhacimarron.com id15872 View details United States Communication / Marketing pending
    Ransomware frigopesca.com.ec id15869 View details Ecuador Communication / Marketing pending
    Ransomware islandphoto.com id15865 View details United States Communication / Marketing pending
    Ransomware troxlerlabs.com id15864 View details United States Construction / Real Estate pending
    Ransomware www.d47.org id15860 View details United States Education pending
    Ransomware www.sefiso-atlantique.fr id15843 View details France Construction / Real Estate pending
    Ransomware marietta-city.org id15842 View details United States Public Sector pending
    Ransomware westbornmarket.com id15841 View details United States Retail / E-commerce pending
    Ransomware www.lasalle.com id15840 View details United States Construction / Real Estate pending
    Ransomware internetway.com.br id15823 View details Brazil Services pending
    Ransomware www.iscinc93.com id15822 View details United States Services pending
    Ransomware www.fibrogen.com id15821 View details United States Healthcare / Pharma pending
    Ransomware www.z2data.com id15820 View details United States Services pending
    Ransomware www.giorgiovisconti.it id15819 View details Italy Hospitality / Food & Beverage / Tourism pending
    Ransomware www.kiswire.com id15818 View details Korea, Republic of Manufacturing / Engineering pending
    Ransomware www.dalgroup.com id15817 View details Sudan Communication / Marketing pending
    Ransomware www.goethe-university-frankfurt.de id15816 View details Germany Education pending
    Ransomware www.wsgcpa.com id15815 View details United States Services pending
    Ransomware KHKKLOW.com id15800 View details Italy Retail / E-commerce pending
    Ransomware shapesmfg.com id15790 View details United States Communication / Marketing pending
    Ransomware everde.com id15789 View details United States Communication / Marketing pending
    Ransomware qualitybillingservice.com id15788 View details United States Communication / Marketing pending
    Ransomware tascosaofficemachines.com id15787 View details United States Communication / Marketing pending
    Ransomware costelloeye.com id15786 View details United States Retail / E-commerce pending
    Ransomware www.aras-group.ae id15764 View details United Arab Emirates Services pending
    Ransomware ppotts.com id15720 View details United States Other pending
    Ransomware corenroll.com id15696 View details United States Communication / Marketing pending
    Ransomware times-supermarket.com id15690 View details United States Retail / E-commerce pending
    Ransomware alleghenycontract.com id15689 View details United States Communication / Marketing pending
    Ransomware tappi.org id15688 View details United States IT pending
    Ransomware wheelerassoc.com id15672 View details United States Construction / Real Estate pending
    Ransomware gronercrm.com.br id15671 View details Brazil Services pending