Ransomware Group intelligence

Ransomhub

Inactive

Track Ransomhub with 843 published victims and 3 known leak locations in a single intelligence view.

Victims 843 Known published victims in this dataset
First discovered 2024-02-10 Earliest victim discovery date
Last discovered 2025-03-31 Latest victim discovery date
Inactive since 474 days Days since the latest known victim
Top country United States 347 victims
Known locations 3 Leak or negotiation infrastructure tracked

Overview

Ransomhub is tracked by Breach House as a ransomware group with 843 published victims.

United States is currently the most targeted country in this dataset.

3 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (3)

    Label Type Availability Links
    Leak location 1 Onion service Unknown ransomxifxwc5eteopdobynonjctkxxvap77yqifu2emfbecgbqdw6qd.onion
    Leak location 2 Onion service Unknown ransomgxjnwmu5ceqwo2jrjssxpoicolmgismfpnslaixg3pgpe5qcad.onion
    Leak location 3 Onion service Unknown fpwwt67hm3mkt6hdavkfyqi42oo3vkaggvjj4kxdr2ivsbzyka5yr2qd.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (843)

    Search, filter and paginate the victim timeline for Ransomhub. Showing 201–300 of 843.

    Type Target Discovered Country Business Category Intel Link
    Ransomware www.americanstandard-us.com id16758 View details United States Communication / Marketing
    Ransomware precisionmechsd.com id16749 View details United States Communication / Marketing
    Ransomware whychoosebw.com id16748 View details Communication / Marketing
    Ransomware boardman-hamilton.com id16747 View details United States Finance / Legal / Insurance
    Ransomware miedemaproduce.com id16746 View details United States Communication / Marketing
    Ransomware supremegroup.co.in id16737 View details India Communication / Marketing
    Ransomware bsegroup.it id16682 View details Italy Services
    Ransomware www.solariumrevestimentos.com.br id16681 View details Brazil Energy
    Ransomware www.liteputer.com.tw id16680 View details Taiwan, Province of China Communication / Marketing
    Ransomware AKConstructors.com id16669 View details United States Communication / Marketing
    Ransomware www.eurocert.pl id16661 View details Poland Services
    Ransomware udb.net id16653 View details United States Other
    Ransomware Intelservice.com id16632 View details Nigeria Services
    Ransomware healthcarewithinreach.org id16609 View details United States Healthcare / Pharma
    Ransomware mi.edu id16605 View details United States Education
    Ransomware amerplumb.com id16578 View details United States Communication / Marketing
    Ransomware www.wisesocon.com id16575 View details Thailand Construction / Real Estate
    Ransomware xtremmedia.com id16571 View details Spain Communication / Marketing
    Ransomware www.leaguecenter.org id16569 View details United States Communication / Marketing
    Ransomware www.temotekstil.com.tr id16568 View details Türkiye Healthcare / Pharma
    Ransomware www.excelresourcing.co.uk id16567 View details United Kingdom Communication / Marketing
    Ransomware www.mie.com.my id16566 View details Malaysia Manufacturing / Engineering
    Ransomware www.rotaryeng.co.th id16565 View details Thailand Services
    Ransomware www.primalwear.com id16564 View details United States Communication / Marketing
    Ransomware www.fairhallzhang.com id16563 View details Canada Communication / Marketing
    Ransomware castlehillha.co.uk id16559 View details United Kingdom Communication / Marketing
    Ransomware drive-lines.com id16558 View details United States Healthcare / Pharma
    Ransomware sahpetrol.com.tr id16538 View details Türkiye Energy
    Ransomware acquafertil.com.br id16537 View details Brazil Services
    Ransomware molars.co.ke id16501 View details Kenya Healthcare / Pharma
    Ransomware www.alliancemat.com id16482 View details United States Communication / Marketing
    Ransomware www.geedingconstruction.com id16481 View details United States Construction / Real Estate
    Ransomware groupegm.com id16471 View details France Hospitality / Food & Beverage / Tourism
    Ransomware lianbeng.sg id16468 View details Singapore Construction / Real Estate
    Ransomware www.metlife.com id16462 View details United States Finance / Legal / Insurance
    Ransomware asesoriacamen.es id16439 View details Spain Services
    Ransomware www.psccorporation.com id16438 View details Singapore Services
    Ransomware nigico.gr id16424 View details Greece Manufacturing / Engineering
    Ransomware diazfoodsolutions.es id16413 View details Spain Services
    Ransomware sensualcollection.com id16385 View details United States Retail / E-commerce
    Ransomware intellinet-es.com id16301 View details Argentina Communication / Marketing
    Ransomware www.semfin.com id16300 View details Switzerland Services
    Ransomware www.mccoyglobal.com id16299 View details Canada Energy
    Ransomware www.marietta-city.org id16239 View details United States Public Sector
    Ransomware www.groupe-setcar.com.tn id16238 View details Tunisia Services
    Ransomware gilariver.org id16236 View details United States Communication / Marketing
    Ransomware tabocas.com.br id16230 View details Brazil Energy
    Ransomware planetgroup.co.il id16216 View details Israel Services
    Ransomware www.tekni-plex.com id16215 View details United States Communication / Marketing
    Ransomware choicemg.com id16151 View details United States Services
    Ransomware medisecure.com.au id16150 View details Australia Communication / Marketing
    Ransomware redknee.com id16149 View details Canada Communication / Marketing
    Ransomware nbleisuretrust.org id16148 View details United Kingdom NGOs / Associations
    Ransomware www.specialtree.com id16121 View details United States Healthcare / Pharma
    Ransomware bushandburchett.com id16114 View details United States Communication / Marketing
    Ransomware SWDAKOTAH.COM id16113 View details United States Communication / Marketing
    Ransomware www.aflak.com.sa id16098 View details Saudi Arabia Services
    Ransomware scania.pl id16097 View details Poland Services
    Ransomware Levinlaw.com id16041 View details United States Finance / Legal / Insurance
    Ransomware tekni-plex.com id16033 View details United States Healthcare / Pharma
    Ransomware www.hashem-contracting.com id16032 View details Saudi Arabia Communication / Marketing
    Ransomware recope.go.cr id16003 View details Costa Rica Energy
    Ransomware tectaamerica.com id15958 View details United States Manufacturing / Engineering
    Ransomware womenscare.com id15943 View details United States Healthcare / Pharma
    Ransomware greenscape.us.com id15942 View details United States Communication / Marketing
    Ransomware www.lasalleinc.com id15935 View details Canada Construction / Real Estate
    Ransomware mpdory.com id15934 View details United States Hospitality / Food & Beverage / Tourism
    Ransomware inia.es id15933 View details Spain Agriculture / Food
    Ransomware pro-mec.com id15890 View details Italy Communication / Marketing
    Ransomware hanwhacimarron.com id15872 View details United States Communication / Marketing
    Ransomware frigopesca.com.ec id15869 View details Ecuador Communication / Marketing
    Ransomware islandphoto.com id15865 View details United States Communication / Marketing
    Ransomware troxlerlabs.com id15864 View details United States Construction / Real Estate
    Ransomware www.d47.org id15860 View details United States Education
    Ransomware www.sefiso-atlantique.fr id15843 View details France Construction / Real Estate
    Ransomware marietta-city.org id15842 View details United States Public Sector
    Ransomware westbornmarket.com id15841 View details United States Retail / E-commerce
    Ransomware www.lasalle.com id15840 View details United States Construction / Real Estate
    Ransomware internetway.com.br id15823 View details Brazil Services
    Ransomware www.iscinc93.com id15822 View details United States Services
    Ransomware www.fibrogen.com id15821 View details United States Healthcare / Pharma
    Ransomware www.z2data.com id15820 View details United States Services
    Ransomware www.giorgiovisconti.it id15819 View details Italy Hospitality / Food & Beverage / Tourism
    Ransomware www.kiswire.com id15818 View details Korea, Republic of Manufacturing / Engineering
    Ransomware www.dalgroup.com id15817 View details Sudan Communication / Marketing
    Ransomware www.goethe-university-frankfurt.de id15816 View details Germany Education
    Ransomware www.wsgcpa.com id15815 View details United States Services
    Ransomware KHKKLOW.com id15800 View details Italy Retail / E-commerce
    Ransomware shapesmfg.com id15790 View details United States Communication / Marketing
    Ransomware everde.com id15789 View details United States Communication / Marketing
    Ransomware qualitybillingservice.com id15788 View details United States Communication / Marketing
    Ransomware tascosaofficemachines.com id15787 View details United States Communication / Marketing
    Ransomware costelloeye.com id15786 View details United States Retail / E-commerce
    Ransomware www.aras-group.ae id15764 View details United Arab Emirates Services
    Ransomware ppotts.com id15720 View details United States Other
    Ransomware corenroll.com id15696 View details United States Communication / Marketing
    Ransomware times-supermarket.com id15690 View details United States Retail / E-commerce
    Ransomware alleghenycontract.com id15689 View details United States Communication / Marketing
    Ransomware tappi.org id15688 View details United States IT
    Ransomware wheelerassoc.com id15672 View details United States Construction / Real Estate