Ransomware Group intelligence

Ransomhub

Inactive

Track Ransomhub with 842 published victims and 3 known leak locations in a single intelligence view.

BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Victims 842 Known published victims in this dataset
First discovered 2024-02-10 Earliest victim discovery date
Last discovered 2025-03-31 Latest victim discovery date
Inactive since 569 days Days since the latest known victim
Top country United States 347 victims
Known locations 3 Leak or negotiation infrastructure tracked

Overview

Ransomhub is tracked by Breach House as a ransomware group with 842 published victims.

United States is currently the most targeted country in this dataset.

3 known leak locations are currently associated with this group.

Leak Status Distribution

  • Leaked 0 0.0%
  • Pending 842 100.0%
  • Deleted 0 0.0%

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (3)

    Label Type Availability Links
    Leak location 2 Onion service Down checked just now ransomgxjnwmu5ceqwo2jrjssxpoicolmgismfpnslaixg3pgpe5qcad.onion
    Leak location 3 Onion service Down checked just now fpwwt67hm3mkt6hdavkfyqi42oo3vkaggvjj4kxdr2ivsbzyka5yr2qd.onion
    Leak location 1 Onion service Down checked 1m ago ransomxifxwc5eteopdobynonjctkxxvap77yqifu2emfbecgbqdw6qd.onion

    Top Activity Sectors (17)

    Victims (842)

    Search, filter and paginate the victim timeline for Ransomhub. Showing 301–400 of 842.

    Type Target Discovered Country Business Category Intel Link Leak status
    Ransomware bolognafc.it id15669 View details Italy Communication / Marketing pending
    Ransomware www.bent-tree.com id15667 View details United States Communication / Marketing pending
    Ransomware facilcreditos.co id15666 View details Colombia Finance / Legal / Insurance pending
    Ransomware osmedica.com.ar id15665 View details Argentina Services pending
    Ransomware reliv.la id15653 View details Mexico IT pending
    Ransomware walkingtree.org id15652 View details India IT pending
    Ransomware cal-tool.com id15649 View details United States Manufacturing / Engineering pending
    Ransomware OfficeZilla.com id15648 View details United States Communication / Marketing pending
    Ransomware karberinsulation.com id15640 View details Hungary Services pending
    Ransomware coppelltx.gov id15636 View details United States Public Sector pending
    Ransomware isd109.org id15635 View details United States Education pending
    Ransomware parkleigh.com id15634 View details United States Retail / E-commerce pending
    Ransomware dienesusa.com id15633 View details United States Communication / Marketing pending
    Ransomware yunker.com id15632 View details United States Communication / Marketing pending
    Ransomware minneapolisparks.org id15631 View details United States Telecommunications pending
    Ransomware maynard.k12.ma.us id15630 View details United States Education pending
    Ransomware www.itlindia.com id15628 View details India Manufacturing / Engineering pending
    Ransomware blr.com id15580 View details India Communication / Marketing pending
    Ransomware curenta.com id15571 View details Israel Healthcare / Pharma pending
    Ransomware www.cobeldarou.com id15561 View details Iran, Islamic Republic of Healthcare / Pharma pending
    Ransomware www.damcapital.in id15560 View details India Finance / Legal / Insurance pending
    Ransomware scalar.co.il id15530 View details Israel IT pending
    Ransomware polaraire.com id15526 View details United States Services pending
    Ransomware wulffco.com id15481 View details United States Communication / Marketing pending
    Ransomware smawins.net id15480 View details United States Communication / Marketing pending
    Ransomware chsplumbing.com id15479 View details United States Services pending
    Ransomware tempaircompany.com id15478 View details United States Services pending
    Ransomware brylesresearch.com id15472 View details United States Services pending
    Ransomware hartmannbund.de id15471 View details Germany Healthcare / Pharma pending
    Ransomware citywestcommercials.co.uk id15470 View details United Kingdom Public Sector pending
    Ransomware thinkecs.com id15469 View details United States Services pending
    Ransomware interborosd.org id15457 View details United States Other pending
    Ransomware Thebike.com id15456 View details United States Communication / Marketing pending
    Ransomware 3ccaresystems.com id15455 View details Germany Healthcare / Pharma pending
    Ransomware www.depewgillen.com id15451 View details United States Finance / Legal / Insurance pending
    Ransomware totaldevelopmentsolutions.com id15403 View details United Kingdom Construction / Real Estate pending
    Ransomware jergenspiping.com id15402 View details Norway Services pending
    Ransomware sealevelinc.com id15401 View details United States Manufacturing / Engineering pending
    Ransomware Jornstax.com id15400 View details United States Services pending
    Ransomware waive.com.au id15399 View details Australia Communication / Marketing pending
    Ransomware allconstructiongroupwv.com id15398 View details United States Construction / Real Estate pending
    Ransomware www.gob.mx id15353 View details Mexico Public Sector pending
    Ransomware jhs.co.uk id15352 View details United Kingdom Communication / Marketing pending
    Ransomware potteau.com id15351 View details Belgium Services pending
    Ransomware fortinainvestments.com id15343 View details United States Finance / Legal / Insurance pending
    Ransomware Medigroup.ca id15270 View details Canada Healthcare / Pharma pending
    Ransomware www.guymontigers.com id15265 View details Australia Education pending
    Ransomware potteau.be id15256 View details Belgium Communication / Marketing pending
    Ransomware nynewspapers.com id15251 View details United States Public Sector pending
    Ransomware comarchs.com id15250 View details United States Other pending
    Ransomware tolbertlegal.com id15249 View details United States Finance / Legal / Insurance pending
    Ransomware bitquail.com id15245 View details Netherlands IT pending
    Ransomware bartleycorp.com id15233 View details United States Hospitality / Food & Beverage / Tourism pending
    Ransomware interlabel.be id15232 View details Belgium Communication / Marketing pending
    Ransomware del-electric.com id15231 View details Italy Services pending
    Ransomware nelconinc.biz id15219 View details United States Retail / E-commerce pending
    Ransomware www.fdc.ie id15218 View details Ireland Services pending
    Ransomware www.cenergica.com id15217 View details El Salvador Energy pending
    Ransomware www.bluco.com id15216 View details United States Manufacturing / Engineering pending
    Ransomware geminiindustriesinc.com id15212 View details United States Manufacturing / Engineering pending
    Ransomware www.msdl.ca id15202 View details Canada Education pending
    Ransomware brandenburgerplumbing.com id15184 View details Australia Services pending
    Ransomware arcoexc.com id15183 View details United Arab Emirates Other pending
    Ransomware metroelectric.com id15179 View details United States Services pending
    Ransomware sector5.ro id15178 View details Romania Communication / Marketing pending
    Ransomware pacificglazing.com id15170 View details Canada Communication / Marketing pending
    Ransomware nwhealthporter.com id15169 View details United States Healthcare / Pharma pending
    Ransomware apoyoconsultoria.com id15163 View details Peru Services pending
    Ransomware sundt.com id15160 View details Norway Construction / Real Estate pending
    Ransomware maxdata.com.br id15153 View details Brazil IT pending
    Ransomware goodline.com.au id15152 View details Australia Services pending
    Ransomware kenanasugarcompany.com id15151 View details Sudan Communication / Marketing pending
    Ransomware www.schweiker.de id15150 View details Germany Energy pending
    Ransomware www.drbutlerandassociates.com id15149 View details United States Healthcare / Pharma pending
    Ransomware www.mssupply.com id15148 View details United States Communication / Marketing pending
    Ransomware fullfordelectric.com id15147 View details United States Services pending
    Ransomware csucontracting.com id15139 View details United States Services pending
    Ransomware redphoenixconstruction.com id15138 View details Canada Construction / Real Estate pending
    Ransomware krigerconstruction.com id15136 View details United States Construction / Real Estate pending
    Ransomware caseconstruction.com id15135 View details United States Construction / Real Estate pending
    Ransomware lambertstonecommercial.com id15134 View details United Kingdom Services pending
    Ransomware bravodigitaltrader.co.uk id15126 View details United Kingdom IT pending
    Ransomware www.sym-global.com id15121 View details Taiwan, Province of China Communication / Marketing pending
    Ransomware www.fatboysfleetandauto.com id15120 View details United States Services pending
    Ransomware www.tetco-group.com id15119 View details Saudi Arabia Communication / Marketing pending
    Ransomware www.tigre.gob.ar id15118 View details Argentina Communication / Marketing pending
    Ransomware www.usm.cl id15117 View details Chile IT pending
    Ransomware www.ua4rent.com id15116 View details United States Communication / Marketing pending
    Ransomware www.rosito-bisani.com id15115 View details United States Hospitality / Food & Beverage / Tourism pending
    Ransomware obe.com id15114 View details Austria IT pending
    Ransomware lighthouseelectric.com id15113 View details United States Services pending
    Ransomware eap.gr id15108 View details Greece Education pending
    Ransomware www.mabeglobal.com id15085 View details Mexico Communication / Marketing pending
    Ransomware granjazul.com id15072 View details Guatemala Communication / Marketing pending
    Ransomware illumin8global.com id15071 View details United Arab Emirates Communication / Marketing pending
    Ransomware tlie.org id15058 View details United States Education pending
    Ransomware nagucoop.com id15057 View details Guatemala Retail / E-commerce pending
    Ransomware www.baymark.com id15055 View details United States Communication / Marketing pending
    Ransomware noblehouse.com.ph id15051 View details Philippines Communication / Marketing pending
    Ransomware hcfinc.com id15050 View details United States Finance / Legal / Insurance pending