Ransomware Group intelligence

Ransomhub

Inactive

Track Ransomhub with 842 published victims and 3 known leak locations in a single intelligence view.

BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Victims 842 Known published victims in this dataset
First discovered 2024-02-10 Earliest victim discovery date
Last discovered 2025-03-31 Latest victim discovery date
Inactive since 569 days Days since the latest known victim
Top country United States 347 victims
Known locations 3 Leak or negotiation infrastructure tracked

Overview

Ransomhub is tracked by Breach House as a ransomware group with 842 published victims.

United States is currently the most targeted country in this dataset.

3 known leak locations are currently associated with this group.

Leak Status Distribution

  • Leaked 0 0.0%
  • Pending 842 100.0%
  • Deleted 0 0.0%

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (3)

    Label Type Availability Links
    Leak location 2 Onion service Down checked just now ransomgxjnwmu5ceqwo2jrjssxpoicolmgismfpnslaixg3pgpe5qcad.onion
    Leak location 3 Onion service Down checked 1m ago fpwwt67hm3mkt6hdavkfyqi42oo3vkaggvjj4kxdr2ivsbzyka5yr2qd.onion
    Leak location 1 Onion service Down checked 2m ago ransomxifxwc5eteopdobynonjctkxxvap77yqifu2emfbecgbqdw6qd.onion

    Top Activity Sectors (17)

    Victims (842)

    Search, filter and paginate the victim timeline for Ransomhub. Showing 401–500 of 842.

    Type Target Discovered Country Business Category Intel Link Leak status
    Ransomware www.ztexconstruction.com id15049 View details United States Construction / Real Estate pending
    Ransomware flueid.com id15020 View details United States Construction / Real Estate pending
    Ransomware guymontigers.com id15019 View details Canada Education pending
    Ransomware harrispersonalinjury.com id15018 View details United States Finance / Legal / Insurance pending
    Ransomware payxpress.co.il id15008 View details Israel Communication / Marketing pending
    Ransomware melangesystems.com id15006 View details India Communication / Marketing pending
    Ransomware mkarrari.com.br id15005 View details Brazil IT pending
    Ransomware www.olanocorp.com id14991 View details Peru Services pending
    Ransomware Groupseco.com id14964 View details Belgium Services pending
    Ransomware www.resourceinternational.com id14956 View details United States Services pending
    Ransomware bulloch.solutions id14955 View details United States Services pending
    Ransomware www.kciconst.com id14954 View details United States Construction / Real Estate pending
    Ransomware www.oma.aero id14952 View details Mexico Transportation / Travel / Logistics pending
    Ransomware passivecomponent.com id14912 View details United States Manufacturing / Engineering pending
    Ransomware elnamagnetics.com id14904 View details United States Manufacturing / Engineering pending
    Ransomware tkg.com id14895 View details Japan Communication / Marketing pending
    Ransomware lpahorticole.faylbillot.educagri.fr id14894 View details France Agriculture / Food pending
    Ransomware bwdtechnology.com id14893 View details United Arab Emirates IT pending
    Ransomware davisbrothersinc.com id14892 View details United States Construction / Real Estate pending
    Ransomware polypane.be id14891 View details Belgium Construction / Real Estate pending
    Ransomware dennissupply.com id14890 View details United States Services pending
    Ransomware specpro-inc.com id14889 View details United States Communication / Marketing pending
    Ransomware semna.fr id14888 View details France IT pending
    Ransomware 1doc.sg id14887 View details Singapore Healthcare / Pharma pending
    Ransomware mauguio-carnon.com id14883 View details France Other pending
    Ransomware donbosco-landser.net id14882 View details France Other pending
    Ransomware www.stivo.com id14865 View details France Other pending
    Ransomware yorozu-corp.co.jp id14862 View details Japan Manufacturing / Engineering pending
    Ransomware qs-group.com id14857 View details Switzerland Manufacturing / Engineering pending
    Ransomware mh-mech.com id14846 View details Japan Manufacturing / Engineering pending
    Ransomware sizeloveconstruction.com id14845 View details United States Construction / Real Estate pending
    Ransomware clinicia.com id14838 View details India Healthcare / Pharma pending
    Ransomware paciente.sempremedico.com.br id14837 View details Brazil Healthcare / Pharma pending
    Ransomware starhealth.in id14836 View details India Healthcare / Pharma pending
    Ransomware Astolabs.com id14823 View details United Arab Emirates Communication / Marketing pending
    Ransomware Alqaryahauction.com id14819 View details United Arab Emirates Construction / Real Estate pending
    Ransomware www.qal.com id14818 View details United States Communication / Marketing pending
    Ransomware www.proflex.ro id14810 View details Romania Communication / Marketing pending
    Ransomware www.icp.pr.gov id14809 View details United States Communication / Marketing pending
    Ransomware www.chiltonisd.org id14808 View details United States Education pending
    Ransomware www.kersey.net id14807 View details United States Services pending
    Ransomware www.aristoiclassical.org id14806 View details Cyprus Communication / Marketing pending
    Ransomware www.camelotservices.com id14805 View details United Kingdom Services pending
    Ransomware HiCare.net id14804 View details India Services pending
    Ransomware Bigpharmacy.com.my id14803 View details Malaysia Healthcare / Pharma pending
    Ransomware powiatjedrzejow.pl id14794 View details Poland Public Sector pending
    Ransomware Astolabs.com ASTO LABS id14793 View details United Arab Emirates Services pending
    Ransomware transport-system.com id14792 View details Switzerland Transportation / Travel / Logistics pending
    Ransomware DoctorsToYou.com id14791 View details United States Healthcare / Pharma pending
    Ransomware Horsesportireland.ie id14790 View details Ireland Services pending
    Ransomware G-plans.com id14787 View details United States Communication / Marketing pending
    Ransomware Fpapak.org id14786 View details United States Retail / E-commerce pending
    Ransomware basarsoft.com.tr id14774 View details Türkiye IT pending
    Ransomware medicato.com id14748 View details Mexico Healthcare / Pharma pending
    Ransomware saizeriya.co.jp id14740 View details Japan Hospitality / Food & Beverage / Tourism pending
    Ransomware confidencegroup.com.bd id14739 View details Bangladesh Manufacturing / Engineering pending
    Ransomware NextStage.AI id14736 View details United States Communication / Marketing pending
    Ransomware practicesuite.us id14725 View details United States Communication / Marketing pending
    Ransomware peorialawyers.com id14724 View details United States Finance / Legal / Insurance pending
    Ransomware medexhco.com id14717 View details United Arab Emirates Healthcare / Pharma pending
    Ransomware blalockcompanies.com id14656 View details United States Construction / Real Estate pending
    Ransomware okcabstract.com id14653 View details United States Construction / Real Estate pending
    Ransomware autodoc.pro id14643 View details Germany Communication / Marketing pending
    Ransomware trulysmall.com id14642 View details Canada Retail / E-commerce pending
    Ransomware nspproteins.com id14641 View details United States Communication / Marketing pending
    Ransomware canstarrestorations.com id14613 View details Canada Communication / Marketing pending
    Ransomware www.ravencm.com id14612 View details United States Services pending
    Ransomware omniboxx.nl id14608 View details Netherlands Communication / Marketing pending
    Ransomware winwinza.com id14606 View details Myanmar Education pending
    Ransomware releese.io id14599 View details Canada Communication / Marketing pending
    Ransomware kleberandassociates.com id14598 View details United States Communication / Marketing pending
    Ransomware enterpriseoutsourcing.com id14584 View details South Africa Services pending
    Ransomware mccartycompany.com id14569 View details United States Construction / Real Estate pending
    Ransomware bypeterandpauls.com id14568 View details Canada Hospitality / Food & Beverage / Tourism pending
    Ransomware domainindustries.com id14567 View details United States Services pending
    Ransomware ironmetals.com id14566 View details Germany Manufacturing / Engineering pending
    Ransomware rollxvans.com id14565 View details United States Services pending
    Ransomware markdom.com id14490 View details Canada Communication / Marketing pending
    Ransomware appweb.usinacoruripe.com.br id14487 View details Brazil Communication / Marketing pending
    Ransomware rockymountaingastro.com id14485 View details United States Energy pending
    Ransomware www.contegritygroup.com id14484 View details United States Communication / Marketing pending
    Ransomware PipelBiz.com id14483 View details Israel Communication / Marketing pending
    Ransomware www.law-taxes.pl id14477 View details Poland Finance / Legal / Insurance pending
    Ransomware www.tokiwa-group.co.jp id14476 View details Japan Manufacturing / Engineering pending
    Ransomware www.careco.se id14475 View details Sweden Communication / Marketing pending
    Ransomware www.vbrlogistica.com.br id14474 View details Brazil Transportation / Travel / Logistics pending
    Ransomware www.naniwa-pump.co.jp id14473 View details Japan Manufacturing / Engineering pending
    Ransomware libraries.delaware.gov id14447 View details United States Finance / Legal / Insurance pending
    Ransomware gsdwi.org id14446 View details Germany Education pending
    Ransomware tellurianinc.org id14431 View details United States Energy pending
    Ransomware bakpilic.com.tr id14417 View details Türkiye Communication / Marketing pending
    Ransomware savannahcandy.com id14406 View details United States Healthcare / Pharma pending
    Ransomware Acho.io id14405 View details Germany Services pending
    Ransomware virainsight.com id14395 View details United States Retail / E-commerce pending
    Ransomware aroma.com.tr id14391 View details Türkiye Communication / Marketing pending
    Ransomware rarholding.com id14390 View details Austria Construction / Real Estate pending
    Ransomware advbe.com id14375 View details France Services pending
    Ransomware avl1.com id14372 View details United States Communication / Marketing pending
    Ransomware libertyfirstcu.com id14371 View details United States Finance / Legal / Insurance pending
    Ransomware capecodacademy.org id14338 View details United States Education pending