Ransomware Group intelligence

Ransomhub

Inactive

Track Ransomhub with 843 published victims and 3 known leak locations in a single intelligence view.

Victims 843 Known published victims in this dataset
First discovered 2024-02-10 Earliest victim discovery date
Last discovered 2025-03-31 Latest victim discovery date
Inactive since 474 days Days since the latest known victim
Top country United States 347 victims
Known locations 3 Leak or negotiation infrastructure tracked

Overview

Ransomhub is tracked by Breach House as a ransomware group with 843 published victims.

United States is currently the most targeted country in this dataset.

3 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (3)

    Label Type Availability Links
    Leak location 1 Onion service Unknown ransomxifxwc5eteopdobynonjctkxxvap77yqifu2emfbecgbqdw6qd.onion
    Leak location 2 Onion service Unknown ransomgxjnwmu5ceqwo2jrjssxpoicolmgismfpnslaixg3pgpe5qcad.onion
    Leak location 3 Onion service Unknown fpwwt67hm3mkt6hdavkfyqi42oo3vkaggvjj4kxdr2ivsbzyka5yr2qd.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (843)

    Search, filter and paginate the victim timeline for Ransomhub. Showing 401–500 of 843.

    Type Target Discovered Country Business Category Intel Link
    Ransomware hcfinc.com id15050 View details United States Finance / Legal / Insurance
    Ransomware www.ztexconstruction.com id15049 View details United States Construction / Real Estate
    Ransomware flueid.com id15020 View details United States Construction / Real Estate
    Ransomware guymontigers.com id15019 View details Canada Education
    Ransomware harrispersonalinjury.com id15018 View details United States Finance / Legal / Insurance
    Ransomware payxpress.co.il id15008 View details Israel Communication / Marketing
    Ransomware melangesystems.com id15006 View details India Communication / Marketing
    Ransomware mkarrari.com.br id15005 View details Brazil IT
    Ransomware www.olanocorp.com id14991 View details Peru Services
    Ransomware Groupseco.com id14964 View details Belgium Services
    Ransomware www.resourceinternational.com id14956 View details United States Services
    Ransomware bulloch.solutions id14955 View details United States Services
    Ransomware www.kciconst.com id14954 View details United States Construction / Real Estate
    Ransomware www.oma.aero id14952 View details Mexico Transportation / Travel
    Ransomware passivecomponent.com id14912 View details United States Manufacturing / Engineering
    Ransomware elnamagnetics.com id14904 View details United States Manufacturing / Engineering
    Ransomware tkg.com id14895 View details Japan Communication / Marketing
    Ransomware lpahorticole.faylbillot.educagri.fr id14894 View details France Agriculture / Food
    Ransomware bwdtechnology.com id14893 View details United Arab Emirates IT
    Ransomware davisbrothersinc.com id14892 View details United States Construction / Real Estate
    Ransomware polypane.be id14891 View details Belgium Construction / Real Estate
    Ransomware dennissupply.com id14890 View details United States Services
    Ransomware specpro-inc.com id14889 View details United States Communication / Marketing
    Ransomware semna.fr id14888 View details France IT
    Ransomware 1doc.sg id14887 View details Singapore Healthcare / Pharma
    Ransomware mauguio-carnon.com id14883 View details France Other
    Ransomware donbosco-landser.net id14882 View details France Other
    Ransomware www.stivo.com id14865 View details France Other
    Ransomware yorozu-corp.co.jp id14862 View details Japan Manufacturing / Engineering
    Ransomware qs-group.com id14857 View details Switzerland Manufacturing / Engineering
    Ransomware mh-mech.com id14846 View details Japan Manufacturing / Engineering
    Ransomware sizeloveconstruction.com id14845 View details United States Construction / Real Estate
    Ransomware clinicia.com id14838 View details India Healthcare / Pharma
    Ransomware paciente.sempremedico.com.br id14837 View details Brazil Healthcare / Pharma
    Ransomware starhealth.in id14836 View details India Healthcare / Pharma
    Ransomware Astolabs.com id14823 View details United Arab Emirates Communication / Marketing
    Ransomware Alqaryahauction.com id14819 View details United Arab Emirates Construction / Real Estate
    Ransomware www.qal.com id14818 View details United States Communication / Marketing
    Ransomware www.proflex.ro id14810 View details Romania Communication / Marketing
    Ransomware www.icp.pr.gov id14809 View details United States Communication / Marketing
    Ransomware www.chiltonisd.org id14808 View details United States Education
    Ransomware www.kersey.net id14807 View details United States Services
    Ransomware www.aristoiclassical.org id14806 View details Cyprus Communication / Marketing
    Ransomware www.camelotservices.com id14805 View details United Kingdom Services
    Ransomware HiCare.net id14804 View details India Services
    Ransomware Bigpharmacy.com.my id14803 View details Malaysia Healthcare / Pharma
    Ransomware powiatjedrzejow.pl id14794 View details Poland Public Sector
    Ransomware Astolabs.com ASTO LABS id14793 View details United Arab Emirates Services
    Ransomware transport-system.com id14792 View details Switzerland Transportation / Travel / Logistics
    Ransomware DoctorsToYou.com id14791 View details United States Healthcare / Pharma
    Ransomware Horsesportireland.ie id14790 View details Ireland Services
    Ransomware G-plans.com id14787 View details United States Communication / Marketing
    Ransomware Fpapak.org id14786 View details United States Retail / E-commerce
    Ransomware basarsoft.com.tr id14774 View details Türkiye IT
    Ransomware medicato.com id14748 View details Mexico Healthcare / Pharma
    Ransomware saizeriya.co.jp id14740 View details Japan Hospitality / Food & Beverage / Tourism
    Ransomware confidencegroup.com.bd id14739 View details Bangladesh Manufacturing / Engineering
    Ransomware NextStage.AI id14736 View details United States Communication / Marketing
    Ransomware practicesuite.us id14725 View details United States Communication / Marketing
    Ransomware peorialawyers.com id14724 View details United States Finance / Legal / Insurance
    Ransomware medexhco.com id14717 View details United Arab Emirates Healthcare / Pharma
    Ransomware blalockcompanies.com id14656 View details United States Construction / Real Estate
    Ransomware okcabstract.com id14653 View details United States Construction / Real Estate
    Ransomware autodoc.pro id14643 View details Germany Communication / Marketing
    Ransomware trulysmall.com id14642 View details Canada Retail / E-commerce
    Ransomware nspproteins.com id14641 View details United States Communication / Marketing
    Ransomware canstarrestorations.com id14613 View details Canada Communication / Marketing
    Ransomware www.ravencm.com id14612 View details United States Services
    Ransomware omniboxx.nl id14608 View details Netherlands Communication / Marketing
    Ransomware winwinza.com id14606 View details Myanmar Education
    Ransomware releese.io id14599 View details Canada Communication / Marketing
    Ransomware kleberandassociates.com id14598 View details United States Communication / Marketing
    Ransomware enterpriseoutsourcing.com id14584 View details South Africa Services
    Ransomware mccartycompany.com id14569 View details United States Construction / Real Estate
    Ransomware bypeterandpauls.com id14568 View details Canada Hospitality / Food & Beverage / Tourism
    Ransomware domainindustries.com id14567 View details United States Services
    Ransomware ironmetals.com id14566 View details Germany Manufacturing / Engineering
    Ransomware rollxvans.com id14565 View details United States Services
    Ransomware markdom.com id14490 View details Canada Communication / Marketing
    Ransomware appweb.usinacoruripe.com.br id14487 View details Brazil Communication / Marketing
    Ransomware rockymountaingastro.com id14485 View details United States Energy
    Ransomware www.contegritygroup.com id14484 View details United States Communication / Marketing
    Ransomware PipelBiz.com id14483 View details Israel Communication / Marketing
    Ransomware www.law-taxes.pl id14477 View details Poland Finance / Legal / Insurance
    Ransomware www.tokiwa-group.co.jp id14476 View details Japan Manufacturing / Engineering
    Ransomware www.careco.se id14475 View details Sweden Communication / Marketing
    Ransomware www.vbrlogistica.com.br id14474 View details Brazil Transportation / Travel / Logistics
    Ransomware www.naniwa-pump.co.jp id14473 View details Japan Manufacturing / Engineering
    Ransomware libraries.delaware.gov id14447 View details United States Finance / Legal / Insurance
    Ransomware gsdwi.org id14446 View details Germany Education
    Ransomware tellurianinc.org id14431 View details United States Energy
    Ransomware bakpilic.com.tr id14417 View details Türkiye Communication / Marketing
    Ransomware savannahcandy.com id14406 View details United States Healthcare / Pharma
    Ransomware Acho.io id14405 View details Germany Services
    Ransomware virainsight.com id14395 View details United States Retail / E-commerce
    Ransomware aroma.com.tr id14391 View details Türkiye Communication / Marketing
    Ransomware rarholding.com id14390 View details Austria Construction / Real Estate
    Ransomware advbe.com id14375 View details France Services
    Ransomware avl1.com id14372 View details United States Communication / Marketing
    Ransomware libertyfirstcu.com id14371 View details United States Finance / Legal / Insurance