Ransomware Group intelligence

Ransomhub

Inactive

Track Ransomhub with 842 published victims and 3 known leak locations in a single intelligence view.

BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Victims 842 Known published victims in this dataset
First discovered 2024-02-10 Earliest victim discovery date
Last discovered 2025-03-31 Latest victim discovery date
Inactive since 569 days Days since the latest known victim
Top country United States 347 victims
Known locations 3 Leak or negotiation infrastructure tracked

Overview

Ransomhub is tracked by Breach House as a ransomware group with 842 published victims.

United States is currently the most targeted country in this dataset.

3 known leak locations are currently associated with this group.

Leak Status Distribution

  • Leaked 0 0.0%
  • Pending 842 100.0%
  • Deleted 0 0.0%

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (3)

    Label Type Availability Links
    Leak location 2 Onion service Down checked just now ransomgxjnwmu5ceqwo2jrjssxpoicolmgismfpnslaixg3pgpe5qcad.onion
    Leak location 3 Onion service Down checked 1m ago fpwwt67hm3mkt6hdavkfyqi42oo3vkaggvjj4kxdr2ivsbzyka5yr2qd.onion
    Leak location 1 Onion service Down checked 2m ago ransomxifxwc5eteopdobynonjctkxxvap77yqifu2emfbecgbqdw6qd.onion

    Top Activity Sectors (17)

    Victims (842)

    Search, filter and paginate the victim timeline for Ransomhub. Showing 501–600 of 842.

    Type Target Discovered Country Business Category Intel Link Leak status
    Ransomware oipip.gda.pl id14337 View details Poland Communication / Marketing pending
    Ransomware kryptonresources.com id14336 View details Canada IT pending
    Ransomware www.tta.cls id14335 View details France IT pending
    Ransomware www.faithfc.org id14330 View details United States Communication / Marketing pending
    Ransomware www.adantia.es id14329 View details Spain Services pending
    Ransomware topdoctors.com id14328 View details Spain Healthcare / Pharma pending
    Ransomware www.8010urbanliving.com id14327 View details United States Construction / Real Estate pending
    Ransomware www.taperuvicha.com id14326 View details Argentina Communication / Marketing pending
    Ransomware www.plumbersstock.com id14325 View details United States Communication / Marketing pending
    Ransomware www.nikpol.com.au id14324 View details Australia Services pending
    Ransomware www.quenotedeporten.com id14323 View details Argentina Transportation / Travel / Logistics pending
    Ransomware www.galloway-macleod.co.uk id14322 View details United Kingdom Agriculture / Food pending
    Ransomware ringpower.com id14321 View details United States Energy pending
    Ransomware www.atlcc.net id14307 View details United States Services pending
    Ransomware accuraterailroad.com id14306 View details United States Communication / Marketing pending
    Ransomware advantagecdc.org id14305 View details United States Services pending
    Ransomware lafuturasrl.it id14304 View details Italy Communication / Marketing pending
    Ransomware www.southeasternretina.com id14272 View details United States Communication / Marketing pending
    Ransomware thornton-inc.com id14265 View details United States IT pending
    Ransomware mechdyne.com id14263 View details United States Services pending
    Ransomware allamericanpoly.com id14259 View details United States Manufacturing / Engineering pending
    Ransomware www.vinatiorganics.com id14249 View details India Manufacturing / Engineering pending
    Ransomware americagraphics.com id14229 View details United States Communication / Marketing pending
    Ransomware www.unige.it id14224 View details Italy Healthcare / Pharma pending
    Ransomware www.dpe.go.th id14223 View details Thailand Public Sector pending
    Ransomware www.bsg.com.au id14222 View details Australia Services pending
    Ransomware Appellation vins fins id14221 View details France Communication / Marketing pending
    Ransomware cardiovirginia.com id14210 View details United States Healthcare / Pharma pending
    Ransomware briedis.lt id14204 View details Lithuania Education pending
    Ransomware Inglenorth.co.uk id14191 View details United Kingdom Communication / Marketing pending
    Ransomware cps-k12.org id14190 View details United States Education pending
    Ransomware inorde.com id14189 View details United States Services pending
    Ransomware tri-tech.us id14188 View details United States IT pending
    Ransomware kawasaki.eu id14186 View details Netherlands Manufacturing / Engineering pending
    Ransomware phdservices.net id14185 View details United States Services pending
    Ransomware cbt-gmbh.de id14184 View details Germany Services pending
    Ransomware www.towellengineering.net id14183 View details Oman Manufacturing / Engineering pending
    Ransomware www.parknfly.ca id14175 View details Canada Transportation / Travel / Logistics pending
    Ransomware www.galgorm.com id14168 View details United Kingdom Hospitality / Food & Beverage / Tourism pending
    Ransomware www.pcipa.com id14167 View details China Services pending
    Ransomware www.bennettcurrie.co.nz id14164 View details New Zealand Services pending
    Ransomware plannedparenthood.org id14162 View details United States Communication / Marketing pending
    Ransomware gardenhomesmanagement.com id14160 View details United States Services pending
    Ransomware wilmingtoncc.org id14151 View details United States Communication / Marketing pending
    Ransomware www.amberbev.com id14146 View details Latvia Hospitality / Food & Beverage / Tourism pending
    Ransomware www.sanyo-bussan.co.jp id14145 View details Japan Communication / Marketing pending
    Ransomware www.pokerspa.it id14144 View details Italy Services pending
    Ransomware Removal.AI id14143 View details Philippines Communication / Marketing pending
    Ransomware www.sanyo-av.com id14140 View details Taiwan, Province of China Communication / Marketing pending
    Ransomware www.schneider.ch id14138 View details Switzerland Communication / Marketing pending
    Ransomware www.electriforce.com id14137 View details United States Services pending
    Ransomware ciot.com id14121 View details United States Communication / Marketing pending
    Ransomware www.nissan-dubai.com id14120 View details United Arab Emirates Manufacturing / Engineering pending
    Ransomware grant-associates.uk.com id14110 View details United Kingdom Construction / Real Estate pending
    Ransomware www.timortelecom.tl id14099 View details Timor-Leste Telecommunications pending
    Ransomware www.mineduc.gob.gt id14098 View details Guatemala Education pending
    Ransomware www.primariatm.ro id14097 View details Romania Communication / Marketing pending
    Ransomware www.suvacity.org id14096 View details Fiji Public Sector pending
    Ransomware www.iph-bet.fr id14094 View details France Manufacturing / Engineering pending
    Ransomware www.johnkellys.com id14093 View details United States Communication / Marketing pending
    Ransomware www.fenceauthority.com id14092 View details United States Public Sector pending
    Ransomware www.gruyeria.ch id14091 View details Switzerland Communication / Marketing pending
    Ransomware www.lfewines.com id14090 View details United States IT pending
    Ransomware www.citebd.org id14089 View details France Communication / Marketing pending
    Ransomware www.ramoncorripio.com id14088 View details Dominican Republic Communication / Marketing pending
    Ransomware www.iiitd.ac.in id14087 View details India IT pending
    Ransomware www.swinburne.edu id14086 View details Australia Communication / Marketing pending
    Ransomware glasstile.com id14062 View details United States Communication / Marketing pending
    Ransomware rainierarms.com id14053 View details United States Communication / Marketing pending
    Ransomware dpfza.gov.dj id14024 View details Djibouti Public Sector pending
    Ransomware www.polycohealthline.com id14023 View details United Kingdom Healthcare / Pharma pending
    Ransomware www.chwa.com.tw id14022 View details Taiwan, Province of China Services pending
    Ransomware www.alabamaplate.com id14005 View details United States Communication / Marketing pending
    Ransomware www.smarterp.com id14004 View details United States Services pending
    Ransomware htsusa.com id14003 View details United States IT pending
    Ransomware www.spie-tec.de id14002 View details Germany Communication / Marketing pending
    Ransomware prasarana.com.my id13986 View details Malaysia Communication / Marketing pending
    Ransomware saudi arabia(general secretariat of the military service council) id13941 View details Saudi Arabia Public Sector pending
    Ransomware capitalfund1.com id13920 View details United States Communication / Marketing pending
    Ransomware www.banhampoultry.co.uk id13918 View details United Kingdom Communication / Marketing pending
    Ransomware inlighten.net id13907 View details United States Services pending
    Ransomware blowerdempsay.com id13906 View details United States Services pending
    Ransomware imobesidade.com.br id13899 View details Brazil Construction / Real Estate pending
    Ransomware OSG.COM id13900 View details United States Energy — pending
    Ransomware ccsdschools.com id13892 View details United States Education pending
    Ransomware www.albynhousing.org.uk id13877 View details United Kingdom Construction / Real Estate pending
    Ransomware www.lennartsfors.com id13876 View details Sweden Agriculture / Food pending
    Ransomware www.allanmcneill.co.nz id13875 View details New Zealand Services pending
    Ransomware www.martinswood.herts.sch.uk id13874 View details United Kingdom Education pending
    Ransomware www.gmchc.org id13873 View details United States Healthcare / Pharma pending
    Ransomware www.regentcaravans.com.au id13872 View details Australia Transportation / Travel / Logistics pending
    Ransomware www.netconfig.co.za id13871 View details South Africa Services pending
    Ransomware www.manotherm.ie id13870 View details Ireland Communication / Marketing pending
    Ransomware nrcollecties.nl id13868 View details Netherlands Communication / Marketing pending
    Ransomware www.wmwmeyer.com id13866 View details United States Communication / Marketing pending
    Ransomware www.vinakom.com id13865 View details United States Communication / Marketing pending
    Ransomware www.patelco.org id13859 View details United States Finance / Legal / Insurance pending
    Ransomware ljglaw.com id13856 View details United States Finance / Legal / Insurance pending
    Ransomware www.aaconsultinc.com id13854 View details United States Services pending
    Ransomware www.isnart.it id13850 View details Italy Transportation / Travel / Logistics pending