Ransomware Group intelligence

Ransomhub

Inactive

Track Ransomhub with 843 published victims and 3 known leak locations in a single intelligence view.

Victims 843 Known published victims in this dataset
First discovered 2024-02-10 Earliest victim discovery date
Last discovered 2025-03-31 Latest victim discovery date
Inactive since 474 days Days since the latest known victim
Top country United States 347 victims
Known locations 3 Leak or negotiation infrastructure tracked

Overview

Ransomhub is tracked by Breach House as a ransomware group with 843 published victims.

United States is currently the most targeted country in this dataset.

3 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (3)

    Label Type Availability Links
    Leak location 1 Onion service Unknown ransomxifxwc5eteopdobynonjctkxxvap77yqifu2emfbecgbqdw6qd.onion
    Leak location 2 Onion service Unknown ransomgxjnwmu5ceqwo2jrjssxpoicolmgismfpnslaixg3pgpe5qcad.onion
    Leak location 3 Onion service Unknown fpwwt67hm3mkt6hdavkfyqi42oo3vkaggvjj4kxdr2ivsbzyka5yr2qd.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (843)

    Search, filter and paginate the victim timeline for Ransomhub. Showing 501–600 of 843.

    Type Target Discovered Country Business Category Intel Link
    Ransomware capecodacademy.org id14338 View details United States Education
    Ransomware oipip.gda.pl id14337 View details Poland Communication / Marketing
    Ransomware kryptonresources.com id14336 View details Canada IT
    Ransomware www.tta.cls id14335 View details France IT
    Ransomware www.faithfc.org id14330 View details United States Communication / Marketing
    Ransomware www.adantia.es id14329 View details Spain Services
    Ransomware topdoctors.com id14328 View details Spain Healthcare / Pharma
    Ransomware www.8010urbanliving.com id14327 View details United States Construction / Real Estate
    Ransomware www.taperuvicha.com id14326 View details Argentina Communication / Marketing
    Ransomware www.plumbersstock.com id14325 View details United States Communication / Marketing
    Ransomware www.nikpol.com.au id14324 View details Australia Services
    Ransomware www.quenotedeporten.com id14323 View details Argentina Transportation / Travel / Logistics
    Ransomware www.galloway-macleod.co.uk id14322 View details United Kingdom Agriculture / Food
    Ransomware ringpower.com id14321 View details United States Energy
    Ransomware www.atlcc.net id14307 View details United States Services
    Ransomware accuraterailroad.com id14306 View details United States Communication / Marketing
    Ransomware advantagecdc.org id14305 View details United States Services
    Ransomware lafuturasrl.it id14304 View details Italy Communication / Marketing
    Ransomware www.southeasternretina.com id14272 View details United States Communication / Marketing
    Ransomware thornton-inc.com id14265 View details United States IT
    Ransomware mechdyne.com id14263 View details United States Services
    Ransomware allamericanpoly.com id14259 View details United States Manufacturing / Engineering
    Ransomware www.vinatiorganics.com id14249 View details India Manufacturing / Engineering
    Ransomware americagraphics.com id14229 View details United States Communication / Marketing
    Ransomware www.unige.it id14224 View details Italy Healthcare / Pharma
    Ransomware www.dpe.go.th id14223 View details Thailand Public Sector
    Ransomware www.bsg.com.au id14222 View details Australia Services
    Ransomware Appellation vins fins id14221 View details France Communication / Marketing
    Ransomware cardiovirginia.com id14210 View details United States Healthcare / Pharma
    Ransomware briedis.lt id14204 View details Lithuania Education
    Ransomware Inglenorth.co.uk id14191 View details United Kingdom Communication / Marketing
    Ransomware cps-k12.org id14190 View details United States Education
    Ransomware inorde.com id14189 View details United States Services
    Ransomware tri-tech.us id14188 View details United States IT
    Ransomware kawasaki.eu id14186 View details Netherlands Manufacturing / Engineering
    Ransomware phdservices.net id14185 View details United States Services
    Ransomware cbt-gmbh.de id14184 View details Germany Services
    Ransomware www.towellengineering.net id14183 View details Oman Manufacturing / Engineering
    Ransomware www.parknfly.ca id14175 View details Canada Transportation / Travel
    Ransomware www.galgorm.com id14168 View details United Kingdom Hospitality / Food & Beverage / Tourism
    Ransomware www.pcipa.com id14167 View details China Services
    Ransomware www.bennettcurrie.co.nz id14164 View details New Zealand Services
    Ransomware plannedparenthood.org id14162 View details United States Communication / Marketing
    Ransomware gardenhomesmanagement.com id14160 View details United States Services
    Ransomware wilmingtoncc.org id14151 View details United States Communication / Marketing
    Ransomware www.amberbev.com id14146 View details Latvia Hospitality / Food & Beverage / Tourism
    Ransomware www.sanyo-bussan.co.jp id14145 View details Japan Communication / Marketing
    Ransomware www.pokerspa.it id14144 View details Italy Services
    Ransomware Removal.AI id14143 View details Philippines Communication / Marketing
    Ransomware www.sanyo-av.com id14140 View details Taiwan, Province of China Communication / Marketing
    Ransomware www.schneider.ch id14138 View details Switzerland Communication / Marketing
    Ransomware www.electriforce.com id14137 View details United States Services
    Ransomware ciot.com id14121 View details United States Communication / Marketing
    Ransomware www.nissan-dubai.com id14120 View details United Arab Emirates Manufacturing / Engineering
    Ransomware grant-associates.uk.com id14110 View details United Kingdom Construction / Real Estate
    Ransomware www.timortelecom.tl id14099 View details Timor-Leste Telecommunications
    Ransomware www.mineduc.gob.gt id14098 View details Guatemala Education
    Ransomware www.primariatm.ro id14097 View details Romania Communication / Marketing
    Ransomware www.suvacity.org id14096 View details Fiji Public Sector
    Ransomware www.iph-bet.fr id14094 View details France Manufacturing / Engineering
    Ransomware www.johnkellys.com id14093 View details United States Communication / Marketing
    Ransomware www.fenceauthority.com id14092 View details United States Public Sector
    Ransomware www.gruyeria.ch id14091 View details Switzerland Communication / Marketing
    Ransomware www.lfewines.com id14090 View details United States IT
    Ransomware www.citebd.org id14089 View details France Communication / Marketing
    Ransomware www.ramoncorripio.com id14088 View details Dominican Republic Communication / Marketing
    Ransomware www.iiitd.ac.in id14087 View details India IT
    Ransomware www.swinburne.edu id14086 View details Australia Communication / Marketing
    Ransomware glasstile.com id14062 View details United States Communication / Marketing
    Ransomware rainierarms.com id14053 View details United States Communication / Marketing
    Ransomware dpfza.gov.dj id14024 View details Djibouti Public Sector
    Ransomware www.polycohealthline.com id14023 View details United Kingdom Healthcare / Pharma
    Ransomware www.chwa.com.tw id14022 View details Taiwan, Province of China Services
    Ransomware www.alabamaplate.com id14005 View details United States Communication / Marketing
    Ransomware www.smarterp.com id14004 View details United States Services
    Ransomware htsusa.com id14003 View details United States IT
    Ransomware www.spie-tec.de id14002 View details Germany Communication / Marketing
    Ransomware prasarana.com.my id13986 View details Malaysia Communication / Marketing
    Ransomware saudi arabia(general secretariat of the military service council) id13941 View details Saudi Arabia Public Sector
    Ransomware capitalfund1.com id13920 View details United States Communication / Marketing
    Ransomware www.banhampoultry.co.uk id13918 View details United Kingdom Communication / Marketing
    Ransomware inlighten.net id13907 View details United States Services
    Ransomware blowerdempsay.com id13906 View details United States Services
    Ransomware imobesidade.com.br id13899 View details Brazil Construction / Real Estate
    Ransomware OSG.COM id13900 View details United States Energy
    Ransomware ccsdschools.com id13892 View details United States Education
    Ransomware www.albynhousing.org.uk id13877 View details United Kingdom Construction / Real Estate
    Ransomware www.lennartsfors.com id13876 View details Sweden Agriculture / Food
    Ransomware www.allanmcneill.co.nz id13875 View details New Zealand Services
    Ransomware www.martinswood.herts.sch.uk id13874 View details United Kingdom Education
    Ransomware www.gmchc.org id13873 View details United States Healthcare / Pharma
    Ransomware www.regentcaravans.com.au id13872 View details Australia Transportation / Travel
    Ransomware www.netconfig.co.za id13871 View details South Africa Services
    Ransomware www.manotherm.ie id13870 View details Ireland Communication / Marketing
    Ransomware nrcollecties.nl id13868 View details Netherlands Communication / Marketing
    Ransomware www.wmwmeyer.com id13866 View details United States Communication / Marketing
    Ransomware www.vinakom.com id13865 View details United States Communication / Marketing
    Ransomware www.patelco.org id13859 View details United States Finance / Legal / Insurance
    Ransomware ljglaw.com id13856 View details United States Finance / Legal / Insurance
    Ransomware www.aaconsultinc.com id13854 View details United States Services