Ransomware Group intelligence

Ransomhub

Inactive

Track Ransomhub with 843 published victims and 3 known leak locations in a single intelligence view.

Victims 843 Known published victims in this dataset
First discovered 2024-02-10 Earliest victim discovery date
Last discovered 2025-03-31 Latest victim discovery date
Inactive since 474 days Days since the latest known victim
Top country United States 347 victims
Known locations 3 Leak or negotiation infrastructure tracked

Overview

Ransomhub is tracked by Breach House as a ransomware group with 843 published victims.

United States is currently the most targeted country in this dataset.

3 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (3)

    Label Type Availability Links
    Leak location 1 Onion service Unknown ransomxifxwc5eteopdobynonjctkxxvap77yqifu2emfbecgbqdw6qd.onion
    Leak location 2 Onion service Unknown ransomgxjnwmu5ceqwo2jrjssxpoicolmgismfpnslaixg3pgpe5qcad.onion
    Leak location 3 Onion service Unknown fpwwt67hm3mkt6hdavkfyqi42oo3vkaggvjj4kxdr2ivsbzyka5yr2qd.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (843)

    Search, filter and paginate the victim timeline for Ransomhub. Showing 601–700 of 843.

    Type Target Discovered Country Business Category Intel Link
    Ransomware www.isnart.it id13850 View details Italy Transportation / Travel
    Ransomware www.atwoodcherny.com id13849 View details United States Finance / Legal / Insurance
    Ransomware police.praca.gov.pl id13827 View details Poland Communication / Marketing
    Ransomware bedford.k12.oh.us id13792 View details United States Other
    Ransomware naturalcuriosities.com id13785 View details United States Other
    Ransomware Jeffersoncountyclerk.org id13783 View details United States Public Sector
    Ransomware alliuminteriors.co.nz id13779 View details New Zealand Other
    Ransomware lmgroup.com id13762 View details United States Services
    Ransomware dhcgrp.com id13750 View details United States Healthcare / Pharma
    Ransomware pierrediamonds.com.au id13746 View details Australia Other
    Ransomware golfoy.com id13745 View details India Other
    Ransomware inv-dar.com id13744 View details Saudi Arabia Other
    Ransomware rationalenterprise.com id13742 View details United States Communication / Marketing
    Ransomware modernceramics.com id13740 View details United States Other
    Ransomware hudsoncivil.com.au id13729 View details Australia Other
    Ransomware www.jgsummit.com.ph id13728 View details Philippines Other
    Ransomware amplicon.com id13726 View details United Kingdom Other
    Ransomware kempe.com.au id13724 View details Australia Other
    Ransomware infotexim.pe id13723 View details Peru Other
    Ransomware www.sobha.com id13706 View details India Other
    Ransomware hlbpr.com id13683 View details Communication / Marketing
    Ransomware www.normandydiesel.fr id13672 View details France Other
    Ransomware www.bahia-principe.com id13671 View details Spain Communication / Marketing
    Ransomware retaildatallc.com id13670 View details United States Retail / E-commerce
    Ransomware mcdowallaffleck.com.au id13656 View details Australia Other
    Ransomware effinghamschools.com id13655 View details United States Education
    Ransomware wgma.org id13642 View details United States Other
    Ransomware biggreenegg.com id13641 View details United States Other
    Ransomware nydj.com id13640 View details United States Other
    Ransomware www.pharm-int.com id13639 View details United States Other
    Ransomware verwarmingheyndrickx.be id13618 View details Belgium Other
    Ransomware welevelup.com id13608 View details United States Other
    Ransomware udch.in.th id13606 View details Thailand Other
    Ransomware labor-koblenz.de id13599 View details Germany Other
    Ransomware www.neurologicalinstitute.com id13582 View details United States Education
    Ransomware www.whittakersystem.com id13581 View details United States Other
    Ransomware www.castelligroup.com id13580 View details Italy Services
    Ransomware ach.co.th id13561 View details Thailand Other
    Ransomware bpjaguar.com id13560 View details Mexico Other
    Ransomware oficina.oficinadasfinancas.com.br id13559 View details Brazil Other
    Ransomware mrhme.org id13555 View details United States Other
    Ransomware panitchlaw.com id13550 View details United States Finance / Legal / Insurance
    Ransomware cminsulation.com id13549 View details United States Other
    Ransomware baytoti.com id13548 View details Saudi Arabia Other
    Ransomware sigmacontrol.eu id13493 View details Netherlands Other
    Ransomware www.byzan.com id13488 View details India Other
    Ransomware www.garudafood.com id13456 View details Indonesia Agriculture / Food
    Ransomware www.kumagaigumi.co.jp id13452 View details Japan Other
    Ransomware www.glowfm.nl id13426 View details Netherlands Other
    Ransomware www.erma-rtmo.it id13418 View details Italy Other
    Ransomware metalfrio.com.br id13417 View details Brazil Manufacturing / Engineering
    Ransomware www.newcastlewa.gov id13416 View details United States Other
    Ransomware pgd.pl id13415 View details Poland Other
    Ransomware www.hlbpr.com id13405 View details Communication / Marketing
    Ransomware ceopag.com.br / ceofood.com.br id13378 View details Brazil Agriculture / Food
    Ransomware www.benchinternational.com id13376 View details Services
    Ransomware www.cameronhodges.com id13375 View details Other
    Ransomware www.baiminstitute.org id13366 View details United States Education
    Ransomware eni.com&mellitahog.ly id13340 View details Italy Other
    Ransomware www.zepter.de id13329 View details Germany Other
    Ransomware www.riteaid.com id13328 View details Other
    Ransomware www.lynchaluminum.com id13316 View details Other
    Ransomware www.eurostrand.de id13315 View details Germany Other
    Ransomware www.netavent.dk id13314 View details Denmark Other
    Ransomware www.bfcsolutions.com id13310 View details Services
    Ransomware baiminstitute.org id13280 View details United States Education
    Ransomware hcri.edu id13258 View details United States Other
    Ransomware midamea.comAuction id13248 View details Other
    Ransomware aedifica.com id13245 View details Canada Other
    Ransomware www.swcs-inc.com id13243 View details United States Services
    Ransomware www.daesangamerica.com id13237 View details United States Other
    Ransomware www.finecopneumatica.com id13236 View details Italy Other
    Ransomware www.hauptmann.at id13235 View details Austria Other
    Ransomware www.sfmedical.de id13231 View details Germany Healthcare / Pharma
    Ransomware floridahealth.gov id13224 View details United States Healthcare / Pharma
    Ransomware www.nttdata.ro id13223 View details Romania Other
    Ransomware Spandex.com id13198 View details Australia Other
    Ransomware midamea.com id13197 View details Korea, Republic of Other
    Ransomware equinocioplay.com.br id13190 View details Brazil Other
    Ransomware www.cipl.org.in id13189 View details India Other
    Ransomware www.mangimifusco.it id13184 View details Italy Other
    Ransomware www.cloudeurope.it id13183 View details Italy IT
    Ransomware coca-cola.com - Myanmar office id13182 View details Myanmar Other
    Ransomware daniellegroup.com id13181 View details United Kingdom Services
    Ransomware www.harrisranchbeef.com id13146 View details United States Other
    Ransomware multi-wing.com id13141 View details Denmark Other
    Ransomware bitzsoftwares.com.br id13140 View details Brazil IT
    Ransomware www.sicoob.com.br id13139 View details Brazil Other
    Ransomware www.gbricambi.it [UPDATE] id13088 View details Other
    Ransomware www.clevo.com.twDisclose id13087 View details Other
    Ransomware www.invisio.com id13074 View details Denmark Other
    Ransomware www.gbricambi.it id13059 View details Italy Other
    Ransomware www.racalacoustics.com [UPDATE] id13052 View details Other
    Ransomware www.liderit.es id13051 View details Spain Other
    Ransomware parlorenzo.com id13042 View details Spain Other
    Ransomware www.domainatcleveland.com id13041 View details United States Other
    Ransomware www.racalacoustics.com id13006 View details United Kingdom Other
    Ransomware www.clevo.com.tw<UPDATED> id12971 View details Other
    Ransomware www.novabitsrl.it id12964 View details Italy Other
    Ransomware smicusa.com id12963 View details United States Other