Ransomware Group intelligence

Ransomhub

Inactive

Track Ransomhub with 843 published victims and 3 known leak locations in a single intelligence view.

Victims 843 Known published victims in this dataset
First discovered 2024-02-10 Earliest victim discovery date
Last discovered 2025-03-31 Latest victim discovery date
Inactive since 474 days Days since the latest known victim
Top country United States 347 victims
Known locations 3 Leak or negotiation infrastructure tracked

Overview

Ransomhub is tracked by Breach House as a ransomware group with 843 published victims.

United States is currently the most targeted country in this dataset.

3 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (3)

    Label Type Availability Links
    Leak location 1 Onion service Unknown ransomxifxwc5eteopdobynonjctkxxvap77yqifu2emfbecgbqdw6qd.onion
    Leak location 2 Onion service Unknown ransomgxjnwmu5ceqwo2jrjssxpoicolmgismfpnslaixg3pgpe5qcad.onion
    Leak location 3 Onion service Unknown fpwwt67hm3mkt6hdavkfyqi42oo3vkaggvjj4kxdr2ivsbzyka5yr2qd.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (843)

    Search, filter and paginate the victim timeline for Ransomhub. Showing 701–800 of 843.

    Type Target Discovered Country Business Category Intel Link
    Ransomware www.ham.org.br id12962 View details Brazil Other
    Ransomware www.ugrocapital.com id12946 View details India Other
    Ransomware www.crezit.com id12886 View details Kenya Other
    Ransomware www.ykp.com.br id12879 View details Brazil Other
    Ransomware www.al-shefafarm.ro id12878 View details Romania Agriculture / Food
    Ransomware www.headwaterco.com id12877 View details Other
    Ransomware www.shootinghouse.com.br id12876 View details Brazil Other
    Ransomware www.merchant.id id12875 View details Indonesia Other
    Ransomware www.spmundi.com.br id12874 View details Brazil Other
    Ransomware www.siea.sk id12873 View details Slovakia Other
    Ransomware www.dvttechnologyltd.com id12872 View details IT
    Ransomware www.rekamy.com id12871 View details Other
    Ransomware www.go4kora.tv id12870 View details Tuvalu Other
    Ransomware www.scadea.com id12869 View details Other
    Ransomware www.computan.com id12868 View details Other
    Ransomware www.kovra.com.my id12867 View details Malaysia Other
    Ransomware www.lapastina.com id12866 View details Other
    Ransomware www.industrialdealimentos.com id12865 View details Guatemala Manufacturing / Engineering
    Ransomware www.wisd.net id12864 View details Other
    Ransomware www.pgesco.com id12863 View details Other
    Ransomware www.avantit.no id12862 View details Norway Other
    Ransomware www.constelacion.com.sv id12861 View details El Salvador Other
    Ransomware www.agenciahost.com id12860 View details Other
    Ransomware www.aretusamilano.it id12859 View details Italy Other
    Ransomware www.betteraccountingsolutions.com id12858 View details Finance / Legal / Insurance
    Ransomware www.hcisystems.net id12857 View details Services
    Ransomware www.nrshealthcare.com id12856 View details Healthcare / Pharma
    Ransomware www.farmaciaflorio.com id12855 View details Agriculture / Food
    Ransomware www.skywaycoach.ca id12854 View details Canada Other
    Ransomware www.cyncsolutions.com id12853 View details Services
    Ransomware www.robesoncoso.org id12852 View details Other
    Ransomware www.eebpsa.com.co id12851 View details Colombia Other
    Ransomware www.grupocuevas.es id12850 View details Spain Other
    Ransomware www.fabricainfo.com id12849 View details Other
    Ransomware nepa.gov.af&dfr.gov.af id12848 View details Afghanistan Other
    Ransomware www.harmanrealtors.com id12847 View details United States Other
    Ransomware www.europeanprof.es id12846 View details Spain Communication / Marketing
    Ransomware www.designintoto.com.au id12845 View details Australia Other
    Ransomware www.precisiontimesystems.com id12844 View details Communication / Marketing
    Ransomware www.jutebag.co.uk id12843 View details United Kingdom Other
    Ransomware www.polaris.es id12842 View details Spain Other
    Ransomware www.extraco.ae id12841 View details United Arab Emirates Other
    Ransomware www.thaayakam.co.uk id12840 View details United Kingdom Other
    Ransomware www.kamojou.co.za id12839 View details South Africa Other
    Ransomware www.portosaofrancisco.com.br id12838 View details Brazil Other
    Ransomware www.lalengineering.com id12837 View details Manufacturing / Engineering
    Ransomware iseta.fr id12836 View details France Other
    Ransomware www.confins.com.br id12835 View details Brazil Other
    Ransomware www.eucatex.com.br id12834 View details Brazil Other
    Ransomware www.rockymountainsales.com id12833 View details Retail / E-commerce
    Ransomware www.neodesha.org id12832 View details Other
    Ransomware www.oriux.com id12831 View details Other
    Ransomware www.chuoss.co.jp id12830 View details Japan Other
    Ransomware www.houstonwastesolutions.com id12829 View details Services
    Ransomware www.mataderodegijon.es id12828 View details Spain Other
    Ransomware www.brittanyhorne.com id12827 View details Other
    Ransomware www.throttleup.io id12826 View details Other
    Ransomware www.acslabtest.com id12825 View details Other
    Ransomware www.christies.com id12824 View details Other
    Ransomware www.psgbdvor.rs id12823 View details Serbia Other
    Ransomware www.bjurholm.se id12822 View details Sweden Other
    Ransomware SIAED.it id12821 View details Italy Other
    Ransomware Frontier.com id12820 View details Other
    Ransomware www.clevo.com.tw id12819 View details Tuvalu Other
    Ransomware www.eastshoresound.com id12799 View details United States Other
    Ransomware Frontier id12797 View details United States Other
    Ransomware Bjurholms kommun id12765 View details Sweden Other
    Ransomware PSG BANATSKI DVOR D.O.O. NOVI SAD (SERBIA) id12746 View details Serbia Other
    Ransomware American Clinical Solutions(acslabtest.com)auctioning id12745 View details United States Healthcare / Pharma
    Ransomware SIAED.it - HOSTER/DEV FOR ITALY BIGGEST BANKS id12744 View details Italy Finance / Legal / Insurance
    Ransomware Christies Auction House - christies.com id12743 View details United States Other
    Ransomware iseta.fr (institut des Sciences de l'Environnement et des Territoires d'Annecy) id12684 View details France Other
    Ransomware ThrottleUp id12654 View details United States Other
    Ransomware Brittany Horne id12651 View details United States Other
    Ransomware Matadero de Gijón - Biogas energy plant - mataderodegijon.es id12639 View details Spain Energy
    Ransomware American Clinical Solutions(acslabtest.com) id12638 View details United States Healthcare / Pharma
    Ransomware ORIUX: Experts in Mobility id12637 View details United States Other
    Ransomware Houston Waste Solutions id12600 View details United States Services
    Ransomware OKUANT - okuant.com id12585 View details Spain Other
    Ransomware Chuo System Service Co.,Ltd id12575 View details Japan Services
    Ransomware East Shore Sound id12574 View details United States Other
    Ransomware City of Neodesha id12547 View details United States Public Sector
    Ransomware Rocky Mountain Sales id12539 View details United States Retail / E-commerce
    Ransomware 500gb/www.confins.com.br/10kk/BR/Come to chat or we will attack you again. id12535 View details Brazil Other
    Ransomware eucatex.com.br id12534 View details Brazil Other
    Ransomware LPDB KUMKM LPDB.ID/LPDB.GO.ID id12533 View details Indonesia Other
    Ransomware Administração do Porto de São Francisco do Sul (APSFS) id12476 View details Brazil Other
    Ransomware Kamo Jou Trading id12376 View details South Africa Other
    Ransomware lalengineering id12362 View details United States Manufacturing / Engineering
    Ransomware Thaayakam LTD id12334 View details United Kingdom Services
    Ransomware NRS Healthcare id12331 View details United Kingdom Healthcare / Pharma
    Ransomware The Islamic Emirat of Afghanistan National Environmental Protection Agency id12284 View details Afghanistan Communication / Marketing
    Ransomware Universidad Nacional Autónoma de México id12267 View details Mexico Other
    Ransomware extraco.ae id12242 View details United Arab Emirates Other
    Ransomware Mellitah Oil & Gas / Enigas Ly (Eni Electricity, Oil & Gas) id12191 View details Italy Energy
    Ransomware polaris-SOLUCIONES TECNOLÓGICAS PARA EMPRESAS -- polaris.es id12167 View details Spain Communication / Marketing
    Ransomware Precision Time Systems id12149 View details United States Communication / Marketing
    Ransomware Jutebag id12148 View details United Kingdom Other
    Ransomware Design Intoto id12137 View details Australia Other
    Ransomware EUROPEANPROF - Expertos en Seguridad y Altura - id12126 View details Spain Communication / Marketing