Ransomware Group intelligence

Ransomhub

Inactive

Track Ransomhub with 843 published victims and 3 known leak locations in a single intelligence view.

Victims 843 Known published victims in this dataset
First discovered 2024-02-10 Earliest victim discovery date
Last discovered 2025-03-31 Latest victim discovery date
Inactive since 474 days Days since the latest known victim
Top country United States 347 victims
Known locations 3 Leak or negotiation infrastructure tracked

Overview

Ransomhub is tracked by Breach House as a ransomware group with 843 published victims.

United States is currently the most targeted country in this dataset.

3 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (3)

    Label Type Availability Links
    Leak location 1 Onion service Unknown ransomxifxwc5eteopdobynonjctkxxvap77yqifu2emfbecgbqdw6qd.onion
    Leak location 2 Onion service Unknown ransomgxjnwmu5ceqwo2jrjssxpoicolmgismfpnslaixg3pgpe5qcad.onion
    Leak location 3 Onion service Unknown fpwwt67hm3mkt6hdavkfyqi42oo3vkaggvjj4kxdr2ivsbzyka5yr2qd.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (843)

    Search, filter and paginate the victim timeline for Ransomhub. Showing 801–843 of 843.

    Type Target Discovered Country Business Category Intel Link
    Ransomware CORIENT id12124 View details United States Other
    Ransomware [Published]Constelacion Savings and Credit Society id12123 View details El Salvador Finance / Legal / Insurance
    Ransomware HARMAN - CYNC SOLUTIONS client id12110 View details United States Services
    Ransomware CYNC SOLUTIONS - The unexpected target. id12073 View details United States Services
    Ransomware Mercatino S.r.l. https://www.mercatinousato.com id11716 View details Italy Other
    Ransomware FábricaInfo id11713 View details Brazil Other
    Ransomware Mercatino https://www.mercatinousato.com id11711 View details Italy Other
    Ransomware Empresa de energía del Bajo Putumayo id11699 View details Colombia Communication / Marketing
    Ransomware Change HealthCare - OPTUM Group - United HealthCare Group - FOR SALE id11697 View details United States Healthcare / Pharma
    Ransomware Grupo Cuevas id11689 View details Spain Other
    Ransomware Robeson County Sheriff's Office id11631 View details United States Public Sector
    Ransomware Baca County Feedyard, Inc id11565 View details United States Public Sector
    Ransomware Skyway Coach Lines and Shuttle Services -- skywaycoach.ca id11557 View details Canada Services
    Ransomware PHARMACY ETTORE FLORIO SNC - Online Pharmacy Italy id11552 View details Italy Healthcare / Pharma
    Ransomware Change HealthCare - OPTUM Group - United HealthCare Group id11539 View details United States Healthcare / Pharma
    Ransomware Carrozzeria Aretusa srl id11533 View details Italy Other
    Ransomware HCI Systems, Inc. id11532 View details United States Services
    Ransomware Better Accounting Solutions id11528 View details United States Finance / Legal / Insurance
    Ransomware Agencia Host id11520 View details Brazil Other
    Ransomware Constelacion Savings and Credit Society id11511 View details El Salvador Finance / Legal / Insurance
    Ransomware Avant IT Norway id11437 View details Norway Other
    Ransomware Woodsboro ISD id11369 View details United States Other
    Ransomware Power Generation Engineering and Services Company (PGESCo) - pgesco.com id11343 View details Egypt Manufacturing / Engineering
    Ransomware Industrial de Alimentos EYL SA id11335 View details Honduras Manufacturing / Engineering
    Ransomware La Pastina id11325 View details Brazil Other
    Ransomware McKim & Creed id11216 View details United States Other
    Ransomware SBM & Co id11215 View details United Kingdom Other
    Ransomware SBM & Co id11212 View details United Kingdom Other
    Ransomware Kovra id11207 View details Malaysia Other
    Ransomware Computan id11163 View details Canada Other
    Ransomware Scadea Solutions id11155 View details United States Services
    Ransomware DVT id11153 View details United Kingdom IT
    Ransomware Rekamy id11152 View details Malaysia Other
    Ransomware go4kora id11151 View details Tuvalu Other
    Ransomware SIEA id11140 View details Slovakia Other
    Ransomware Hozzify id11139 View details Colombia Other
    Ransomware Merchant ID id11129 View details Indonesia Other
    Ransomware SP Mundi id11128 View details Brazil Other
    Ransomware Shooting House id11049 View details Brazil Other
    Ransomware Benthanh Group id11027 View details Viet Nam Services
    Ransomware Headwater Companies LLC id10983 View details United States Services
    Ransomware AL SHEFA FARM id10965 View details Romania Agriculture / Food
    Ransomware YKP LTDA id10765 View details Brazil Services