Ransomware Group intelligence

Rhysida

Active

Track Rhysida with 313 published victims and 7 known leak locations in a single intelligence view.

BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Victims 313 Known published victims in this dataset
First discovered 2023-06-05 Earliest victim discovery date
Last discovered 2026-09-18 Latest victim discovery date
Inactive since 1 days Days since the latest known victim
Top country United States 139 victims
Known locations 7 Leak or negotiation infrastructure tracked

Overview

Rhysida is tracked by Breach House as a ransomware group with 313 published victims.

United States is currently the most targeted country in this dataset.

7 known leak locations are currently associated with this group.

Leak Status Distribution

  • Leaked 14 4.8%
  • Pending 277 94.9%
  • Deleted 1 0.3%

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (7)

    Label Type Availability Links
    Leak location 7 Onion service Up checked 3h ago rhysidaqho36b6i6mvpmy5di4ro5zglovtxixrirky6q3fgack7q5uyd.onion
    Leak location 4 Onion service Up checked 3h ago rhysidafc6lm7qa2mkiukbezh7zuth3i4wof4mh2audkymscjm6yegad.onion
    Leak location 1 Onion service Up checked 3h ago rhysidafohrhyy2aszi7bm32tnjat5xri65fopcxkdfxhi4tidsg7cad.onion
    Leak location 2 Onion service Up checked 3h ago rhysidafohrhyy2aszi7bm32tnjat5xri65fopcxkdfxhi4tidsg7cad.onion
    Leak location 3 Onion service Up checked 3h ago rhysidafohrhyy2aszi7bm32tnjat5xri65fopcxkdfxhi4tidsg7cad.onion
    Leak location 6 Onion service Down checked 3h ago rhysidaeoxtkejwuheks3a7htk4zn3dfuynt5mqw6oawlcx6kcxjdeyd.onion
    Leak location 5 Onion service Down checked 3h ago grhysidafc6lm7qa2mkiukbezh7zuth3i4wof4mh2audkymscjm6yegad.onion

    Top Activity Sectors (17)

    Victims (313)

    Search, filter and paginate the victim timeline for Rhysida. Showing 201–300 of 313.

    Type Target Discovered Country Business Category Intel Link Leak status
    Ransomware DRM Resources id13205 View details United States Other pending
    Ransomware Erivan Gecom Inc id13107 View details Canada Manufacturing / Engineering pending
    Ransomware Production Machine & Enterprises id13032 View details United States Communication / Marketing pending
    Ransomware CETOS Services id13031 View details Germany Services pending
    Ransomware Kiemle-Hankins id13030 View details United States Manufacturing / Engineering pending
    Ransomware California Rice Exchange id12932 View details United States Agriculture / Food pending
    Ransomware Rob's Whole Health Pharmacy id12783 View details Canada Healthcare / Pharma pending
    Ransomware ICC id12683 View details United States Communication / Marketing pending
    Ransomware ICC id33170 View details United States Communication / Marketing pending
    Ransomware ICC id33170 View details United States Communication / Marketing pending
    Ransomware ICC id12683 View details United States Communication / Marketing pending
    Ransomware Widdop & Co. id12615 View details United Kingdom Communication / Marketing pending
    Ransomware Surrey Place Healthcare & Rehabilitation id12557 View details United States Healthcare / Pharma leaked
    Ransomware Unimed Vales do Taquari e Rio Pardo id12392 View details Brazil Healthcare / Pharma pending
    Ransomware Lopez Hnos id12248 View details Argentina Manufacturing / Engineering pending
    Ransomware CDSHotels id12150 View details Italy Hospitality / Food & Beverage / Tourism pending
    Ransomware Ministerio de Desarrollo Local id12118 View details El Salvador Public Sector pending
    Ransomware Hernando County id11629 View details United States Public Sector pending
    Ransomware Oki Golf id11626 View details United States Communication / Marketing pending
    Ransomware Malaysian Industrial Development Finance id11535 View details Malaysia Finance / Legal / Insurance pending
    Ransomware Seven Seas Technology id11486 View details United Arab Emirates IT pending
    Ransomware El Debate id11378 View details Mexico Other pending
    Ransomware MarineMax id11295 View details United States Other pending
    Ransomware Kolbe Striping id11289 View details United States Other pending
    Ransomware Brooks Tropicals id11187 View details United States Other pending
    Ransomware Ann & Robert H. Lurie Children's Hospital of Chicago id10994 View details United States Healthcare / Pharma pending
    Ransomware Ironrock id10991 View details United States Other pending
    Ransomware ASP BasilicataASM MateraIRCCS CROB id10855 View details Italy Other pending
    Ransomware CNPC Peru S.A. id10634 View details Peru Other pending
    Ransomware Lee Spring id10418 View details United States Communication / Marketing pending
    Ransomware The Lutheran World Federation id10361 View details Switzerland NGOs / Associations pending
    Ransomware Aspiration Training id10342 View details United Kingdom Education pending
    Ransomware Abdali Hospital id10299 View details Jordan Healthcare / Pharma pending
    Ransomware Tshwane University of Technology id10298 View details South Africa IT pending
    Ransomware Kauno Technologijos Universitetas id10083 View details IT pending
    Ransomware Kauno Technologijos Universitetas id33171 View details IT pending
    Ransomware Kauno Technologijos Universitetas id33171 View details IT pending
    Ransomware Kauno Technologijos Universitetas id10083 View details IT pending
    Ransomware Grupo Jose Alves id9970 View details Other pending
    Ransomware Insomniac Games id9969 View details Finance / Legal / Insurance pending
    Ransomware Holding Slovenske elektarne id9951 View details Other pending
    Ransomware Hse id9950 View details Other pending
    Ransomware Qatar Racing and Equestrian Club id9949 View details Qatar Communication / Marketing pending
    Ransomware Travian Games id9922 View details Other deleted
    Ransomware Tcman id9920 View details Communication / Marketing pending
    Ransomware King Edward VII's Hospital id9778 View details Healthcare / Pharma pending
    Ransomware Bangkok University id9729 View details Thailand Education pending
    Ransomware NC Central University id9728 View details Education pending
    Ransomware Energy China id9705 View details China Energy pending
    Ransomware St Edmund's College & Prep School id9646 View details Education pending
    Ransomware British Library id9622 View details United Kingdom Other pending
    Ransomware MHM Health id9490 View details Healthcare / Pharma pending
    Ransomware Azienda Ospedaliera Universitaria Integrata di Verona id9476 View details Italy Healthcare / Pharma leaked
    Ransomware Indah Water Konsortium id9436 View details Malaysia Finance / Legal / Insurance pending
    Ransomware Mount St. Mary's Seminary id9410 View details Communication / Marketing pending
    Ransomware SMH Group id9391 View details Communication / Marketing pending
    Ransomware GO! Handelsschool Aalst id9345 View details Belgium Education pending
    Ransomware Northwest Eye Care Professionals id9085 View details Services pending
    Ransomware Southern Arkansas University id9001 View details Education pending
    Ransomware Camara Municipal de Gondomar id8976 View details Portugal Public Sector pending
    Ransomware General Directorate of Migration of the Dominican Republic id8952 View details Dominican Republic Public Sector pending
    Ransomware Federal University of Mato Grosso do Sul id8927 View details Brazil Public Sector pending
    Ransomware Istituto Prosperius id8859 View details Italy Communication / Marketing pending
    Ransomware Ministry Of Finance (Kuwait) id8771 View details Kuwait Public Sector pending
    Ransomware Ort Harmelin College of Engineering id8752 View details Education pending
    Ransomware Holon Institute of Technology id8732 View details Israel IT pending
    Ransomware Singing River Health System id8563 View details Healthcare / Pharma pending
    Ransomware Core Desktop id8562 View details Australia IT pending
    Ransomware IT-Center Syd id8556 View details Denmark Education pending
    Ransomware Prince George's County Public Schools id8292 View details Public Sector pending
    Ransomware Prospect Medical Holdings id8276 View details Healthcare / Pharma pending
    Ransomware Pierce College id8220 View details United States Education pending
    Ransomware Municipality of Ferrara id8151 View details Italy Public Sector pending
    Ransomware National Institute of Social Services for Retirees and Pensioners id8120 View details Argentina Education pending
    Ransomware Optimum Health Solutions id8090 View details Australia Healthcare / Pharma pending
    Ransomware Ramtha id8086 View details Other pending
    Ransomware United Tractors id8029 View details Indonesia Other pending
    Ransomware ESMOD id7959 View details Education pending
    Ransomware ESKA Erich Schweizer id7954 View details Germany Manufacturing / Engineering pending
    Ransomware Rouzbeh Educational Complex id7951 View details Iran, Islamic Republic of Education pending
    Ransomware University of Salerno id7453 View details Italy Education pending
    Ransomware University of the West of Scotland id7437 View details United Kingdom Education pending
    Ransomware Axity id7409 View details Other pending
    Ransomware Lumberton Independent School District id7367 View details Education pending
    Ransomware Stephen F. Austin State University id7320 View details United States Education pending
    Ransomware IRIS Informatique id7319 View details Transportation / Travel / Logistics pending
    Ransomware ICT-College id7318 View details Education pending
    Ransomware Caterham High School id7301 View details Education pending
    Ransomware The Big Life group id7280 View details Services pending
    Ransomware Citta Nuova id7196 View details Italy Other pending
    Ransomware Kenya Bureau Of Standards id7164 View details Kenya Communication / Marketing pending
    Ransomware Ayuntamiento de Arganda City Council id7107 View details Spain Public Sector pending
    Ransomware Hollywood Forever id7106 View details Other pending
    Ransomware BM GROUP POLYTEC S.p.A. id7103 View details Manufacturing / Engineering pending
    Ransomware Enfield Grammar School id7075 View details Education pending
    Ransomware Western National Group id7057 View details Construction / Real Estate pending
    Ransomware Alberta Newsprint id7056 View details Canada Communication / Marketing pending
    Ransomware iMatica id7035 View details Communication / Marketing pending
    Ransomware Hochschule Kaiserslautern id7033 View details Germany Education pending
    Ransomware Fassi Gru S.p.A. id7023 View details Communication / Marketing pending