Ransomware Group intelligence
Teamxxx
InactiveTrack Teamxxx with 19 published victims and 1 known leak locations in a single intelligence view.
Overview
Teamxxx is tracked by Breach House as a ransomware group with 19 published victims.
United States is currently the most targeted country in this dataset.
1 known leak locations are currently associated with this group.
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (1)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 1 | Onion service | Unknown | tp5cwh6d2b5hekcg6jlhoe6mawa7dlwiv47epvnfmzuaaur2dnaa3uid.onion |
Top Activity Sectors
No sector intelligence available.
Ransom Notes (0)
▼No ransom notes available for this group.
Tools Used
▼No tools used available.
YARA Rules (0)
▼No YARA rules available.
Indicators of Compromise (0)
▼No IoCs available for this group.
Negotiation Chats (0)
▼No negotiation chats available.
Research Sources
No external research sources linked yet.
Victims (19)
Search, filter and paginate the victim timeline for Teamxxx. Showing 1–19 of 19.
| Type | Target | Discovered | Country | Business Category | Intel Link |
|---|---|---|---|---|---|
| Ransomware | Scania.com id21526 View details | Sweden | Manufacturing / Engineering | ||
|
[AI generated] Scania is a leading Swedish company that specializes in the production of heavy trucks, buses, and other commercial vehicles. It is also known for manufacturing diesel engines for heavy vehicles and marine and industrial applications. Founded in 1891, Scania has numerous subsidiaries and operates in over 100 countries, providing innovative transportation solutions focused on sustainability and efficiency. |
|||||
| Ransomware | Intercommunityct.org id21118 View details | United States | Communication / Marketing | ||
|
[AI generated] Intercommunityct.org is associated with InterCommunity Inc., a community-based health organization in Connecticut that caters to the needs of local residents. The organization provides a range of comprehensive, high-quality, and easily accessible health services including mental health and addiction services, primary care, recovery and wellness programs. They focus on supporting individuals and families in the community to achieve their fullest potential through these services. |
|||||
| Ransomware | Websterhenry.com id21099 View details | United States | Other | ||
|
[AI generated] N/A |
|||||
| Ransomware | Nationwidecare.org id20818 View details | United Kingdom | Other | ||
|
[AI generated] "N/A" |
|||||
| Ransomware | etoscapitalasia.com id20769 View details | Hong Kong | Other | ||
|
etoscapitalasia.com is a Hong Kong-based entity in the Other sector, with no reliable public source in the provided search results describing its specific offerings or business model. Hong Kong is widely recognized as an international business and financial center, but the available results do not confirm the company’s exact line of activity. For cataloging purposes, the entity should be treated neutrally and identified only by the domain, sector, and jurisdiction supplied. It was listed as a ransomware victim associated with teamxxx. |
|||||
| Ransomware | aetoscapitalasia.com id20817 View details | Hong Kong | Other | ||
|
[AI generated] N/A |
|||||
| Ransomware | eterpauper id20565 View details | United States | Other | ||
|
eterpauper is a US-based entity categorized in the Other sector, indicating a business or organization outside a more specific industry label. Public listings describe it as operating in the United States and do not provide additional verified details about its products or services in the available source. In threat-intelligence catalogs, such entries are used to index organizations that appear on ransomware victim lists for situational awareness. eterpauper was listed as a ransomware victim associated with teamxxx. |
|||||
| Ransomware | peterpauper id20816 View details | United States | Other | ||
|
[AI generated] N/A |
|||||
| Ransomware | nteriorsgroup.ie id20564 View details | Ireland | Services | ||
|
The Interiors Group is a professional fit out services company based in Ireland, operating within the Services sector with over 20 years of experience delivering high-quality environments for diverse clients. The company specializes in providing premium fit out solutions, leveraging extensive expertise to create stunning and functional spaces for a wide range of customers. As a trusted provider in the Irish market, The Interiors Group is recognized for its commitment to quality and client satisfaction in the fit out industry. The company was listed as a ransomware victim associated with the threat actor teamxxx. |
|||||
| Ransomware | interiorsgroup.ie id20815 View details | Ireland | Services | ||
|
[AI generated] N/A |
|||||
| Ransomware | arvikhavn.no id20563 View details | Norway | Transportation / Travel | ||
|
arvikhavn.no appears to be a Norway-based transportation and travel entity associated with maritime and port-related operations, reflecting a sector tied to travel, logistics, and public-facing movement services. Publicly available references suggest the name aligns with the Norwegian port and urban-development context around Havn/By & Havn-style operations, but the domain itself does not provide enough visible detail here to confirm a more specific service profile. In threat-intelligence listings, it is categorized as a ransomware victim linked to the actor teamxxx. The listing does not by itself establish the scope, impact, or full circumstances of any incident. |
|||||
| Ransomware | narvikhavn.no id20814 View details | Norway | Transportation / Travel | ||
|
[AI generated] "ArvikHavn.no" is a Norwegian information service that focuses on the area around the Arvik Harbor. It provides news, reports, and valuable guidelines related to the harbor activities. The site caters to the interests of residents, businesses, tourists, and general visitors who need information about the area, including tourism, local events, fishing activities, and harbor regulations. |
|||||
| Ransomware | vent-medical.com id20562 View details | Czechia | Healthcare / Pharma | ||
|
vent-medical.com operates as a Healthcare and Pharma sector entity focused on respiratory care solutions, specifically designing and manufacturing advanced mechanical ventilators for critical care. The company, associated with the Czech region, dedicates its mission to enabling clinicians to provide world-class ventilation while reducing costs through high-performance, cost-effective mechanical ventilator technology. Its offerings include patented Swiss pneumatic technology ventilators such as Inspiration® and eVolution® for critical care applications. vent-medical.com was listed as a ransomware victim associated with the threat actor teamxxx. |
|||||
| Ransomware | event-medical.com id20813 View details | Czechia | Healthcare / Pharma | ||
|
[AI generated] Vent-Medical is a healthcare company specializing in respiratory care and artificial ventilation. They offer medical devices like nasal pillows, full-face masks and other respiratory equipment mainly for healthcare professionals and hospitals. Their mission is to improve patient care by offering high-quality ventilation solutions. |
|||||
| Ransomware | ationwidecare.org id20561 View details | United Kingdom | Other | ||
|
[AI generated] N/A |
|||||
| Ransomware | ebberrestaurantgroup.com id20560 View details | Hospitality / Food & Beverage / Tourism | |||
|
ebberrestaurantgroup.com is associated with a U.S.-based hospitality business in the food and beverage sector, a category that serves restaurants and related guest-facing services. The hospitality industry also spans tourism and travel-related offerings that support customer experiences across dining, recreation, and destination services. Publicly available references to the domain indicate a restaurant-group identity, but detailed company background and location-specific operations are not clearly disclosed in the available sources. It was listed as a ransomware victim associated with teamxxx. |
|||||
| Ransomware | webberrestaurantgroup.com id20812 View details | Hospitality / Food & Beverage / Tourism | |||
|
[AI generated] N/A |
|||||
| Ransomware | elkorpAg.com id20559 View details | Germany | Other | ||
|
elkorpAg.com appears to be a Germany-based organization in the broad Other sector, with public references indicating a corporate or brand-facing web presence under that domain. The available evidence does not clearly identify its specific products or services, so the listing should be treated as a neutral index entry rather than a detailed company profile. In threat-intelligence catalogs, such entries are used to organize victim-related disclosures by entity, sector, and country for easier analysis. It was listed as a ransomware victim associated with teamxxx. |
|||||
| Ransomware | BelkorpAg.com id20811 View details | Germany | Other | ||
|
[AI generated] N/A |
|||||