Ransomware Group intelligence

Threeam

Active

Track Threeam with 100 published victims and 2 known leak locations in a single intelligence view.

BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Victims 100 Known published victims in this dataset
First discovered 2023-09-14 Earliest victim discovery date
Last discovered 2026-10-09 Latest victim discovery date
Inactive since 7 days Days since the latest known victim
Top country United States 42 victims
Known locations 2 Leak or negotiation infrastructure tracked

Overview

Threeam is tracked by Breach House as a ransomware group with 100 published victims.

United States is currently the most targeted country in this dataset.

2 known leak locations are currently associated with this group.

Leak Status Distribution

  • Leaked 34 34.0%
  • Pending 66 66.0%
  • Deleted 0 0.0%

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (2)

    Label Type Availability Links
    Leak location 2 Onion service Up checked 4h ago threeam7fj33rv5twe5ll7gcrp3kkyyt6ez5stssixnuwh4v3csxdwqd.onion
    Leak location 1 Onion service Down checked 4h ago threeamkelxicjsaf2czjyz2lc4q3ngqkxhhlexyfcp2o6raw4rphyad.onion

    Top Activity Sectors (17)

    Victims (100)

    Search, filter and paginate the victim timeline for Threeam. Showing 1–100 of 100.

    Type Target Discovered Country Business Category Intel Link Leak status
    Ransomware fleetworksinc.com id33614 View details United States — pending
    Ransomware safescaffolding.net id33249 View details United Kingdom Construction / Real Estate pending
    Ransomware coosalud.com id33250 View details Colombia Healthcare / Pharma pending
    Ransomware pistonespersan.com.ar id33251 View details Argentina Manufacturing / Engineering pending
    Ransomware midwestbit.com id33252 View details United States IT pending
    Ransomware apexus.com id33253 View details United States Services pending
    Ransomware bhn-expertise.com id33254 View details Germany Services pending
    Ransomware stjames.wa.edu.au id33255 View details Australia Education pending
    Ransomware newmantractor.com id33021 View details United States Manufacturing / Engineering leaked
    Ransomware wmdn.net id32305 View details Moldova, Republic of IT leaked
    Ransomware mecasem.org id31910 View details Mexico — leaked
    Ransomware clubonecasino.com id31356 View details United States Finance / Legal / Insurance leaked
    Ransomware tws-tac.net id30658 View details Germany Other pending
    Ransomware guardianbarrierservices.com id30105 View details United Kingdom Transportation / Travel / Logistics leaked
    Ransomware acemacon.org id30067 View details Mexico NGOs / Associations pending
    Ransomware jetmachprod.com id29836 View details Manufacturing / Engineering leaked
    Ransomware jastrebarsko.hr id29837 View details Croatia Public Sector leaked
    Ransomware palmero.com id29838 View details IT leaked
    Ransomware insamani.com.ar id29839 View details Argentina Retail / E-commerce leaked
    Ransomware bsynchro.com id29840 View details Germany IT leaked
    Ransomware molinoscabodi.com.ar id29841 View details Argentina Agriculture / Food leaked
    Ransomware ws.com.br id29842 View details Brazil IT leaked
    Ransomware consultic.be id29843 View details Belgium IT leaked
    Ransomware amc.org.au id29844 View details Australia Healthcare / Pharma leaked
    Ransomware agroexportavocados.com id29845 View details Mexico Agriculture / Food leaked
    Ransomware hoplongtech.com id29846 View details Viet Nam IT leaked
    Ransomware mgrlaw.com id29847 View details United States Finance / Legal / Insurance leaked
    Ransomware wyomingcountyny.gov id28361 View details United States Public Sector leaked
    Ransomware sequoiadental.com id28362 View details United States Healthcare / Pharma leaked
    Ransomware townofnorwell.net id28363 View details United States Public Sector leaked
    Ransomware curedentalbeltontx.com id28364 View details United States Healthcare / Pharma leaked
    Ransomware austinplasticandreconstructivesurgery.com id28365 View details United States Healthcare / Pharma leaked
    Ransomware hsjlawyers.com id28366 View details Finance / Legal / Insurance leaked
    Ransomware bun.nl id28367 View details Netherlands Construction / Real Estate leaked
    Ransomware aceforwarding.com id28368 View details Transportation / Travel / Logistics leaked
    Ransomware ic-controls.com id28369 View details Germany Manufacturing / Engineering leaked
    Ransomware kkp.law id20226 View details United States Finance / Legal / Insurance leaked
    Ransomware iss-na.com id20225 View details United States Manufacturing / Engineering pending
    Ransomware icgad.com id20224 View details United States Construction / Real Estate leaked
    Ransomware dbhcares.com id20223 View details United States Healthcare / Pharma leaked
    Ransomware icmtx.com id20222 View details United States Communication / Marketing leaked
    Ransomware jastreet.com id20221 View details United States Communication / Marketing leaked
    Ransomware neffendorfblockercpa.com id20220 View details United States Communication / Marketing leaked
    Ransomware gosvt.com id20219 View details United States IT leaked
    Ransomware vazirilaw.com id20218 View details United States Finance / Legal / Insurance pending
    Ransomware leonardo.com id17514 View details Italy Communication / Marketing pending
    Ransomware sehma.com id17428 View details Germany Healthcare / Pharma pending
    Ransomware corehandf.com id17239 View details United States Healthcare / Pharma pending
    Ransomware soitinlaine.fi id17011 View details Finland Other pending
    Ransomware anwsd.org id16662 View details United States Education pending
    Ransomware hapsch.de id16552 View details Germany Healthcare / Pharma pending
    Ransomware kuritaamerica.com id16147 View details Japan Manufacturing / Engineering pending
    Ransomware hobokennj.gov id15863 View details United States Public Sector pending
    Ransomware midstatesindustrial.com id15286 View details United States Manufacturing / Engineering pending
    Ransomware anuenterprise.com.au id15083 View details Australia Communication / Marketing pending
    Ransomware inhometexas.com id15082 View details United States Communication / Marketing leaked
    Ransomware caillau.com.br id15081 View details Brazil Other pending
    Ransomware sandray.com id15080 View details United States Communication / Marketing pending
    Ransomware mpspromotions.com id15079 View details Australia Communication / Marketing pending
    Ransomware freedomhomecare.net id15078 View details United States Healthcare / Pharma pending
    Ransomware carolinaarthritis.com id14944 View details United States Other pending
    Ransomware oklahomasleepinstitute.com id14721 View details United States Education pending
    Ransomware verco.co.uk id14538 View details United Kingdom Energy pending
    Ransomware carlile-group.com id14528 View details United Kingdom Construction / Real Estate pending
    Ransomware sacredheart.southwark.sch.uk id14527 View details United Kingdom Education pending
    Ransomware mctas.org.au id14526 View details Australia Communication / Marketing pending
    Ransomware mnpl.com.sg id14525 View details Singapore Manufacturing / Engineering pending
    Ransomware gestiriego.com id14349 View details Spain Agriculture / Food pending
    Ransomware brunswickhospitalcenter.org id14269 View details United States Healthcare / Pharma pending
    Ransomware thermalsolutionsllc.com id12573 View details United States Services pending
    Ransomware escriba.com.br id12572 View details Brazil Communication / Marketing pending
    Ransomware compagniedephalsbourg.com id11660 View details France Construction / Real Estate pending
    Ransomware kh.org id11357 View details United States Healthcare / Pharma pending
    Ransomware moore-tibbits.co.uk id10995 View details United Kingdom Finance / Legal / Insurance pending
    Ransomware mtmrobotics.com id10937 View details United States Manufacturing / Engineering pending
    Ransomware abcor.com.au id10936 View details Australia Manufacturing / Engineering pending
    Ransomware doneff.com id10920 View details United States Construction / Real Estate pending
    Ransomware garonproducts.com id10804 View details United States Communication / Marketing pending
    Ransomware etsolutions.com.mx id10644 View details Mexico Services pending
    Ransomware thecsi.com id10413 View details Canada Public Sector pending
    Ransomware pharrusa.com id10412 View details United States Retail / E-commerce pending
    Ransomware woodruffenterprises.com id9980 View details Communication / Marketing pending
    Ransomware shareharris.com id9979 View details United States Finance / Legal / Insurance pending
    Ransomware syrtech.com id9872 View details IT pending
    Ransomware ussignandmill.com id9857 View details Energy pending
    Ransomware carrellblanton.com id9720 View details Finance / Legal / Insurance pending
    Ransomware ds-granit.fr id9665 View details France Communication / Marketing pending
    Ransomware nealbrothers.co.uk id9615 View details Romania Communication / Marketing pending
    Ransomware maniland.co.uk id9236 View details United Kingdom Construction / Real Estate pending
    Ransomware claimtek.com id9231 View details Healthcare / Pharma pending
    Ransomware simmonsequip.com id8880 View details Other pending
    Ransomware haciendazorita.com id8737 View details Hospitality / Food & Beverage / Tourism pending
    Ransomware fi-tech.com id8736 View details IT pending
    Ransomware neuraxpharm.com id8733 View details Other pending
    Ransomware wdgroup.com.my id8629 View details Malaysia Construction / Real Estate pending
    Ransomware pvbfabs.com id8628 View details United States Manufacturing / Engineering pending
    Ransomware intechims.com id8627 View details United States IT pending
    Ransomware zero-pointorganics.com id8626 View details United States Hospitality / Food & Beverage / Tourism pending
    Ransomware visitingphysiciansnetwork.com id8625 View details United States Telecommunications pending
    Ransomware clearwaterlandscape.com id8624 View details United States Construction / Real Estate pending