hive
First seen August 14, 2021Active208 claimed victims
The claims below are reproduced as posted by hive on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
Hive is a strain of ransomware that was first discovered in June 2021. Hive was designed to be used by Ransomware-as-a-service providers, to enable novice cyber-criminals to launch ransomware attacks on healthcare providers, energy providers, charities, and retailers across the globe. In 2022 there was a switch from GoLang to Rust.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| R C Stevens Construction | January 16, 2023 | ransomware_live | — |
| G.W. Becker | January 11, 2023 | ransomware_live | — |
| Consulate Health Care | January 6, 2023 | ransomware_live | — |
| Centro Médico Virgen De La Caridad | December 31, 2022 | ransomware_live | — |
| Camst Group | December 30, 2022 | ransomware_live | — |
| MHMR Authority Of Brazos Valley | December 22, 2022 | ransomware_live | — |
| Alvaria | December 21, 2022 | ransomware_live | — |
| Stolle Machinery | December 20, 2022 | ransomware_live | — |
| JAKKS Pacific Inc | December 20, 2022 | ransomware_live | — |
| City Of Huntsville, Texas | December 20, 2022 | ransomware_live | — |
| Dixons Allerton Academy | December 20, 2022 | ransomware_live | — |
| Innovative Education Management | December 20, 2022 | ransomware_live | — |
| North Idaho College | December 20, 2022 | ransomware_live | — |
| Interface | December 20, 2022 | ransomware_live | — |
| Expand Group | December 14, 2022 | ransomware_live | — |
| Mark-Taylor | December 14, 2022 | ransomware_live | — |
| KNOX College | December 10, 2022 | ransomware_live | — |
| INTERSPORT France | December 6, 2022 | ransomware_live | — |
| Guilford College | November 25, 2022 | ransomware_live | — |
| Norman Public Schools | November 23, 2022 | ransomware_live | — |
| LCMH | November 15, 2022 | ransomware_live | — |
| Hydro-Gear & Agri-Fab | November 15, 2022 | ransomware_live | — |
| MCCROSSAN | November 10, 2022 | ransomware_live | — |
| APM Terminals | November 8, 2022 | ransomware_live | — |
| Cornwell Quality Tools | November 7, 2022 | ransomware_live | — |
| ROYAL GATEWAY CO., LTD | November 7, 2022 | ransomware_live | — |
| TCQ | November 7, 2022 | ransomware_live | — |
| Landi Renzo | November 3, 2022 | ransomware_live | — |
| Tata Power | October 24, 2022 | ransomware_live | — |
| Município De Loures | October 9, 2022 | ransomware_live | — |
| Mansfield Independent School District (MISD) | September 30, 2022 | ransomware_live | — |
| JANMARINI | September 27, 2022 | ransomware_live | — |
| Hendry Regional Medical Center | September 27, 2022 | ransomware_live | — |
| Southwell, Inc. | September 27, 2022 | ransomware_live | — |
| TSMTU | September 26, 2022 | ransomware_live | — |
| GFG | September 26, 2022 | ransomware_live | — |
| TAKAO-UK | September 26, 2022 | ransomware_live | — |
| BHARBERT | September 21, 2022 | ransomware_live | — |
| Sigmund Software | September 20, 2022 | ransomware_live | — |
| New York Racing Association | September 19, 2022 | ransomware_live | — |
| FONTAINEBLEAU | September 15, 2022 | ransomware_live | — |
| Bell Technical Solutions | September 15, 2022 | ransomware_live | — |
| California-Oregon Telecommunications Company | September 6, 2022 | ransomware_live | — |
| Eurocell | September 2, 2022 | ransomware_live | — |
| NCG Medical | August 31, 2022 | ransomware_live | — |
| Altice International | August 25, 2022 | ransomware_live | — |
| Baton Rouge General | August 24, 2022 | ransomware_live | — |
| Reiter Affiliated Companies | August 19, 2022 | ransomware_live | — |
| WOOTTON ACADEMY TRUST | August 18, 2022 | ransomware_live | — |
| TriState HVAC Equipment | August 14, 2022 | ransomware_live | — |
| ENN Group | August 4, 2022 | ransomware_live | — |
| Weidmueller | July 27, 2022 | ransomware_live | — |
| CIMEX | July 27, 2022 | ransomware_live | — |
| Empress EMS | July 26, 2022 | ransomware_live | — |
| LaVan & Neidenberg | July 20, 2022 | ransomware_live | — |
| Carrolls Irish Gifts | July 16, 2022 | ransomware_live | — |
| RALLYE-DOM | July 14, 2022 | ransomware_live | — |
| CITY-FURNITURE | July 14, 2022 | ransomware_live | — |
| FMT | July 14, 2022 | ransomware_live | — |
| Behavioral Health System | July 14, 2022 | ransomware_live | — |
| Authentic Brands Group | July 13, 2022 | ransomware_live | — |
| GROUP4 AUSTRALIA | July 13, 2022 | ransomware_live | — |
| APETITO | July 13, 2022 | ransomware_live | — |
| Exela Technologies | July 13, 2022 | ransomware_live | — |
| AdaptIT | July 13, 2022 | ransomware_live | — |
| RTVCM | July 13, 2022 | ransomware_live | — |
| SANDO | July 13, 2022 | ransomware_live | — |
| NETWORK4CARS | July 4, 2022 | ransomware_live | — |
| WWSTEELE | July 4, 2022 | ransomware_live | — |
| Massy Distribution Limited | July 4, 2022 | ransomware_live | — |
| YURTICIKARGO | July 4, 2022 | ransomware_live | — |
| KDE | July 4, 2022 | ransomware_live | — |
| AUM | July 4, 2022 | ransomware_live | — |
| CAN.COM | July 4, 2022 | ransomware_live | — |
| MHIRE | July 4, 2022 | ransomware_live | — |
| DIRECTFERRIES | July 4, 2022 | ransomware_live | — |
| Hamlyns Limited | July 4, 2022 | ransomware_live | — |
| Yurtiçi Kargo | July 4, 2022 | ransomware_live | — |
| AG | July 3, 2022 | ransomware_live | — |
| Rocky | July 2, 2022 | ransomware_live | — |
| Diskriter | June 28, 2022 | ransomware_live | — |
| SuperAlloy Industrial Co., Ltd. | June 28, 2022 | ransomware_live | — |
| Arte Radiotelevisivo Argentino (Artear) | June 23, 2022 | ransomware_live | — |
| Alphapointe | June 23, 2022 | ransomware_live | — |
| Goodman Campbell Brain & Spine | June 8, 2022 | ransomware_live | — |
| Caracol TV | May 30, 2022 | ransomware_live | — |
| G&P Projects And Systems S.A. | May 30, 2022 | ransomware_live | — |
| XEIAD | May 28, 2022 | ransomware_live | — |
| Travira Air | May 28, 2022 | ransomware_live | — |
| ChemStation International | May 26, 2022 | ransomware_live | — |
| Guardian Fueling Technologies | May 26, 2022 | ransomware_live | — |
| SOUCY | May 26, 2022 | ransomware_live | — |
| Yachiyo Of America | May 25, 2022 | ransomware_live | — |
| IGHQ | May 25, 2022 | ransomware_live | — |
| NUAIRE | May 25, 2022 | ransomware_live | — |
| GUARDFUEL | May 25, 2022 | ransomware_live | — |
| RateGain | May 24, 2022 | ransomware_live | — |
| SPORTPLAZA | May 20, 2022 | ransomware_live | — |
| Tri-Ko | May 19, 2022 | ransomware_live | — |
| CARTEGRAPH | May 19, 2022 | ransomware_live | — |
Page 1 of 3Older →
Claim data from ransomware.live and RansomLook (CC BY 4.0).