hive
First seen August 14, 2021Active208 claimed victims
The claims below are reproduced as posted by hive on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
Hive is a strain of ransomware that was first discovered in June 2021. Hive was designed to be used by Ransomware-as-a-service providers, to enable novice cyber-criminals to launch ransomware attacks on healthcare providers, energy providers, charities, and retailers across the globe. In 2022 there was a switch from GoLang to Rust.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| EIITNET | May 19, 2022 | ransomware_live | — |
| Faw-Volkswagen Automobile Co., Ltd. | May 4, 2022 | ransomware_live | — |
| Monterey Mechanical Co. | April 29, 2022 | ransomware_live | — |
| Attica Group | April 28, 2022 | ransomware_live | — |
| SSK Ingeniería Y Construcción S.A.C. | April 26, 2022 | ransomware_live | — |
| MILLS GROUP | April 18, 2022 | ransomware_live | — |
| FCCH | April 7, 2022 | ransomware_live | — |
| PHC | March 29, 2022 | ransomware_live | — |
| Konradin Mediengruppe GmbH | March 26, 2022 | ransomware_live | — |
| Pollmann | March 25, 2022 | ransomware_live | — |
| KONECTA SERVICIOS ADMINISTRATIVOS Y TECNOLOGICOS S.L. SUCURSAL ARGENTINA | March 24, 2022 | ransomware_live | — |
| Passero Associates | March 24, 2022 | ransomware_live | — |
| Wibag Bau Ag | March 23, 2022 | ransomware_live | — |
| Instituto De Gesto Estratégica De Sade Do Distrito Federal | March 23, 2022 | ransomware_live | — |
| Asphalion | March 23, 2022 | ransomware_live | — |
| Banco Caribe | March 23, 2022 | ransomware_live | — |
| Polynt Group | March 22, 2022 | ransomware_live | — |
| Centerline Communication Llc | March 22, 2022 | ransomware_live | — |
| Dayton T. Brown, Inc | March 22, 2022 | ransomware_live | — |
| Centurion Stone | March 22, 2022 | ransomware_live | — |
| Rotoplas | March 22, 2022 | ransomware_live | — |
| School District Of Janesville | March 22, 2022 | ransomware_live | — |
| UCSI University | March 22, 2022 | ransomware_live | — |
| Ministry For Foreign Affairs Of The Republic Of Indonesia | March 22, 2022 | ransomware_live | — |
| GomeA | March 22, 2022 | ransomware_live | — |
| Otto Dörner GmbH & Co. KG | March 22, 2022 | ransomware_live | — |
| NSM Insurance Group | March 18, 2022 | ransomware_live | — |
| PAN AMERICAN ENERGY S.L. SUCURSAL ARGENTINA | March 4, 2022 | ransomware_live | — |
| ITS InfoCom | February 25, 2022 | ransomware_live | — |
| EBM | February 25, 2022 | ransomware_live | — |
| Doner | February 25, 2022 | ransomware_live | — |
| Powerhouse1 | February 25, 2022 | ransomware_live | — |
| Friedrich | February 25, 2022 | ransomware_live | — |
| Emil Frey | February 25, 2022 | ransomware_live | — |
| Eurocoin Interactive B.V. | February 25, 2022 | ransomware_live | — |
| Rodonaves Transportes E Encomendas Ltda | February 25, 2022 | ransomware_live | — |
| Hyundai Samho Heavy Industries Co.,Ltd. (South Korea) | February 25, 2022 | ransomware_live | — |
| Centre D'Odontologia Integrada Miret-Puig | February 25, 2022 | ransomware_live | — |
| Institute For Systems And Robotics (Isr-Lisboa | February 25, 2022 | ransomware_live | — |
| Drake & Scull International PJSC | February 25, 2022 | ransomware_live | — |
| Supernus Pharmaceuticals, NASDAQ: SUPN | February 25, 2022 | ransomware_live | — |
| Shanghai Huizhong Automotive Manufacturing Co., Ltd. | February 25, 2022 | ransomware_live | — |
| Tite - Live Belgique | February 25, 2022 | ransomware_live | — |
| Ningbo Dechang Electric Machinery Manufacturing Co., Ltd. | February 25, 2022 | ransomware_live | — |
| Guts Superpols Co., Ltd. | February 25, 2022 | ransomware_live | — |
| Rocky's Ace Hardware | February 25, 2022 | ransomware_live | — |
| BERMAN SOBIN GROSS & DARBY | February 25, 2022 | ransomware_live | — |
| MAS & Coronis Health | February 25, 2022 | ransomware_live | — |
| Sit'N Sleep | February 25, 2022 | ransomware_live | — |
| Palacios & Asociados | February 25, 2022 | ransomware_live | — |
| Steven L. Sugarman & Associates | February 25, 2022 | ransomware_live | — |
| ANTHONY CATALFANO INTERIORS | January 25, 2022 | ransomware_live | — |
| Advanced Geosciences | January 25, 2022 | ransomware_live | — |
| Bohlke International Airways | January 25, 2022 | ransomware_live | — |
| Brakke Asbestsanering BV | January 25, 2022 | ransomware_live | — |
| Brinkman Turkey Farms | January 25, 2022 | ransomware_live | — |
| Claro Colombia | January 25, 2022 | ransomware_live | — |
| ConForm Automotive | January 25, 2022 | ransomware_live | — |
| Creative Liquid Coatings INC | January 25, 2022 | ransomware_live | — |
| Erik Buell Racing | January 25, 2022 | ransomware_live | — |
| Family Christian Health Center | January 25, 2022 | ransomware_live | — |
| Florida Sugar Cane League | January 25, 2022 | ransomware_live | — |
| Greenway Health | January 25, 2022 | ransomware_live | — |
| Haselden Construction | January 25, 2022 | ransomware_live | — |
| Johnson Memorial Health | January 25, 2022 | ransomware_live | — |
| Macquarie Health Corporation | January 25, 2022 | ransomware_live | — |
| Marten Transport | January 25, 2022 | ransomware_live | — |
| Mele Printing | January 25, 2022 | ransomware_live | — |
| Montour School District | January 25, 2022 | ransomware_live | — |
| Northern Financial Services | January 25, 2022 | ransomware_live | — |
| Powell Transportation | January 25, 2022 | ransomware_live | — |
| Résidence Les Chtaigniers | January 25, 2022 | ransomware_live | — |
| Ryan Companies | January 25, 2022 | ransomware_live | — |
| Sadbhav Engineering Limited | January 25, 2022 | ransomware_live | — |
| Sardinha Family Trust | January 25, 2022 | ransomware_live | — |
| Schuldnerberatung Ostfriesland e. V. | January 25, 2022 | ransomware_live | — |
| Sutterfield Financial Group | January 25, 2022 | ransomware_live | — |
| The British Columbia Institute Of Technology | January 25, 2022 | ransomware_live | — |
| Unita Locale Socio | January 25, 2022 | ransomware_live | — |
| Vermeer Southeast | January 25, 2022 | ransomware_live | — |
| RIVADIS | January 20, 2022 | ransomware_live | — |
| UNICRED | January 20, 2022 | ransomware_live | — |
| Ezz Steel | January 9, 2022 | ransomware_live | — |
| Metro.Us | December 28, 2021 | ransomware_live | — |
| Madix Inc | December 20, 2021 | ransomware_live | — |
| WOLSEY | December 20, 2021 | ransomware_live | — |
| Raveco | December 18, 2021 | ransomware_live | — |
| GryphTech | December 18, 2021 | ransomware_live | — |
| MediaMarkt | December 18, 2021 | ransomware_live | — |
| Grupo5 | December 18, 2021 | ransomware_live | — |
| APR Supply | December 18, 2021 | ransomware_live | — |
| XacBank | December 18, 2021 | ransomware_live | — |
| WAMGROUP | December 18, 2021 | ransomware_live | — |
| Aria Systems | December 18, 2021 | ransomware_live | — |
| EMCO | December 18, 2021 | ransomware_live | — |
| KBM UK | December 18, 2021 | ransomware_live | — |
| GK.NO | December 18, 2021 | ransomware_live | — |
| Ospray Video | December 18, 2021 | ransomware_live | — |
| W.H. Stovall | December 18, 2021 | ransomware_live | — |
| Net Ninjas | December 18, 2021 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).