ransomhouse
First seen June 1, 2021Active207 claimed victims
The claims below are reproduced as posted by ransomhouse on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
RansomHouse is a double-extortion RaaS operation active since late 2021, attributed to the threat actor "Jolly Scorpius," targeting over 120 organizations across healthcare, finance, transportation, and government, recently upgrading to a multi-layered dual-key encryption architecture.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| Sibanye-Stillwater | July 11, 2024 | ransomware_live | — |
| Infomedika | July 5, 2024 | ransomware_live | — |
| RiverSoft | June 30, 2024 | ransomware_live | — |
| Ronglian Group | June 29, 2024 | ransomware_live | — |
| KuiperCompagnons | June 24, 2024 | ransomware_live | — |
| Lake Washington Institute of Technology | June 15, 2024 | ransomware_live | — |
| Guaranteed Supply Company | June 11, 2024 | ransomware_live | — |
| Lago Group Spa | June 4, 2024 | ransomware_live | — |
| Creative Realities | June 2, 2024 | ransomware_live | — |
| Virum Apotek | June 1, 2024 | ransomware_live | — |
| Gestores Administrativos Reunidos | May 29, 2024 | ransomware_live | — |
| Francesco Parisi | May 29, 2024 | ransomware_live | — |
| Al-Karam Textile Mills Pvt | May 17, 2024 | ransomware_live | — |
| Greater Pittsburgh Orthopaedic Associates | May 14, 2024 | ransomware_live | — |
| United Urology Group | May 4, 2024 | ransomware_live | — |
| Crescent Point Energy | April 23, 2024 | ransomware_live | — |
| Isaacs Odinocki | April 23, 2024 | ransomware_live | — |
| Veren Inc and Crescent Point Energy | April 23, 2024 | ransomware_live | — |
| Berge Bulk | April 18, 2024 | ransomware_live | — |
| Army Welfare Trust | April 14, 2024 | ransomware_live | — |
| Cell C | April 11, 2024 | ransomware_live | — |
| J & N Stone | April 3, 2024 | ransomware_live | — |
| Royal Star & Garter | April 3, 2024 | ransomware_live | — |
| ABS-CBN Broadcasting | March 28, 2024 | ransomware_live | — |
| Hedbergs | March 28, 2024 | ransomware_live | — |
| Cressex Community School | March 25, 2024 | ransomware_live | — |
| Lopesan Hotels | March 22, 2024 | ransomware_live | — |
| Gantan Beauty Industry | March 20, 2024 | ransomware_live | — |
| Advance Press | March 17, 2024 | ransomware_live | — |
| STERCH - INTERNATIONAL s.r.o. | March 8, 2024 | ransomware_live | — |
| Hirsh Industries | February 24, 2024 | ransomware_live | — |
| HAL Allergy | February 18, 2024 | ransomware_live | — |
| GCA Nederland | February 16, 2024 | ransomware_live | — |
| Hong Kong College of Technology | February 13, 2024 | ransomware_live | — |
| Rapid Granulator | January 28, 2024 | ransomware_live | — |
| Hawbaker Engineering | January 24, 2024 | ransomware_live | — |
| HOE Pharmaceuticals Sdn Bhd | January 22, 2024 | ransomware_live | — |
| Webber International University | January 20, 2024 | ransomware_live | — |
| Shipleys LLP | January 5, 2024 | ransomware_live | — |
| Wangkanai Group | December 29, 2023 | ransomware_live | — |
| Dameron Hospital | December 13, 2023 | ransomware_live | — |
| Banco Promerica de la República Dominicana | December 8, 2023 | ransomware_live | — |
| Hbl Cpas, P.C. | November 25, 2023 | ransomware_live | — |
| ALPS Ltd | November 4, 2023 | ransomware_live | — |
| First Financial Security | October 19, 2023 | ransomware_live | — |
| Van Oirschot | September 30, 2023 | ransomware_live | — |
| Foursquare Healthcare | September 26, 2023 | ransomware_live | — |
| Warren General Hospital | September 23, 2023 | ransomware_live | — |
| Hawkins Delafield Wood | September 3, 2023 | ransomware_live | — |
| Radley and Co | August 29, 2023 | ransomware_live | — |
| First Resources | August 24, 2023 | ransomware_live | — |
| Bank Pembangunan Daerah Banten Tbk PT | July 7, 2023 | ransomware_live | — |
| Low Keng Huat | July 2, 2023 | ransomware_live | — |
| Prada Gayoso | June 15, 2023 | ransomware_live | — |
| Wison Engineering | June 14, 2023 | ransomware_live | — |
| SAC Finance | June 3, 2023 | ransomware_live | — |
| Mission Community Hospital | June 1, 2023 | ransomware_live | — |
| Customer Elation - Business Information | June 1, 2023 | ransomware_live | — |
| Roberto Verino Difusion | May 4, 2023 | ransomware_live | — |
| [i2p-torrent] Roberto Verino Difusion | May 4, 2023 | ransomware_live | — |
| AvidXchange | May 2, 2023 | ransomware_live | — |
| 100X and ALL Clients | April 30, 2023 | ransomware_live | — |
| Albany ENT & Allergy Services | April 28, 2023 | ransomware_live | — |
| HOT NEWS | April 26, 2023 | ransomware_live | — |
| Tranztec Solutions | April 26, 2023 | ransomware_live | — |
| OMT Officine Meccaniche Torino S.p.A. | April 26, 2023 | ransomware_live | — |
| Aero Engine Solution INC | April 3, 2023 | ransomware_live | — |
| Hospital Clinic de Barcelona | March 30, 2023 | ransomware_live | — |
| AV Industries | March 28, 2023 | ransomware_live | — |
| Tanbridge House School | March 27, 2023 | ransomware_live | — |
| Cospec Srl | March 24, 2023 | ransomware_live | — |
| Comune Taggia | March 23, 2023 | ransomware_live | — |
| Design CATAPULT | March 22, 2023 | ransomware_live | — |
| Indonesia Power | March 20, 2023 | ransomware_live | — |
| Faraday Technology | March 14, 2023 | ransomware_live | — |
| St. Kitts & Nevis | March 13, 2023 | ransomware_live | — |
| Delaware Life Insurance Company | March 11, 2023 | ransomware_live | — |
| E&S Heating & Ventilation Ltd | March 1, 2023 | ransomware_live | — |
| Audio Video | March 1, 2023 | ransomware_live | — |
| AESCULAPIUS Farmaceutici | February 23, 2023 | ransomware_live | — |
| Bond It | February 22, 2023 | ransomware_live | — |
| Hospital Service SpA | February 14, 2023 | ransomware_live | — |
| Jeffries Morris | February 9, 2023 | ransomware_live | — |
| The DGCX | February 7, 2023 | ransomware_live | — |
| Holovis | January 14, 2023 | ransomware_live | — |
| Trans Maldivian Airways | January 13, 2023 | ransomware_live | — |
| IMI Hydronic Engineering | January 12, 2023 | ransomware_live | — |
| Republic of Vanuatu | December 24, 2022 | ransomware_live | — |
| Strem Chemicals | December 22, 2022 | ransomware_live | — |
| Keralty | December 19, 2022 | ransomware_live | — |
| BRYCON Construction | December 5, 2022 | ransomware_live | — |
| SMB Solutions | December 5, 2022 | ransomware_live | — |
| Severn Glocon Group | December 5, 2022 | ransomware_live | — |
| ADATA Technology | December 5, 2022 | ransomware_live | — |
| ROFA INDUSTRIAL AUTOMATION | December 5, 2022 | ransomware_live | — |
| Carmen Copper Corporation | December 5, 2022 | ransomware_live | — |
| Ipca Laboratories | December 5, 2022 | ransomware_live | — |
| Fairfax - Crum & Forster | December 5, 2022 | ransomware_live | — |
| Advanced Micro Devices, Inc | December 5, 2022 | ransomware_live | — |
| 8 Italy Districts | August 9, 2022 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).