ransomhouse
First seen June 1, 2021Active224 claimed victims
The claims below are reproduced as posted by ransomhouse on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
RansomHouse is a double-extortion RaaS operation active since late 2021, attributed to the threat actor "Jolly Scorpius," targeting over 120 organizations across healthcare, finance, transportation, and government, recently upgrading to a multi-layered dual-key encryption architecture.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| Associated Endocrinologists | January 31, 2025 | ransomware_live | — |
| Supreme Administrative Court of Bulgaria | January 27, 2025 | ransomware_live | — |
| Aishu, Eshoo | January 20, 2025 | ransomware_live | — |
| [EVIDENCE] Aishu, Eshoo | January 20, 2025 | ransomware_live | — |
| TUV India Pvt. Ltd. | January 3, 2025 | ransomware_live | — |
| INFiLED | November 1, 2024 | ransomware_live | — |
| Sabesp | October 17, 2024 | ransomware_live | — |
| GuangDong South Land pharmaceutical | October 10, 2024 | ransomware_live | — |
| Interior Metals | September 23, 2024 | ransomware_live | — |
| Fursan Travel | September 6, 2024 | ransomware_live | — |
| VOP CZ | August 18, 2024 | ransomware_live | — |
| [File Tree and Full Data Dump]VOP CZ | August 18, 2024 | ransomware_live | — |
| Jangho Group | August 11, 2024 | ransomware_live | — |
| Universite Paris Sud | August 11, 2024 | ransomware_live | — |
| [i2p-torrent]Jangho Group | August 11, 2024 | ransomware_live | — |
| Hellmich | August 10, 2024 | ransomware_live | — |
| Valisana | July 20, 2024 | ransomware_live | — |
| Sibanye-Stillwater | July 11, 2024 | ransomware_live | — |
| Infomedika | July 5, 2024 | ransomware_live | — |
| RiverSoft | June 30, 2024 | ransomware_live | — |
| Ronglian Group | June 29, 2024 | ransomware_live | — |
| KuiperCompagnons | June 24, 2024 | ransomware_live | — |
| Lake Washington Institute of Technology | June 15, 2024 | ransomware_live | — |
| Guaranteed Supply Company | June 11, 2024 | ransomware_live | — |
| Lago Group Spa | June 4, 2024 | ransomware_live | — |
| Creative Realities | June 2, 2024 | ransomware_live | — |
| Virum Apotek | June 1, 2024 | ransomware_live | — |
| Gestores Administrativos Reunidos | May 29, 2024 | ransomware_live | — |
| Francesco Parisi | May 29, 2024 | ransomware_live | — |
| Al-Karam Textile Mills Pvt | May 17, 2024 | ransomware_live | — |
| Greater Pittsburgh Orthopaedic Associates | May 14, 2024 | ransomware_live | — |
| United Urology Group | May 4, 2024 | ransomware_live | — |
| Crescent Point Energy | April 23, 2024 | ransomware_live | — |
| Isaacs Odinocki | April 23, 2024 | ransomware_live | — |
| Veren Inc and Crescent Point Energy | April 23, 2024 | ransomware_live | — |
| Berge Bulk | April 18, 2024 | ransomware_live | — |
| Army Welfare Trust | April 14, 2024 | ransomware_live | — |
| Cell C | April 11, 2024 | ransomware_live | — |
| J & N Stone | April 3, 2024 | ransomware_live | — |
| Royal Star & Garter | April 3, 2024 | ransomware_live | — |
| ABS-CBN Broadcasting | March 28, 2024 | ransomware_live | — |
| Hedbergs | March 28, 2024 | ransomware_live | — |
| Cressex Community School | March 25, 2024 | ransomware_live | — |
| Lopesan Hotels | March 22, 2024 | ransomware_live | — |
| Gantan Beauty Industry | March 20, 2024 | ransomware_live | — |
| Advance Press | March 17, 2024 | ransomware_live | — |
| STERCH - INTERNATIONAL s.r.o. | March 8, 2024 | ransomware_live | — |
| Hirsh Industries | February 24, 2024 | ransomware_live | — |
| HAL Allergy | February 18, 2024 | ransomware_live | — |
| GCA Nederland | February 16, 2024 | ransomware_live | — |
| Hong Kong College of Technology | February 13, 2024 | ransomware_live | — |
| Rapid Granulator | January 28, 2024 | ransomware_live | — |
| Hawbaker Engineering | January 24, 2024 | ransomware_live | — |
| HOE Pharmaceuticals Sdn Bhd | January 22, 2024 | ransomware_live | — |
| Webber International University | January 20, 2024 | ransomware_live | — |
| Shipleys LLP | January 5, 2024 | ransomware_live | — |
| Wangkanai Group | December 29, 2023 | ransomware_live | — |
| Dameron Hospital | December 13, 2023 | ransomware_live | — |
| Banco Promerica de la República Dominicana | December 8, 2023 | ransomware_live | — |
| Hbl Cpas, P.C. | November 25, 2023 | ransomware_live | — |
| ALPS Ltd | November 4, 2023 | ransomware_live | — |
| First Financial Security | October 19, 2023 | ransomware_live | — |
| Van Oirschot | September 30, 2023 | ransomware_live | — |
| Foursquare Healthcare | September 26, 2023 | ransomware_live | — |
| Warren General Hospital | September 23, 2023 | ransomware_live | — |
| Hawkins Delafield Wood | September 3, 2023 | ransomware_live | — |
| Radley and Co | August 29, 2023 | ransomware_live | — |
| First Resources | August 24, 2023 | ransomware_live | — |
| Bank Pembangunan Daerah Banten Tbk PT | July 7, 2023 | ransomware_live | — |
| Low Keng Huat | July 2, 2023 | ransomware_live | — |
| Prada Gayoso | June 15, 2023 | ransomware_live | — |
| Wison Engineering | June 14, 2023 | ransomware_live | — |
| SAC Finance | June 3, 2023 | ransomware_live | — |
| Mission Community Hospital | June 1, 2023 | ransomware_live | — |
| Customer Elation - Business Information | June 1, 2023 | ransomware_live | — |
| Roberto Verino Difusion | May 4, 2023 | ransomware_live | — |
| [i2p-torrent] Roberto Verino Difusion | May 4, 2023 | ransomware_live | — |
| AvidXchange | May 2, 2023 | ransomware_live | — |
| 100X and ALL Clients | April 30, 2023 | ransomware_live | — |
| Albany ENT & Allergy Services | April 28, 2023 | ransomware_live | — |
| HOT NEWS | April 26, 2023 | ransomware_live | — |
| Tranztec Solutions | April 26, 2023 | ransomware_live | — |
| OMT Officine Meccaniche Torino S.p.A. | April 26, 2023 | ransomware_live | — |
| Aero Engine Solution INC | April 3, 2023 | ransomware_live | — |
| Hospital Clinic de Barcelona | March 30, 2023 | ransomware_live | — |
| AV Industries | March 28, 2023 | ransomware_live | — |
| Tanbridge House School | March 27, 2023 | ransomware_live | — |
| Cospec Srl | March 24, 2023 | ransomware_live | — |
| Comune Taggia | March 23, 2023 | ransomware_live | — |
| Design CATAPULT | March 22, 2023 | ransomware_live | — |
| Indonesia Power | March 20, 2023 | ransomware_live | — |
| Faraday Technology | March 14, 2023 | ransomware_live | — |
| St. Kitts & Nevis | March 13, 2023 | ransomware_live | — |
| Delaware Life Insurance Company | March 11, 2023 | ransomware_live | — |
| E&S Heating & Ventilation Ltd | March 1, 2023 | ransomware_live | — |
| Audio Video | March 1, 2023 | ransomware_live | — |
| AESCULAPIUS Farmaceutici | February 23, 2023 | ransomware_live | — |
| Bond It | February 22, 2023 | ransomware_live | — |
| Hospital Service SpA | February 14, 2023 | ransomware_live | — |
| Jeffries Morris | February 9, 2023 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).