ransomhouse
First seen June 1, 2021Active224 claimed victims
The claims below are reproduced as posted by ransomhouse on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
RansomHouse is a double-extortion RaaS operation active since late 2021, attributed to the threat actor "Jolly Scorpius," targeting over 120 organizations across healthcare, finance, transportation, and government, recently upgrading to a multi-layered dual-key encryption architecture.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| The DGCX | February 7, 2023 | ransomware_live | — |
| Holovis | January 14, 2023 | ransomware_live | — |
| Trans Maldivian Airways | January 13, 2023 | ransomware_live | — |
| IMI Hydronic Engineering | January 12, 2023 | ransomware_live | — |
| Republic of Vanuatu | December 24, 2022 | ransomware_live | — |
| Strem Chemicals | December 22, 2022 | ransomware_live | — |
| Keralty | December 19, 2022 | ransomware_live | — |
| BRYCON Construction | December 5, 2022 | ransomware_live | — |
| SMB Solutions | December 5, 2022 | ransomware_live | — |
| Severn Glocon Group | December 5, 2022 | ransomware_live | — |
| ADATA Technology | December 5, 2022 | ransomware_live | — |
| ROFA INDUSTRIAL AUTOMATION | December 5, 2022 | ransomware_live | — |
| Carmen Copper Corporation | December 5, 2022 | ransomware_live | — |
| Ipca Laboratories | December 5, 2022 | ransomware_live | — |
| Fairfax - Crum & Forster | December 5, 2022 | ransomware_live | — |
| Advanced Micro Devices, Inc | December 5, 2022 | ransomware_live | — |
| 8 Italy Districts | August 9, 2022 | ransomware_live | — |
| Summit Care | July 11, 2022 | ransomware_live | — |
| SHOPRITE HOLDINGS LTD | June 14, 2022 | ransomware_live | — |
| AHS Aviation Handling Services GmbH | May 9, 2022 | ransomware_live | — |
| Dellner Couplers AB | May 9, 2022 | ransomware_live | — |
| Jefferson Credit Union | May 9, 2022 | ransomware_live | — |
| Saskatchewan Liquor and Gaming Authority | May 9, 2022 | ransomware_live | — |
| AMD (semiconductor giant) | June 1, 2021 | ransomware_live | — |
← NewerPage 3 of 3
Claim data from ransomware.live and RansomLook (CC BY 4.0).