ransomhub
First seen February 10, 2024Active841 claimed victims
The claims below are reproduced as posted by ransomhub on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
The group emerged in mid-February 2024 and has already listed several organizations as alleged victims of their attacks, resulting from extortion through encryption and data leaks. The announcement of the sale of the new Ransomware-as-a-Service (RaaS) by RansomHub was published on one of the Russian-origin forums used by cybercrime to advertise malicious services, known as RAMP4U (or RAMP). A user with the nickname and persona of 'koley' announced the affiliate program on February 2, 2024.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| jackpotjunction.com | March 31, 2025 | ransomware_live | — |
| delta-life.com | March 30, 2025 | ransomware_live | — |
| intellioan.com | March 30, 2025 | ransomware_live | — |
| phaus.us&phakr.com&phabodysystems.com | March 28, 2025 | ransomware_live | — |
| www.bassi.it | March 27, 2025 | ransomware_live | — |
| europtec.com | March 27, 2025 | ransomware_live | — |
| conterra.com | March 26, 2025 | ransomware_live | — |
| www.fkm-elemente.de | March 26, 2025 | ransomware_live | — |
| brattenelectrictn.com | March 26, 2025 | ransomware_live | — |
| www.allmilmoe.com | March 26, 2025 | ransomware_live | — |
| www.afnigc.ca | March 25, 2025 | ransomware_live | — |
| www.hongthongrice.com | March 25, 2025 | ransomware_live | — |
| texascompressionservices.com | March 24, 2025 | ransomware_live | — |
| mnm.hu | March 24, 2025 | ransomware_live | — |
| cisd.org | March 24, 2025 | ransomware_live | — |
| technicare.com | March 24, 2025 | ransomware_live | — |
| OMLTD.CO.JP | March 24, 2025 | ransomware_live | — |
| www.rivaldt.com | March 24, 2025 | ransomware_live | — |
| www.solidworld.it | March 24, 2025 | ransomware_live | — |
| www.avalonapparel.com | March 21, 2025 | ransomware_live | — |
| www.core-1.com | March 21, 2025 | ransomware_live | — |
| www.allstarhealthcaresolutions.com | March 21, 2025 | ransomware_live | — |
| www.sinkdirect.com | March 21, 2025 | ransomware_live | — |
| www.elizajennings.org | March 21, 2025 | ransomware_live | — |
| www.ahmadiyya.ca | March 21, 2025 | ransomware_live | — |
| www.abmenviro.ca | March 21, 2025 | ransomware_live | — |
| www.engines.man.eu | March 21, 2025 | ransomware_live | — |
| www.gestionquintessence.com | March 21, 2025 | ransomware_live | — |
| www.scpautomation.com | March 21, 2025 | ransomware_live | — |
| gbsn.com.br | March 20, 2025 | ransomware_live | — |
| www.cormidom.com.do | March 18, 2025 | ransomware_live | — |
| ccktech.com | March 17, 2025 | ransomware_live | — |
| www.baxterlaboratories.com | March 17, 2025 | ransomware_live | — |
| controlledair.com | March 17, 2025 | ransomware_live | — |
| www.mslglobalexp.com | March 17, 2025 | ransomware_live | — |
| www.ameda.com | March 15, 2025 | ransomware_live | — |
| www.solinst.com | March 15, 2025 | ransomware_live | — |
| jennyyoo.com | March 14, 2025 | ransomware_live | — |
| idcconstruction.com | March 14, 2025 | ransomware_live | — |
| www.DSelectrical.com | March 14, 2025 | ransomware_live | — |
| dtrglaw.com | March 13, 2025 | ransomware_live | — |
| www.raymond.in | March 13, 2025 | ransomware_live | — |
| www.parklandmanufacturing.com | March 13, 2025 | ransomware_live | — |
| www.creativelogisticservices.com | March 12, 2025 | ransomware_live | — |
| www.carolinaac.com | March 12, 2025 | ransomware_live | — |
| www.janvier-labs.com | March 10, 2025 | ransomware_live | — |
| www.oneupinnovations.com | March 10, 2025 | ransomware_live | — |
| www.ripplejunction.com | March 10, 2025 | ransomware_live | — |
| www.gcsnet.com | March 9, 2025 | ransomware_live | — |
| www.lions-online.org | March 8, 2025 | ransomware_live | — |
| www.mododoc.com | March 8, 2025 | ransomware_live | — |
| www.garbinc.com | March 8, 2025 | ransomware_live | — |
| srmg.com.au | March 7, 2025 | ransomware_live | — |
| wheats.com | March 7, 2025 | ransomware_live | — |
| total-ps.com | March 7, 2025 | ransomware_live | — |
| www.njcalwe.com | March 7, 2025 | ransomware_live | — |
| www.argentosc.com | March 7, 2025 | ransomware_live | — |
| lovesac.com | March 6, 2025 | ransomware_live | — |
| hickorylaw.com | March 6, 2025 | ransomware_live | — |
| mitchellmcnutt.com | March 6, 2025 | ransomware_live | — |
| www.esquirebrands.com | March 6, 2025 | ransomware_live | — |
| www.broadmoormethodist.org | March 6, 2025 | ransomware_live | — |
| www.convention.qc.ca | March 5, 2025 | ransomware_live | — |
| www.hinton.ca | March 5, 2025 | ransomware_live | — |
| www.portlandschools.org | March 5, 2025 | ransomware_live | — |
| goencon.com | March 4, 2025 | ransomware_live | — |
| www.sunsweet.com | March 4, 2025 | ransomware_live | — |
| andreyevengineering.com | March 3, 2025 | ransomware_live | — |
| familychc.com | March 3, 2025 | ransomware_live | — |
| oneill.com | March 3, 2025 | ransomware_live | — |
| www.solventacentroamerica.com | March 3, 2025 | ransomware_live | — |
| www.jhayber.com | March 2, 2025 | ransomware_live | — |
| www.journeyoilfield.net | February 28, 2025 | ransomware_live | — |
| www.casinoessentials.com | February 28, 2025 | ransomware_live | — |
| dsrny.com | February 28, 2025 | ransomware_live | — |
| www.dcarosolutions.com | February 28, 2025 | ransomware_live | — |
| www.accessfinanceonline.com | February 28, 2025 | ransomware_live | — |
| www.exemplar.com | February 28, 2025 | ransomware_live | — |
| www.nasonptc.com | February 27, 2025 | ransomware_live | — |
| teamwass.com | February 27, 2025 | ransomware_live | — |
| www.obrienavocats.qc.ca | February 26, 2025 | ransomware_live | — |
| www.newburghhealthcarecenter.com | February 26, 2025 | ransomware_live | — |
| www.kppm.com | February 26, 2025 | ransomware_live | — |
| www.envirolabsinc.com | February 26, 2025 | ransomware_live | — |
| www.townofbourne.com | February 26, 2025 | ransomware_live | — |
| www.georgehay.co.uk | February 26, 2025 | ransomware_live | — |
| hgmlegal.com | February 25, 2025 | ransomware_live | — |
| www.wpisd.com | February 25, 2025 | ransomware_live | — |
| www.avalon-hotel.com | February 25, 2025 | ransomware_live | — |
| www.centersheetmetal.com | February 25, 2025 | ransomware_live | — |
| www.hexosys.com | February 25, 2025 | ransomware_live | — |
| denbyco.co.uk | February 24, 2025 | ransomware_live | — |
| www.famcomachine.com | February 23, 2025 | ransomware_live | — |
| www.amerasphalt.com | February 23, 2025 | ransomware_live | — |
| compactmould.com | February 22, 2025 | ransomware_live | — |
| www.visualisation.one | February 22, 2025 | ransomware_live | — |
| www.fla-esq.com | February 21, 2025 | ransomware_live | — |
| headcount.com | February 21, 2025 | ransomware_live | — |
| guadeloupeformation.com | February 21, 2025 | ransomware_live | — |
| www.electro-fusion.com | February 21, 2025 | ransomware_live | — |
Page 1 of 9Older →
Claim data from ransomware.live and RansomLook (CC BY 4.0).