weyhro
First seen March 6, 2025Active14 claimed victims
The claims below are reproduced as posted by weyhro on its own leak site. Such claims are frequently wrong or exaggerated, and are unverified. Organisations listed here have not been confirmed to have suffered a breach.
Listed organisation? Contact [email protected].
Profile
Weyhro is a data-extortion group (relying on data theft and leak threats without file encryption) that launched a Tor leak site in March 2025, focusing on manufacturing, financial services, and real estate sectors with victims in the US, Italy, and Canada.
Description from ransomware.live.
Claimed victims (as posted by the group — unverified)
| Victim (as posted) | Claimed on | Source | Press coverage |
|---|---|---|---|
| Chemtron RiverBend | August 10, 2025 | ransomware_live | — |
| Community Services of Missouri | August 10, 2025 | ransomware_live | — |
| Adriatic Glass & Mirrors | May 31, 2025 | ransomware_live | — |
| Terra Caribbean | May 30, 2025 | ransomware_live | — |
| Synergy Investments | May 26, 2025 | ransomware_live | — |
| 101 Arch Street | May 8, 2025 | ransomware_live | — |
| Valens Bank/Pay/Exchange | March 31, 2025 | ransomware_live | — |
| Montgomery Little & Soran, PC | March 21, 2025 | ransomware_live | — |
| McMillan James Equipment Company (MJEC) | March 19, 2025 | ransomware_live | — |
| Fragola S.p.A | February 26, 2025 | ransomware_live | — |
| Avantune Corporation | February 22, 2025 | ransomware_live | — |
| Central Electropolishing Company, Inc. | February 8, 2025 | ransomware_live | — |
| MBI International, Inc. | January 15, 2025 | ransomware_live | — |
| Resnick & Caffrey, PC | December 12, 2024 | ransomware_live | — |
Claim data from ransomware.live and RansomLook (CC BY 4.0).