Ransomware Group intelligence

Blacksuit

Inactive

Track Blacksuit with 184 published victims and 1 known leak locations in a single intelligence view.

Victims 184 Known published victims in this dataset
First discovered 2023-06-12 Earliest victim discovery date
Last discovered 2025-06-02 Latest victim discovery date
Inactive since 421 days Days since the latest known victim
Top country United States 115 victims
Known locations 1 Leak or negotiation infrastructure tracked

Overview

Blacksuit is tracked by Breach House as a ransomware group with 184 published victims.

United States is currently the most targeted country in this dataset.

1 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (1)

    Label Type Availability Links
    Leak location 1 Onion service Unknown weg7sdx54bevnvulapqu6bpzwztryeflq3s23tegbmnhkbpqz637f2yd.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (184)

    Search, filter and paginate the victim timeline for Blacksuit. Showing 1–100 of 184.

    Type Target Discovered Country Business Category Intel Link
    Ransomware Kansas City Aviation Center id20389 View details United States Transportation / Travel / Logistics
    Ransomware metromont.com id20308 View details United States Construction / Real Estate
    Ransomware Inns of Aurora id20307 View details United States Other
    Ransomware Gloucester County Virginia id20021 View details United States Public Sector
    Ransomware Pacific Metallurgical id19335 View details United States Manufacturing / Engineering
    Ransomware The Fortune Society id19334 View details United States NGOs / Associations
    Ransomware Massachusetts Municipal Wholesale Electric id18966 View details United States Public Sector
    Ransomware dapope.com id18803 View details United States Other
    Ransomware Town of Orangeville id18802 View details Canada Public Sector
    Ransomware midwest.com id15985 View details United States Services
    Ransomware copresi.es id15927 View details Spain Communication / Marketing
    Ransomware JTEKT NORTH AMERICA id15717 View details United States Other
    Ransomware Grandview School District id15687 View details United States Education
    Ransomware co.cullman.al.us id15600 View details United States Public Sector
    Ransomware eastgateauto.com id15405 View details United States Communication / Marketing
    Ransomware kciaviation.com id15404 View details United States Transportation / Travel / Logistics
    Ransomware hetrhedens.nl id15370 View details Netherlands Communication / Marketing
    Ransomware brandywinecoachworks.com id15361 View details United States Communication / Marketing
    Ransomware kapurinc.com id15360 View details India Retail / E-commerce
    Ransomware klarenbeek-transport.nl id15357 View details Netherlands Transportation / Travel / Logistics
    Ransomware surgicalassociates.com id15356 View details United States Healthcare / Pharma
    Ransomware billyheromans.com id15355 View details United States Communication / Marketing
    Ransomware kenmore.com id15354 View details United States Other
    Ransomware marysville.k12.oh.us id15345 View details United States Education
    Ransomware stalyhill-inf.tameside.sch.uk id15293 View details United Kingdom Education
    Ransomware steppingstonesd.org id15269 View details United States Communication / Marketing
    Ransomware jst.es id15267 View details Spain Other
    Ransomware jarrellimc.com id15266 View details United States Services
    Ransomware Supply Technologies id15258 View details United States IT
    Ransomware Maxxis International id15257 View details Viet Nam Manufacturing / Engineering
    Ransomware dezinecorp.com id15254 View details Canada Communication / Marketing
    Ransomware SVP Worldwide id15124 View details United States Other
    Ransomware nathcompanies.com id15034 View details United States Construction / Real Estate
    Ransomware wescan-services.com 760 GB id15000 View details Switzerland Services
    Ransomware wescan-services.com id14995 View details Luxembourg Services
    Ransomware lolaliza.com id14976 View details Belgium Other
    Ransomware deschampsimp.com id14968 View details Canada Services
    Ransomware omara-ag.com id14967 View details Germany Education
    Ransomware nrcs.net id14966 View details Switzerland IT
    Ransomware zyloware.com id14963 View details United States Communication / Marketing
    Ransomware unitedsprinkler.com id14962 View details United States Communication / Marketing
    Ransomware Aerotecnic id14897 View details Spain Manufacturing / Engineering
    Ransomware Teddy SpA id14866 View details Italy Other
    Ransomware rcschools.net id14844 View details United States Education
    Ransomware mopsohio.com id14843 View details United States Retail / E-commerce
    Ransomware Kansas City Hospice id14842 View details United States Public Sector
    Ransomware Neighbors Credit Union id14822 View details United States Finance / Legal / Insurance
    Ransomware Volta River Authority id14735 View details Ghana Public Sector
    Ransomware GenPro Inc. id14593 View details United States Communication / Marketing
    Ransomware Branhaven Chrysler Dodge Jeep Ram id14563 View details United States Other
    Ransomware decalesp.com id14518 View details Spain Communication / Marketing
    Ransomware lolaliza.com - 250kk id14462 View details Belgium Retail / E-commerce
    Ransomware Menninger Clinic id14441 View details United States Healthcare / Pharma
    Ransomware cottlesinc.com id14439 View details United States Communication / Marketing
    Ransomware FD Lawrence Electric id14282 View details United States Finance / Legal / Insurance
    Ransomware Hostetler Buildings id14277 View details United States Construction / Real Estate
    Ransomware Charles Darwin School id14258 View details United Kingdom Education
    Ransomware Kadokawa Co Jp id14233 View details Japan NGOs / Associations
    Ransomware Parrish id14170 View details United States Communication / Marketing
    Ransomware OSDA Contract Services id14166 View details United Kingdom Communication / Marketing
    Ransomware Southwest Traders id14126 View details United States Other
    Ransomware Nevada Heart Vascular Center id14125 View details United States Other
    Ransomware MorningStar Senior Living id14124 View details United States Communication / Marketing
    Ransomware Goodless Dermatology id14123 View details United States Other
    Ransomware Effortless Office id14122 View details United States Other
    Ransomware Hollywood Burbank Airport id14064 View details United States Finance / Legal / Insurance
    Ransomware Clatronic International GmbH id14061 View details Germany Retail / E-commerce
    Ransomware malonetoyota.com id14057 View details United States Communication / Marketing
    Ransomware Academy of Model Aeronautics id14019 View details United States Education
    Ransomware widex.com id13992 View details Denmark IT
    Ransomware nwcsb.com id13978 View details United States Communication / Marketing
    Ransomware Bandier id13893 View details United States Services
    Ransomware Forrec id13823 View details Italy Communication / Marketing
    Ransomware Bettis Asphalt id13681 View details United States Construction / Real Estate
    Ransomware aikenhousing.org id13677 View details United States Construction / Real Estate
    Ransomware acsi.org id13650 View details United States Other
    Ransomware www.chsd117.org id13607 View details United States Education
    Ransomware hanoverhill.com id13588 View details United States Other
    Ransomware Pojoaque id13519 View details United States Services
    Ransomware RhinoCorps id13495 View details United States Communication / Marketing
    Ransomware Reward Hospitality from EFC Group id13455 View details Australia Healthcare / Pharma
    Ransomware a-g.com - data publication 38gb (150K) id13342 View details United States Public Sector
    Ransomware gbhs.org Publication 51gb id13341 View details Public Sector
    Ransomware gbhs.org 07/12 Publication 51gb id13337 View details Public Sector
    Ransomware Image Microsystems id13317 View details Services
    Ransomware City of Cedar Falls id13306 View details Public Sector
    Ransomware a-g.com 7/10/24 - data publication 38gb (150K) id13281 View details United States Public Sector
    Ransomware National Health Laboratory Services id13271 View details South Africa Healthcare / Pharma
    Ransomware KADOKAWA Corporation id13177 View details Japan Telecommunications
    Ransomware peregrinegp.com (178gb + private SQL_DB 24gb) id13160 View details United States Communication / Marketing
    Ransomware rbbschools.net id13159 View details United States Education
    Ransomware axiavg.com id13158 View details Italy Communication / Marketing
    Ransomware catiglass.com id13157 View details United States Communication / Marketing
    Ransomware ibewlocal1.org id13156 View details United States Services
    Ransomware doityoungs.com id13155 View details United Kingdom Other
    Ransomware keeservices.com id13154 View details United Kingdom Services
    Ransomware theeyeclinicsurgicenter.com id13153 View details United States Healthcare / Pharma
    Ransomware sanglier.org.uk id13152 View details United Kingdom Other
    Ransomware arangobillboard.com id13151 View details United States NGOs / Associations
    Ransomware hiawathahomes.org id13136 View details United States Other