Ransomware Group intelligence

Cactus

Inactive

Track Cactus with 248 published victims and 3 known leak locations in a single intelligence view.

Victims 248 Known published victims in this dataset
First discovered 2023-07-20 Earliest victim discovery date
Last discovered 2025-03-21 Latest victim discovery date
Inactive since 494 days Days since the latest known victim
Top country United States 105 victims
Known locations 3 Leak or negotiation infrastructure tracked

Overview

Cactus is tracked by Breach House as a ransomware group with 248 published victims.

United States is currently the most targeted country in this dataset.

3 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (3)

    Label Type Availability Links
    Leak location 1 Onion service Unknown cactusbloguuodvqjmnzlwetjlpj6aggc6iocwhuupb47laukux7ckid.onion
    Leak location 2 Onion service Unknown cactus5dqnqkppa5ayckiyk6dttpqwczdqphv5mxh4dkk5ct544q5aad.onion
    Leak location 3 Onion service Unknown sonarmsng5vzwqezlvtu2iiwwdn3dxkhotftikhowpfjuzg7p3ca5eid.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (248)

    Search, filter and paginate the victim timeline for Cactus. Showing 1–100 of 248.

    Type Target Discovered Country Business Category Intel Link
    Ransomware optiline.com id18578 View details Estonia Communication / Marketing
    Ransomware fplfood.com id18577 View details United States Agriculture / Food
    Ransomware biagibros.com id18576 View details United States Transportation / Travel / Logistics
    Ransomware assaabloy.com id18465 View details Sweden Communication / Marketing
    Ransomware kyb.com id18464 View details Japan Communication / Marketing
    Ransomware tempel.com id18366 View details United States Communication / Marketing
    Ransomware thermoid.com id18365 View details United States Manufacturing / Engineering
    Ransomware baillie.com id18364 View details United States Communication / Marketing
    Ransomware urban1.com id18356 View details United States Communication / Marketing
    Ransomware rocketstores.com id18355 View details United States Retail / E-commerce
    Ransomware quigleyeye.com id18136 View details United States Healthcare / Pharma
    Ransomware stanleyconsultants.com id18105 View details United States Communication / Marketing
    Ransomware caltrol.com id17828 View details United States Communication / Marketing
    Ransomware holtcat.com id17820 View details United States Communication / Marketing
    Ransomware alphabaking.com id17819 View details United States Communication / Marketing
    Ransomware bluedge.com id17791 View details United States Communication / Marketing
    Ransomware lifting.com id17784 View details United States Communication / Marketing
    Ransomware chfindustries.com id17750 View details United States Communication / Marketing
    Ransomware aiibeauty.com id17749 View details United States Communication / Marketing
    Ransomware formanmills.com id17748 View details United States Communication / Marketing
    Ransomware amalgamatedsugar.com id17747 View details United States Communication / Marketing
    Ransomware everelgroup.com id17746 View details Italy Communication / Marketing
    Ransomware regulvar.com id17745 View details Canada Communication / Marketing
    Ransomware electrocraft.com id17739 View details United States Communication / Marketing
    Ransomware associatedasset.com id17738 View details United States Communication / Marketing
    Ransomware grede.com id17737 View details United States Communication / Marketing
    Ransomware branchgroup.com id17736 View details United States Construction / Real Estate
    Ransomware pace-usa.com id17735 View details United States Communication / Marketing
    Ransomware steelwarehouse.com id17734 View details United States Manufacturing / Engineering
    Ransomware newhorizonsbaking.com id17675 View details United States Communication / Marketing
    Ransomware uniekinc.com id17620 View details United States Communication / Marketing
    Ransomware midwayimporting.com id17619 View details United States Communication / Marketing
    Ransomware revitalash.com id17618 View details United States Communication / Marketing
    Ransomware bestbrands.com id17617 View details United States Communication / Marketing
    Ransomware kinseysinc.com id17585 View details United States Communication / Marketing
    Ransomware steelerubber.com id17584 View details United States Manufacturing / Engineering
    Ransomware almostfamousclothing.com id17583 View details United States Communication / Marketing
    Ransomware This entry has been removed following a request from the company. id17582 View details United States Services
    Ransomware ssmcoop.com id17581 View details United States Communication / Marketing
    Ransomware curtisint.com id17467 View details Canada Communication / Marketing
    Ransomware britannicahome.com id17466 View details United States Communication / Marketing
    Ransomware uniquehd.com id17465 View details United States Communication / Marketing
    Ransomware northernresponse.com id17254 View details Canada Communication / Marketing
    Ransomware savoiesfoods.com id17253 View details United States Agriculture / Food
    Ransomware mgainnovation.com id17166 View details United States Communication / Marketing
    Ransomware cornwelltools.com id17165 View details United States Communication / Marketing
    Ransomware rashtiandrashti.com id17164 View details United States Communication / Marketing
    Ransomware alkodistributors.com id17029 View details United States Communication / Marketing
    Ransomware ttucorp.com id17028 View details United States Communication / Marketing
    Ransomware jayaapparelgroup.com id17027 View details United States Finance / Legal / Insurance
    Ransomware johnpaulrichard.com id17026 View details United States Communication / Marketing
    Ransomware vsstransportationgroup.com id17025 View details United States Transportation / Travel / Logistics
    Ransomware sunrise-soya.com id17024 View details Canada Communication / Marketing
    Ransomware awimc.com id16298 View details United States Communication / Marketing
    Ransomware galatachemicals.com id16294 View details United States Manufacturing / Engineering
    Ransomware ptcky.com id16279 View details United States Communication / Marketing
    Ransomware adveo.com id16277 View details France Services
    Ransomware massdevelopment.com id16159 View details United States IT
    Ransomware ottosimon.co.uk id15224 View details United Kingdom Communication / Marketing
    Ransomware lumiplan.com id15110 View details France Communication / Marketing
    Ransomware lsst.ac id15103 View details United Kingdom Education
    Ransomware hacla.org id15076 View details United States Communication / Marketing
    Ransomware picsolve.com id14928 View details United States Communication / Marketing
    Ransomware bcllegal.com id14927 View details United Kingdom Finance / Legal / Insurance
    Ransomware synertrade.com id14788 View details France Communication / Marketing
    Ransomware matki.co.uk id14648 View details United Kingdom Communication / Marketing
    Ransomware corporatejobbank.com id14647 View details United States Finance / Legal / Insurance
    Ransomware www.galab.com id14544 View details Germany Communication / Marketing
    Ransomware actionfirepros.com id14479 View details United States Communication / Marketing
    Ransomware hindlegroup.com id14450 View details United Kingdom Communication / Marketing
    Ransomware kjtait.com id14449 View details United Kingdom Communication / Marketing
    Ransomware www.amchar.com id14448 View details United States Finance / Legal / Insurance
    Ransomware ten8fire.com id14413 View details United States Communication / Marketing
    Ransomware natcoglobal.com id14317 View details United States Finance / Legal / Insurance
    Ransomware peerlessumbrella.com id14315 View details United States Manufacturing / Engineering
    Ransomware thomas-lloyd.com id14314 View details United States Communication / Marketing
    Ransomware riomarineinc.com id14197 View details United States Communication / Marketing
    Ransomware champeau.com id14196 View details Canada Communication / Marketing
    Ransomware simson-maxwell.com id14159 View details Canada Communication / Marketing
    Ransomware balboabayresort.com id14158 View details United States Hospitality / Food & Beverage / Tourism
    Ransomware flodraulic.com id14157 View details United States Communication / Marketing
    Ransomware mcphillips.co.uk id14156 View details United Kingdom Communication / Marketing
    Ransomware rangeramerican.com id14155 View details Puerto Rico Communication / Marketing
    Ransomware securityinstrument.com id14013 View details United States Communication / Marketing
    Ransomware tibaitservices.com id13735 View details Mexico Services
    Ransomware mihlfeld.com id13734 View details United States Communication / Marketing
    Ransomware exco-solutions.com id13688 View details Germany Services
    Ransomware dahlvalve.com id13646 View details Canada Communication / Marketing
    Ransomware chubb-bulleid.co.uk id13616 View details United Kingdom Communication / Marketing
    Ransomware leonardssyrups.com id13615 View details United States Finance / Legal / Insurance
    Ransomware westernwyomingbeverages.com id13614 View details United States Hospitality / Food & Beverage / Tourism
    Ransomware demos.fr id13613 View details France Communication / Marketing
    Ransomware denkaiamerica.com id13612 View details United States Communication / Marketing
    Ransomware isometrix.com id13404 View details United States Communication / Marketing
    Ransomware verco.co.uk id13369 View details United Kingdom Communication / Marketing
    Ransomware hydmech.com id13144 View details Canada Communication / Marketing
    Ransomware westfalia-automotive.com id13143 View details Germany Manufacturing / Engineering
    Ransomware millimages.com id13123 View details France Finance / Legal / Insurance
    Ransomware www.glynmarais.co.za id13122 View details South Africa Communication / Marketing
    Ransomware hundhausen.de id13121 View details Germany Communication / Marketing