Ransomware Group intelligence

Cactus

Inactive

Track Cactus with 248 published victims and 3 known leak locations in a single intelligence view.

Victims 248 Known published victims in this dataset
First discovered 2023-07-20 Earliest victim discovery date
Last discovered 2025-03-21 Latest victim discovery date
Inactive since 494 days Days since the latest known victim
Top country United States 105 victims
Known locations 3 Leak or negotiation infrastructure tracked

Overview

Cactus is tracked by Breach House as a ransomware group with 248 published victims.

United States is currently the most targeted country in this dataset.

3 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (3)

    Label Type Availability Links
    Leak location 1 Onion service Unknown cactusbloguuodvqjmnzlwetjlpj6aggc6iocwhuupb47laukux7ckid.onion
    Leak location 2 Onion service Unknown cactus5dqnqkppa5ayckiyk6dttpqwczdqphv5mxh4dkk5ct544q5aad.onion
    Leak location 3 Onion service Unknown sonarmsng5vzwqezlvtu2iiwwdn3dxkhotftikhowpfjuzg7p3ca5eid.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (248)

    Search, filter and paginate the victim timeline for Cactus. Showing 101–200 of 248.

    Type Target Discovered Country Business Category Intel Link
    Ransomware fbttransport.com id13120 View details United States Transportation / Travel / Logistics
    Ransomware daystar.com id13119 View details United States Finance / Legal / Insurance
    Ransomware deskcenter.com id13117 View details Germany Communication / Marketing
    Ransomware suminoe.us id13070 View details United States Communication / Marketing
    Ransomware sofidel.com id13063 View details Italy Communication / Marketing
    Ransomware sky-light.com id13062 View details Denmark Communication / Marketing
    Ransomware reawire.com id13061 View details United States Communication / Marketing
    Ransomware transportlaberge.com id12944 View details Canada Transportation / Travel / Logistics
    Ransomware sanyo-shokai.co.jp id12943 View details Japan Communication / Marketing
    Ransomware jmthompson.com id12941 View details United States Communication / Marketing
    Ransomware ctsystem.com id12940 View details Taiwan, Province of China Communication / Marketing
    Ransomware ctgbrands.com id12939 View details United States Communication / Marketing
    Ransomware fpr-us.com id12916 View details United States Communication / Marketing
    Ransomware dollmar.com id12794 View details Italy Communication / Marketing
    Ransomware familyguardian.com id12793 View details Bahamas Communication / Marketing
    Ransomware espackeuro.com id12792 View details Spain Communication / Marketing
    Ransomware schuettemetals.com id12621 View details United States Manufacturing / Engineering
    Ransomware fulcrum.pro id12583 View details United States Communication / Marketing
    Ransomware scanda.com.mx id12516 View details Mexico Finance / Legal / Insurance
    Ransomware acfin.cl id12515 View details Chile Communication / Marketing
    Ransomware iddink.nl id12166 View details Netherlands Communication / Marketing
    Ransomware ghimli.com id12115 View details Australia Communication / Marketing
    Ransomware saglobal.com id12109 View details Canada Energy
    Ransomware concordegroup.ca id12108 View details Canada Healthcare / Pharma
    Ransomware ebir.com id12107 View details Spain Communication / Marketing
    Ransomware coastalcargogroup.com id12106 View details United States Transportation / Travel / Logistics
    Ransomware xdconnects.com id11720 View details Netherlands Communication / Marketing
    Ransomware drmarbys.com id11704 View details United States Communication / Marketing
    Ransomware regulatormarine.com id11674 View details United States Communication / Marketing
    Ransomware mcalvain.com id11509 View details United States Communication / Marketing
    Ransomware regencyfurniture.com id11483 View details United States Communication / Marketing
    Ransomware aerodynamicinc.com id11467 View details United States Communication / Marketing
    Ransomware besttrans.com id11466 View details United States Communication / Marketing
    Ransomware qosina.com id11402 View details United States Communication / Marketing
    Ransomware contenderboats.com id11385 View details United States Communication / Marketing
    Ransomware newagesys.com id11340 View details United States Communication / Marketing
    Ransomware kelson.on.ca id11339 View details Canada Communication / Marketing
    Ransomware eclinicalsol.com id11267 View details United States Healthcare / Pharma
    Ransomware grupatopex.com id11266 View details Poland Communication / Marketing
    Ransomware plymouth.com id11162 View details United States Communication / Marketing
    Ransomware cleshar.co.uk id11158 View details United Kingdom Communication / Marketing
    Ransomware ammega.com id11157 View details Netherlands Communication / Marketing
    Ransomware renypicot.es id11156 View details Spain Communication / Marketing
    Ransomware abtexelgroup.com id11009 View details Netherlands Communication / Marketing
    Ransomware remkes.nl id10949 View details Netherlands Communication / Marketing
    Ransomware advancedprosolutions.com id10910 View details United States Communication / Marketing
    Ransomware se.com id10907 View details France Communication / Marketing
    Ransomware parksite.com id10726 View details United States Communication / Marketing
    Ransomware gocco.com id10695 View details Spain Communication / Marketing
    Ransomware spbglobal.com id10694 View details Spain Communication / Marketing
    Ransomware oogp.com id10589 View details United States Communication / Marketing
    Ransomware jaygroup.com id10576 View details United States Communication / Marketing
    Ransomware asburyauto.com id10408 View details United States Communication / Marketing
    Ransomware acutis.com id10401 View details United States Communication / Marketing
    Ransomware dtsolutions.net id10400 View details United States Services
    Ransomware intercityinvestments.com id10399 View details United States Public Sector
    Ransomware hi-cone.com id10398 View details United States Communication / Marketing
    Ransomware bellgroup.co.uk id10329 View details United Kingdom Communication / Marketing
    Ransomware coop.se id10328 View details Sweden Communication / Marketing
    Ransomware tridon.com.au id10327 View details Australia Communication / Marketing
    Ransomware gdi.com id10324 View details Canada Communication / Marketing
    Ransomware bachoco.com.mx id10323 View details Mexico Communication / Marketing
    Ransomware pbssystems.com id10322 View details Communication / Marketing
    Ransomware quakerwindows.com id10274 View details Energy
    Ransomware dillarddoor.com id10246 View details United States Communication / Marketing
    Ransomware cts.co.uk id10245 View details United Kingdom Communication / Marketing
    Ransomware hunterbuildings.com id10244 View details Construction / Real Estate
    Ransomware larlyn.com id10243 View details Other
    Ransomware wkw-group.com id10242 View details Services
    Ransomware dbmgroup.com id10241 View details Services
    Ransomware LAJOLLAGROUP id10071 View details United States Construction / Real Estate
    Ransomware CTS id10048 View details United Kingdom Other
    Ransomware MEDIMARKET id10043 View details Belgium Healthcare / Pharma
    Ransomware ODALYS id10042 View details France Hospitality / Food & Beverage / Tourism
    Ransomware CIE id10041 View details Spain Manufacturing / Engineering
    Ransomware NNDOMAIN id10040 View details United States Construction / Real Estate
    Ransomware ISC id10039 View details Denmark Energy
    Ransomware DILLARD id10038 View details United States Communication / Marketing
    Ransomware Dillard Door & Security id9994 View details Communication / Marketing
    Ransomware ISC Consulting Engineers id9955 View details Denmark Services
    Ransomware CIE Automotive id9887 View details Manufacturing / Engineering
    Ransomware National Nail Corp id9886 View details Construction / Real Estate
    Ransomware FYIdoctors id9736 View details Canada Healthcare / Pharma
    Ransomware Axiom Construction & Consulting id9735 View details Construction / Real Estate
    Ransomware Medi-Market id9734 View details Belgium Healthcare / Pharma
    Ransomware Odalys Vacances id9733 View details Hospitality / Food & Beverage / Tourism
    Ransomware Verhelst id9653 View details Belgium Construction / Real Estate
    Ransomware Petersen Health Care id9652 View details Healthcare / Pharma
    Ransomware Paul Stuart id9651 View details Finance / Legal / Insurance
    Ransomware GEOCOM id9407 View details Uruguay Communication / Marketing
    Ransomware MultiMasters id9406 View details Belgium Services
    Ransomware UTI Group id9405 View details Romania Communication / Marketing
    Ransomware SCS SpA id9104 View details Public Sector
    Ransomware OmniVision Technologies id9103 View details IT
    Ransomware The Hurley Group id8992 View details Construction / Real Estate
    Ransomware Cornerstone Projects Group id8971 View details Construction / Real Estate
    Ransomware RICOR Global Limited id8970 View details Slovakia Manufacturing / Engineering
    Ransomware UTC Overseas id8875 View details Transportation / Travel / Logistics
    Ransomware Unitex Textile Rental Services id8874 View details Services
    Ransomware Orthum Bau id8861 View details Construction / Real Estate