Ransomware Group intelligence

Cactus

Inactive

Track Cactus with 248 published victims and 3 known leak locations in a single intelligence view.

Victims 248 Known published victims in this dataset
First discovered 2023-07-20 Earliest victim discovery date
Last discovered 2025-03-21 Latest victim discovery date
Inactive since 494 days Days since the latest known victim
Top country United States 105 victims
Known locations 3 Leak or negotiation infrastructure tracked

Overview

Cactus is tracked by Breach House as a ransomware group with 248 published victims.

United States is currently the most targeted country in this dataset.

3 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (3)

    Label Type Availability Links
    Leak location 1 Onion service Unknown cactusbloguuodvqjmnzlwetjlpj6aggc6iocwhuupb47laukux7ckid.onion
    Leak location 2 Onion service Unknown cactus5dqnqkppa5ayckiyk6dttpqwczdqphv5mxh4dkk5ct544q5aad.onion
    Leak location 3 Onion service Unknown sonarmsng5vzwqezlvtu2iiwwdn3dxkhotftikhowpfjuzg7p3ca5eid.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (248)

    Search, filter and paginate the victim timeline for Cactus. Showing 201–248 of 248.

    Type Target Discovered Country Business Category Intel Link
    Ransomware Astro Lighting id8860 View details Communication / Marketing
    Ransomware DM Civil id8716 View details Australia Construction / Real Estate
    Ransomware Bacon Universal id8699 View details Construction / Real Estate
    Ransomware Spuncast id8698 View details Communication / Marketing
    Ransomware Peacock Bros id8689 View details Australia Services
    Ransomware Wardlaw Claims Service id8581 View details Finance / Legal / Insurance
    Ransomware Levine Bagade Han id8576 View details Communication / Marketing
    Ransomware Leekes id8575 View details United Kingdom Retail / E-commerce
    Ransomware My Insurance Broker id8574 View details Finance / Legal / Insurance
    Ransomware Unimarketing id8573 View details Canada Communication / Marketing
    Ransomware Geo Tek id8549 View details Communication / Marketing
    Ransomware Custom Powder Systems id8547 View details United States Services
    Ransomware JSS Almonds id8546 View details Communication / Marketing
    Ransomware atWork Office Furniture id8545 View details Canada Services
    Ransomware BRiC Partnership id8544 View details India Communication / Marketing
    Ransomware TORMAX USA id8531 View details United States Communication / Marketing
    Ransomware West Craft Manufacturing id8530 View details Manufacturing / Engineering
    Ransomware Trimaran Capital Partners id8529 View details Finance / Legal / Insurance
    Ransomware Specialised Management Services id8528 View details Services
    Ransomware Maxxd Trailers id8502 View details Canada Retail / E-commerce
    Ransomware MINEMAN Systems id8501 View details Manufacturing / Engineering
    Ransomware Promotrans id8500 View details France Communication / Marketing
    Ransomware Seymours id8499 View details United Kingdom Construction / Real Estate
    Ransomware Marfrig Global Foods id8496 View details Brazil Agriculture / Food
    Ransomware Barsco id8493 View details Hospitality / Food & Beverage / Tourism
    Ransomware Foroni SPA id8492 View details Manufacturing / Engineering
    Ransomware Hornsyld Købmandsgaard id8491 View details Denmark Agriculture / Food
    Ransomware Lagarde Meregnani id8490 View details France Construction / Real Estate
    Ransomware Balcan id8468 View details Canada IT
    Ransomware Barco Uniforms id8467 View details Hospitality / Food & Beverage / Tourism
    Ransomware Alberto Couto Alves id7401 View details Construction / Real Estate
    Ransomware Agoravita id7400 View details IT
    Ransomware American Meteorological Society id7399 View details NGOs / Associations
    Ransomware Biocair International id7398 View details Healthcare / Pharma
    Ransomware Confartigianato Federimpresa FC id7397 View details Communication / Marketing
    Ransomware ScanSource id7396 View details IT
    Ransomware CWS id7395 View details IT
    Ransomware Hawa Sliding Solutions id7394 View details Communication / Marketing
    Ransomware Imagination id7393 View details Other
    Ransomware Italkraft id7392 View details Communication / Marketing
    Ransomware Michigan Production Machining id7391 View details United States Manufacturing / Engineering
    Ransomware Novobit id7390 View details Communication / Marketing
    Ransomware Artemide id7389 View details Italy Manufacturing / Engineering
    Ransomware Reyes Automotive Group id7388 View details Manufacturing / Engineering
    Ransomware Rotomail Italia SpA id7387 View details Communication / Marketing
    Ransomware Phoenix Taxis id7386 View details Other
    Ransomware Wasserstrom id7385 View details Hospitality / Food & Beverage / Tourism
    Ransomware Americold id7384 View details United States Construction / Real Estate