Ransomware Group intelligence

Krybit

Active

Track Krybit with 209 published victims and 6 known leak locations in a single intelligence view.

BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Victims 209 Known published victims in this dataset
First discovered 2026-04-03 Earliest victim discovery date
Last discovered 2026-09-03 Latest victim discovery date
Inactive since 8 days Days since the latest known victim
Top country Mexico 18 victims
Known locations 6 Leak or negotiation infrastructure tracked

Overview

Krybit is tracked by Breach House as a ransomware group with 209 published victims.

Mexico is currently the most targeted country in this dataset.

6 known leak locations are currently associated with this group.

Leak Status Distribution

  • Leaked 2 2.0%
  • Pending 97 98.0%
  • Deleted 0 0.0%

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (6)

    Label Type Availability Links
    Leak location 6 Onion service Up checked 3h ago krybivdln3oc3twbin4budgznzq7dmcolldnsx455lspxxe23b56y5qd.onion
    Leak location 5 Onion service Up checked 3h ago krybieodq754vlwufrsuxaswxb5zpxyibaawmed2jaduoz2e5m56hmid.onion
    Leak location 4 Onion service Up checked 3h ago krybitxdpxohsmjooeb3gbgpmdddreh6mnflzac6bnezz74b7yje67yd.onion
    Leak location 3 Onion service Up checked 3h ago krybitx3fh5krdnhegyp2ob3lhizsaiadturtio3ginf7it5gsdgu2yd.onion
    Leak location 1 Onion service Up checked 3h ago krybitqsdzwmhnitvwuhvsntfgf2wrhxveyxroxpc44c6gkft2cqldyd.onion
    Leak location 2 Web location Down checked 3h ago krybitqsdzwmhnitvwuhvsntfgf2wrhxveyxroxpc44c6gkft2cqldyd.

    Top Activity Sectors (16)

    Victims (209)

    Search, filter and paginate the victim timeline for Krybit. Showing 1–100 of 209.

    Type Target Discovered Country Business Category Intel Link Leak status
    Ransomware ligacancerguate.org id32449 View details Guatemala Other pending
    Ransomware ligacancerguate.org id32449 View details Guatemala Other pending
    Ransomware seashellhospital.com id32388 View details India Healthcare / Pharma pending
    Ransomware seashellhospital.com id32388 View details India Healthcare / Pharma pending
    Ransomware uicc.org id32389 View details Switzerland Public Sector pending
    Ransomware uicc.org id32389 View details Switzerland Public Sector pending
    Ransomware tum.com.mx id32390 View details Mexico Retail / E-commerce pending
    Ransomware tum.com.mx id32390 View details Mexico Retail / E-commerce pending
    Ransomware www.alphaplantes.com id32391 View details France Agriculture / Food pending
    Ransomware www.alphaplantes.com id32391 View details France Agriculture / Food pending
    Ransomware www.alphaplantes.com id32391 View details Canada Agriculture / Food pending
    Ransomware reignwoodpark.com id32392 View details China Hospitality / Food & Beverage / Tourism pending
    Ransomware reignwoodpark.com id32392 View details China Hospitality / Food & Beverage / Tourism pending
    Ransomware orex.co.th id32376 View details Thailand IT leaked
    Ransomware orex.co.th id32376 View details Thailand IT leaked
    Ransomware amptc.net id32377 View details United States IT pending
    Ransomware amptc.net id32377 View details United States IT pending
    Ransomware dmt-group.com id32378 View details Germany IT pending
    Ransomware dmt-group.com id32378 View details Germany IT pending
    Ransomware jswlaw.bt id32379 View details Bhutan Finance / Legal / Insurance pending
    Ransomware jswlaw.bt id32379 View details Bhutan Finance / Legal / Insurance pending
    Ransomware vedantaainstitute.in id32380 View details India Education pending
    Ransomware vedantaainstitute.in id32380 View details India Education pending
    Ransomware meccahighfeed.blogspot.com id32381 View details Saudi Arabia Other pending
    Ransomware meccahighfeed.blogspot.com id32381 View details Saudi Arabia Other pending
    Ransomware transportesmontejo.com id32382 View details Mexico Transportation / Travel / Logistics pending
    Ransomware transportesmontejo.com id32382 View details Mexico Transportation / Travel / Logistics pending
    Ransomware southsign.in id32383 View details India IT pending
    Ransomware southsign.in id32383 View details India IT pending
    Ransomware hccd-construction.com id32384 View details United States Construction / Real Estate pending
    Ransomware hccd-construction.com id32384 View details United States Construction / Real Estate pending
    Ransomware finodayacapital.com id32149 View details United States Finance / Legal / Insurance pending
    Ransomware finodayacapital.com id32149 View details United States Finance / Legal / Insurance pending
    Ransomware cgcgabon.com id32150 View details Gabon Services pending
    Ransomware cgcgabon.com id32150 View details Gabon Services pending
    Ransomware karkinos.in id32151 View details India IT pending
    Ransomware karkinos.in id32151 View details India IT pending
    Ransomware ferretornillos.gt id32152 View details Guatemala IT pending
    Ransomware ferretornillos.gt id32152 View details Guatemala IT pending
    Ransomware www.sankovn.com id32153 View details Viet Nam IT pending
    Ransomware www.sankovn.com id32153 View details Viet Nam IT pending
    Ransomware www.neooftalmo.com.br id32159 View details Brazil Services pending
    Ransomware www.neooftalmo.com.br id32159 View details Brazil Services pending
    Ransomware lemonfarm.com id32160 View details United States Agriculture / Food pending
    Ransomware lemonfarm.com id32160 View details United States Agriculture / Food pending
    Ransomware wmiemporium.com id32161 View details United States Retail / E-commerce pending
    Ransomware wmiemporium.com id32161 View details United States Retail / E-commerce pending
    Ransomware mimafoods.net id32162 View details Brazil Agriculture / Food pending
    Ransomware mimafoods.net id32162 View details Brazil Agriculture / Food pending
    Ransomware sysconth.com id32163 View details Brazil IT pending
    Ransomware sysconth.com id32163 View details Brazil IT pending
    Ransomware jindallifescience.com id32164 View details India Healthcare / Pharma pending
    Ransomware jindallifescience.com id32164 View details India Healthcare / Pharma pending
    Ransomware vascara.com id32165 View details Brazil Retail / E-commerce pending
    Ransomware vascara.com id32165 View details Brazil Retail / E-commerce pending
    Ransomware resi.com id32062 View details Germany IT pending
    Ransomware resi.com id32062 View details Germany IT pending
    Ransomware sunsea.co.th id31883 View details Thailand pending
    Ransomware www.mestojilemnice.cz id31899 View details Czechia pending
    Ransomware automotoresrosedal.com.ar id31900 View details Argentina pending
    Ransomware sipresitalia.it id31901 View details Italy pending
    Ransomware www.hsi.info id31902 View details Hong Kong pending
    Ransomware hisstw.com id31582 View details Taiwan, Province of China IT pending
    Ransomware hisstw.com id31582 View details Taiwan, Province of China IT pending
    Ransomware labindia.com id31583 View details India Manufacturing / Engineering pending
    Ransomware labindia.com id31583 View details India Manufacturing / Engineering pending
    Ransomware lhyk.com.sg id31584 View details Singapore Other pending
    Ransomware lhyk.com.sg id31584 View details Singapore Other pending
    Ransomware www.kilpi-koskinen.fi id31560 View details Finland Construction / Real Estate pending
    Ransomware www.kilpi-koskinen.fi id31560 View details Finland Construction / Real Estate pending
    Ransomware www.apsanet.com.ar id31561 View details Argentina IT pending
    Ransomware www.apsanet.com.ar id31561 View details Argentina IT pending
    Ransomware studiotibaldi.it id31485 View details Italy IT pending
    Ransomware studiotibaldi.it id31485 View details Italy IT pending
    Ransomware reflet2000.fr id31393 View details France Retail / E-commerce pending
    Ransomware reflet2000.fr id31393 View details France Retail / E-commerce pending
    Ransomware www.actini.com id31394 View details France IT pending
    Ransomware www.actini.com id31394 View details France IT pending
    Ransomware www.ernat-bureau-etudes.fr id31395 View details France Manufacturing / Engineering pending
    Ransomware www.ernat-bureau-etudes.fr id31395 View details France Manufacturing / Engineering pending
    Ransomware www.serengetiestates.co.za id31396 View details South Africa Construction / Real Estate pending
    Ransomware www.serengetiestates.co.za id31396 View details South Africa Construction / Real Estate pending
    Ransomware www.hymiasa.com id31397 View details Peru Manufacturing / Engineering pending
    Ransomware www.hymiasa.com id31397 View details Peru Manufacturing / Engineering pending
    Ransomware cesmac.edu.br id31239 View details Brazil Education pending
    Ransomware cesmac.edu.br id31239 View details Brazil Education pending
    Ransomware www.prohealth.sg id31166 View details Singapore Healthcare / Pharma pending
    Ransomware www.prohealth.sg id31166 View details Singapore Healthcare / Pharma pending
    Ransomware www.dcpartner.co.za id31158 View details South Africa Finance / Legal / Insurance pending
    Ransomware www.dcpartner.co.za id31158 View details South Africa Finance / Legal / Insurance pending
    Ransomware nigeria.asa-international.com id31159 View details Nigeria Finance / Legal / Insurance pending
    Ransomware nigeria.asa-international.com id31159 View details Nigeria Finance / Legal / Insurance pending
    Ransomware www.ville-rinxent.fr id31154 View details France Public Sector pending
    Ransomware www.ville-rinxent.fr id31154 View details France Public Sector pending
    Ransomware countrymotors.com.mx id31155 View details Mexico Retail / E-commerce pending
    Ransomware countrymotors.com.mx id31155 View details Mexico Retail / E-commerce pending
    Ransomware www.buzztrading104.co.za id31157 View details South Africa Finance / Legal / Insurance pending
    Ransomware www.buzztrading104.co.za id31157 View details South Africa Finance / Legal / Insurance pending
    Ransomware nilepet.com id30779 View details Egypt Energy pending
    Ransomware nilepet.com id30779 View details Egypt Energy pending