Ransomware Group intelligence

Rhysida

Active

Track Rhysida with 274 published victims and 7 known leak locations in a single intelligence view.

Victims 274 Known published victims in this dataset
First discovered 2023-06-05 Earliest victim discovery date
Last discovered 2026-06-18 Latest victim discovery date
Inactive since 40 days Days since the latest known victim
Top country United States 121 victims
Known locations 7 Leak or negotiation infrastructure tracked

Overview

Rhysida is tracked by Breach House as a ransomware group with 274 published victims.

United States is currently the most targeted country in this dataset.

7 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (7)

    Label Type Availability Links
    Leak location 1 Onion service Unknown rhysidafohrhyy2aszi7bm32tnjat5xri65fopcxkdfxhi4tidsg7cad.onion
    Leak location 2 Onion service Unknown rhysidafohrhyy2aszi7bm32tnjat5xri65fopcxkdfxhi4tidsg7cad.onion
    Leak location 3 Onion service Unknown rhysidafohrhyy2aszi7bm32tnjat5xri65fopcxkdfxhi4tidsg7cad.onion
    Leak location 4 Onion service Unknown rhysidafc6lm7qa2mkiukbezh7zuth3i4wof4mh2audkymscjm6yegad.onion
    Leak location 5 Onion service Unknown grhysidafc6lm7qa2mkiukbezh7zuth3i4wof4mh2audkymscjm6yegad.onion
    Leak location 6 Onion service Unknown rhysidaeoxtkejwuheks3a7htk4zn3dfuynt5mqw6oawlcx6kcxjdeyd.onion
    Leak location 7 Onion service Unknown rhysidaqho36b6i6mvpmy5di4ro5zglovtxixrirky6q3fgack7q5uyd.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (274)

    Search, filter and paginate the victim timeline for Rhysida. Showing 1–100 of 274.

    Type Target Discovered Country Business Category Intel Link
    Ransomware Lawson Roofing id29977 View details Construction / Real Estate
    Ransomware IDS Group id29519 View details United States Services
    Ransomware Landeshauptstadt Stuttgart id29258 View details Germany Public Sector
    Ransomware Tower View Primary School id29170 View details United Kingdom Education
    Ransomware Stelia North America id28583 View details United States Manufacturing / Engineering
    Ransomware Southold Town Senior ServicesSouthold Police Department id26970 View details Public Sector
    Ransomware Rohner id26735 View details Switzerland Manufacturing / Engineering
    Ransomware Cheyenne & Arapaho Tribes id26632 View details United States Public Sector
    Ransomware Phoenix Art Museum id26463 View details United States Other
    Ransomware Leading Edge Speciali id26237 View details Other
    Ransomware Lakeside Union School District id26102 View details United States Education
    Ransomware Elabs id26075 View details Sweden Services
    Ransomware MACT Health Board id25909 View details United States Healthcare / Pharma
    Ransomware Cytek Biosciences id25762 View details United States Services
    Ransomware Jet-care International id25673 View details Switzerland Services
    Ransomware Charles Leonard Steel Services id25342 View details United States Manufacturing / Engineering
    Ransomware Falk, Waas, Hernandez, Cortina, Solomon & Bonner Overview Metrics id25222 View details United States Other
    Ransomware Larry Pitt & Associates id24914 View details United States Other
    Ransomware YOKOSUKA GAKUIN id24798 View details Japan Other
    Ransomware ***** *********** id24750 View details Other
    Ransomware United Keetoowah Band of Cherokee Indians in Oklahoma id24732 View details United States Other
    Ransomware Woodard, Emhardt, Henry, Reeves & Wagner, LLP id24706 View details United States Other
    Ransomware Harbour Town Doctors id24698 View details Australia Healthcare / Pharma
    Ransomware Kane's Furniture id24533 View details United States Other
    Ransomware SODISE id24475 View details France Other
    Ransomware Bo Beuckman Ford id24407 View details United States Other
    Ransomware Cleveland County Sheriff's Office id24363 View details United States Public Sector
    Ransomware AGS id24242 View details Other
    Ransomware Marlex Human Capital id24198 View details Poland Other
    Ransomware Collge Superieur De Montreal id24172 View details Canada Other
    Ransomware St. Joseph's Healthcare Hamilton id24137 View details Canada Healthcare / Pharma
    Ransomware Wachusett School District MA id24087 View details United States Education
    Ransomware Smoll & Banning, CPAs id23958 View details United States Finance / Legal / Insurance
    Ransomware Heart South Cardiovascular Group id23773 View details United States Communication / Marketing
    Ransomware LMHT Associates id23759 View details United States Other
    Ransomware KISS FM id23620 View details Spain Communication / Marketing
    Ransomware Automated Logistics Systems id23591 View details United States Transportation / Travel / Logistics
    Ransomware Invacare id23587 View details United States Healthcare / Pharma
    Ransomware Spindletop Center id23500 View details United States Healthcare / Pharma
    Ransomware Gemini Group id23449 View details United States Services
    Ransomware Bellflower Unified School District id23424 View details United States Education
    Ransomware Abilene Family Medical Associates id23390 View details United States Healthcare / Pharma
    Ransomware Peraso id23267 View details Canada Other
    Ransomware Hematology Oncology Consultants id23182 View details United States Communication / Marketing
    Ransomware GEIGER id23164 View details Germany Communication / Marketing
    Ransomware Sibbalds id23144 View details United Kingdom Services
    Ransomware Tex-Tube id23135 View details United States Manufacturing / Engineering
    Ransomware Furuno Electric id23013 View details Japan Communication / Marketing
    Ransomware Sdii Global id22921 View details United States Manufacturing / Engineering
    Ransomware JASCO Applied Sciences id22865 View details Canada Other
    Ransomware Medstar Health id22805 View details United States Healthcare / Pharma
    Ransomware Peavey Electronics Corporation id22650 View details United States Communication / Marketing
    Ransomware The Maryland Department of Transportation id22562 View details United States Transportation / Travel / Logistics
    Ransomware Coastal Pacific Xpress id22251 View details Canada Communication / Marketing
    Ransomware Elite Trailers id22141 View details United States Manufacturing / Engineering
    Ransomware Firelands Scientific id21997 View details United States Other
    Ransomware ZCORP id21984 View details United States Communication / Marketing
    Ransomware Elkhart Independent School District id21866 View details United States Education
    Ransomware Trans-Tex id21699 View details Poland Communication / Marketing
    Ransomware Alascom id21659 View details Italy Telecommunications
    Ransomware Cookeville Regional Medical Center id21658 View details United States Healthcare / Pharma
    Ransomware First Baptist Church of Hammond id21657 View details United States Other
    Ransomware Cardinal Services id21656 View details United States Services
    Ransomware Florida Hand Center id21655 View details United States Healthcare / Pharma
    Ransomware Welthungerhilfe id20885 View details Germany Communication / Marketing
    Ransomware Coreix id21654 View details United Kingdom IT
    Ransomware CNPC USA id21653 View details United States Other
    Ransomware Hudson River Housing id21652 View details United States Construction / Real Estate
    Ransomware Cator Ruma & Associates id21651 View details United States Public Sector
    Ransomware Carrera Chevrolet id21650 View details Brazil Other
    Ransomware Florida Lung id21649 View details United States Healthcare / Pharma
    Ransomware Termolar id21648 View details Brazil Communication / Marketing
    Ransomware Sao Camilo Cachoeiro de Itapemirim id20012 View details Brazil Education
    Ransomware Mountain View Mushrooms id19946 View details United States Communication / Marketing
    Ransomware Mediprobe Research id19756 View details Canada Communication / Marketing
    Ransomware Kalin Hobeltechnik id19717 View details Switzerland IT
    Ransomware Government of Peru id19681 View details Peru Public Sector
    Ransomware Coop UQAM id19636 View details Canada Education
    Ransomware LaBella Associates id19606 View details United States Manufacturing / Engineering
    Ransomware MDB id19577 View details United States Other
    Ransomware Milicic id19315 View details Argentina Construction / Real Estate
    Ransomware Acos Favorit id19287 View details Norway Manufacturing / Engineering
    Ransomware Oregon Department of Environmental Quality id19164 View details United States Public Sector
    Ransomware Dimension Composite id19103 View details QC Manufacturing / Engineering
    Ransomware Dimension Composite id19103 View details Canada Manufacturing / Engineering
    Ransomware Swiss Capitals Group id18993 View details Switzerland Finance / Legal / Insurance
    Ransomware Clarity Ventures id18909 View details United States Retail / E-commerce
    Ransomware Forrest City School District id18772 View details United States Education
    Ransomware Senior Support Services id18740 View details Canada Services
    Ransomware Okeene Elementary School id18684 View details United States Education
    Ransomware Ted Hosmer Enterprises id18505 View details United States Communication / Marketing
    Ransomware Cothron's Security Professionals id18404 View details United States Communication / Marketing
    Ransomware British virgin islands London Office id18264 View details United Kingdom Communication / Marketing
    Ransomware Best Collateral, Inc. id18178 View details United States Retail / E-commerce
    Ransomware Newton & Associates, Inc id18106 View details United States Finance / Legal / Insurance
    Ransomware Peter Glenn Ski Sport id17707 View details United States Retail / E-commerce
    Ransomware Buanderie Centrale de Montreal id17604 View details Canada NGOs / Associations
    Ransomware The Agency id17521 View details Communication / Marketing
    Ransomware Leading Edge Specialized Dentistry id17459 View details Healthcare / Pharma
    Ransomware Hammond Trucking & Excavation id17458 View details United States Transportation / Travel / Logistics