Ransomware Group intelligence

Rhysida

Active

Track Rhysida with 297 published victims and 7 known leak locations in a single intelligence view.

BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Victims 297 Known published victims in this dataset
First discovered 2023-06-05 Earliest victim discovery date
Last discovered 2026-09-10 Latest victim discovery date
Inactive since 1 days Days since the latest known victim
Top country United States 128 victims
Known locations 7 Leak or negotiation infrastructure tracked

Overview

Rhysida is tracked by Breach House as a ransomware group with 297 published victims.

United States is currently the most targeted country in this dataset.

7 known leak locations are currently associated with this group.

Leak Status Distribution

  • Leaked 12 37.5%
  • Pending 20 62.5%
  • Deleted 0 0.0%

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (7)

    Label Type Availability Links
    Leak location 7 Onion service Up checked 5h ago rhysidaqho36b6i6mvpmy5di4ro5zglovtxixrirky6q3fgack7q5uyd.onion
    Leak location 4 Onion service Up checked 5h ago rhysidafc6lm7qa2mkiukbezh7zuth3i4wof4mh2audkymscjm6yegad.onion
    Leak location 1 Onion service Up checked 5h ago rhysidafohrhyy2aszi7bm32tnjat5xri65fopcxkdfxhi4tidsg7cad.onion
    Leak location 2 Onion service Up checked 5h ago rhysidafohrhyy2aszi7bm32tnjat5xri65fopcxkdfxhi4tidsg7cad.onion
    Leak location 3 Onion service Up checked 5h ago rhysidafohrhyy2aszi7bm32tnjat5xri65fopcxkdfxhi4tidsg7cad.onion
    Leak location 6 Onion service Down checked 5h ago rhysidaeoxtkejwuheks3a7htk4zn3dfuynt5mqw6oawlcx6kcxjdeyd.onion
    Leak location 5 Onion service Down checked 5h ago grhysidafc6lm7qa2mkiukbezh7zuth3i4wof4mh2audkymscjm6yegad.onion

    Top Activity Sectors (17)

    Victims (297)

    Search, filter and paginate the victim timeline for Rhysida. Showing 101–200 of 297.

    Type Target Discovered Country Business Category Intel Link Leak status
    Ransomware Coop UQAM id19636 View details Canada Education
    Ransomware LaBella Associates id19606 View details United States Manufacturing / Engineering
    Ransomware MDB id19577 View details United States Other
    Ransomware Milicic id19315 View details Argentina Construction / Real Estate
    Ransomware Acos Favorit id19287 View details Norway Manufacturing / Engineering
    Ransomware Oregon Department of Environmental Quality id19164 View details United States Public Sector
    Ransomware Dimension Composite id19103 View details QC Manufacturing / Engineering
    Ransomware Dimension Composite id19103 View details Canada Manufacturing / Engineering
    Ransomware Swiss Capitals Group id18993 View details Switzerland Finance / Legal / Insurance
    Ransomware Clarity Ventures id18909 View details United States Retail / E-commerce
    Ransomware Forrest City School District id18772 View details United States Education
    Ransomware Senior Support Services id18740 View details Canada Services
    Ransomware Okeene Elementary School id18684 View details United States Education
    Ransomware Ted Hosmer Enterprises id18505 View details United States Communication / Marketing
    Ransomware Cothron's Security Professionals id18404 View details United States Communication / Marketing
    Ransomware British virgin islands London Office id18264 View details United Kingdom Communication / Marketing
    Ransomware Best Collateral, Inc. id18178 View details United States Retail / E-commerce
    Ransomware Newton & Associates, Inc id18106 View details United States Finance / Legal / Insurance
    Ransomware Peter Glenn Ski Sport id17707 View details United States Retail / E-commerce
    Ransomware Buanderie Centrale de Montreal id17604 View details Canada NGOs / Associations
    Ransomware The Agency id17521 View details Communication / Marketing
    Ransomware Leading Edge Specialized Dentistry id17459 View details Healthcare / Pharma
    Ransomware Hammond Trucking & Excavation id17458 View details United States Transportation / Travel / Logistics
    Ransomware BH Aircraft Company, Inc. id17457 View details United States Communication / Marketing
    Ransomware My New Jersey Dentist id17456 View details United States Healthcare / Pharma
    Ransomware Town Counsel Law & Litigation id17455 View details United States Finance / Legal / Insurance
    Ransomware Pembina Trails School Division id17070 View details Canada Education leaked
    Ransomware Carthage Police Department id16957 View details United States Public Sector
    Ransomware ORU Mabee Center id16820 View details United States Healthcare / Pharma
    Ransomware TG3 Electronics id16716 View details United States Other
    Ransomware The Chicano Federation id16654 View details United States NGOs / Associations
    Ransomware Qualinet id16576 View details Canada Other
    Ransomware Sunflower Medical Group id16520 View details United States Healthcare / Pharma
    Ransomware Montreal North id16489 View details Canada Public Sector
    Ransomware T Smiles Dental id16383 View details Canada Healthcare / Pharma
    Ransomware Avstar Fuel Systems id16156 View details United States Energy
    Ransomware Rutherford County Schools id15977 View details United States Education
    Ransomware Matlock Security Services id15904 View details United States Services
    Ransomware Goodwill North Central Texas id15806 View details United States Hospitality / Food & Beverage / Tourism
    Ransomware Delmar International id15719 View details Canada Transportation / Travel / Logistics
    Ransomware Vermilion Parish School System id15664 View details United States Education
    Ransomware Bishop Ireton High School id15531 View details United States Retail / E-commerce
    Ransomware American Addiction Centers id15359 View details United States Telecommunications
    Ransomware Granite School District id15237 View details United States Education
    Ransomware Fylde Coast Academy Trust id15161 View details United Kingdom Education
    Ransomware Hope Valley Recovery id15104 View details United States Communication / Marketing
    Ransomware De Rose Lawyers id14980 View details Canada Finance / Legal / Insurance
    Ransomware Easterseals id14905 View details United States Services
    Ransomware Henry County Schools id14778 View details United States Education
    Ransomware Microworks id14768 View details Japan Hospitality / Food & Beverage / Tourism
    Ransomware Axis Health System id14720 View details United States Healthcare / Pharma
    Ransomware Golden Age Nursing Home id14570 View details Australia Healthcare / Pharma
    Ransomware Plastics Plus id14515 View details Canada Manufacturing / Engineering
    Ransomware Shenango Area School District id14471 View details United States NGOs / Associations pending
    Ransomware Daughterly Care id14408 View details Australia Communication / Marketing
    Ransomware Greene Acres Nursing Home id14392 View details United States Healthcare / Pharma
    Ransomware Port of Seattle/Seattle-Tacoma International Airport (SEA) id14348 View details United States Transportation / Travel / Logistics
    Ransomware Qeco/coeq id14232 View details United States Education
    Ransomware Pennsylvania State Education Association id14227 View details United States Education
    Ransomware Stratford School Academy id14211 View details United Kingdom Education
    Ransomware Project Hospitality id14142 View details United States Healthcare / Pharma
    Ransomware White Mountain Backpacks id14132 View details Australia Other
    Ransomware Sports & Spine Orthopaedics id14112 View details United States Other
    Ransomware Corbally Gartland and Rappleyea id14060 View details Ireland Finance / Legal / Insurance
    Ransomware NewsBank id13990 View details United States Finance / Legal / Insurance
    Ransomware Affordable Tools id13987 View details United States Communication / Marketing
    Ransomware Kronick Moskovitz Tiedemann & Girard id13947 View details United States Other
    Ransomware Engedi id13940 View details Australia Communication / Marketing
    Ransomware Olympus Financial id13913 View details United States Finance / Legal / Insurance
    Ransomware Waynesboro Nurseries id13898 View details United States Public Sector
    Ransomware Sterling Rope id13860 View details United States Manufacturing / Engineering
    Ransomware Liberty Resources id13839 View details United States Other
    Ransomware The Washington Times id13831 View details United States Other
    Ransomware The White Center Community Development Association id13808 View details United States NGOs / Associations
    Ransomware Moser Wealth Advisors id13780 View details United States Finance / Legal / Insurance
    Ransomware Sumter County Sheriff id13747 View details United States Public Sector
    Ransomware Bayhealth Hospital id13727 View details United States Healthcare / Pharma
    Ransomware Maryville Academy id13687 View details United States Education
    Ransomware Ranney School id13684 View details United States Education
    Ransomware City of Columbus, Ohio id13622 View details United States Public Sector
    Ransomware New Jersey City University id13587 View details United States Education
    Ransomware Computer Networking Solutions id13586 View details United States Services
    Ransomware Community Care Alliance id13583 View details United States Communication / Marketing
    Ransomware LawDepot id13477 View details United States Finance / Legal / Insurance
    Ransomware Queens County Public Administrator id13457 View details United States Public Sector
    Ransomware Law Offices of the Public Defender - New Mexico id13425 View details Mexico Finance / Legal / Insurance
    Ransomware Gandara Center id13412 View details United States Communication / Marketing
    Ransomware Goede, DeBoest & Cross, PLLC. id13359 View details Finance / Legal / Insurance
    Ransomware BrownWinick id13344 View details Finance / Legal / Insurance
    Ransomware MYC Media id13282 View details Germany Communication / Marketing
    Ransomware DRM Resources id13205 View details United States Other
    Ransomware Erivan Gecom Inc id13107 View details Canada Manufacturing / Engineering
    Ransomware Production Machine & Enterprises id13032 View details United States Communication / Marketing
    Ransomware CETOS Services id13031 View details Germany Services
    Ransomware Kiemle-Hankins id13030 View details United States Manufacturing / Engineering
    Ransomware California Rice Exchange id12932 View details United States Agriculture / Food
    Ransomware Rob's Whole Health Pharmacy id12783 View details Canada Healthcare / Pharma
    Ransomware ICC id12683 View details United States Communication / Marketing
    Ransomware Widdop & Co. id12615 View details United Kingdom Communication / Marketing
    Ransomware Surrey Place Healthcare & Rehabilitation id12557 View details United States Healthcare / Pharma leaked