Ransomware Group intelligence

Rhysida

Active

Track Rhysida with 274 published victims and 7 known leak locations in a single intelligence view.

Victims 274 Known published victims in this dataset
First discovered 2023-06-05 Earliest victim discovery date
Last discovered 2026-06-18 Latest victim discovery date
Inactive since 40 days Days since the latest known victim
Top country United States 121 victims
Known locations 7 Leak or negotiation infrastructure tracked

Overview

Rhysida is tracked by Breach House as a ransomware group with 274 published victims.

United States is currently the most targeted country in this dataset.

7 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (7)

    Label Type Availability Links
    Leak location 1 Onion service Unknown rhysidafohrhyy2aszi7bm32tnjat5xri65fopcxkdfxhi4tidsg7cad.onion
    Leak location 2 Onion service Unknown rhysidafohrhyy2aszi7bm32tnjat5xri65fopcxkdfxhi4tidsg7cad.onion
    Leak location 3 Onion service Unknown rhysidafohrhyy2aszi7bm32tnjat5xri65fopcxkdfxhi4tidsg7cad.onion
    Leak location 4 Onion service Unknown rhysidafc6lm7qa2mkiukbezh7zuth3i4wof4mh2audkymscjm6yegad.onion
    Leak location 5 Onion service Unknown grhysidafc6lm7qa2mkiukbezh7zuth3i4wof4mh2audkymscjm6yegad.onion
    Leak location 6 Onion service Unknown rhysidaeoxtkejwuheks3a7htk4zn3dfuynt5mqw6oawlcx6kcxjdeyd.onion
    Leak location 7 Onion service Unknown rhysidaqho36b6i6mvpmy5di4ro5zglovtxixrirky6q3fgack7q5uyd.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (274)

    Search, filter and paginate the victim timeline for Rhysida. Showing 101–200 of 274.

    Type Target Discovered Country Business Category Intel Link
    Ransomware BH Aircraft Company, Inc. id17457 View details United States Communication / Marketing
    Ransomware My New Jersey Dentist id17456 View details United States Healthcare / Pharma
    Ransomware Town Counsel Law & Litigation id17455 View details United States Finance / Legal / Insurance
    Ransomware Pembina Trails School Division id17070 View details Canada Education
    Ransomware Carthage Police Department id16957 View details United States Public Sector
    Ransomware ORU Mabee Center id16820 View details United States Healthcare / Pharma
    Ransomware TG3 Electronics id16716 View details United States Other
    Ransomware The Chicano Federation id16654 View details United States NGOs / Associations
    Ransomware Qualinet id16576 View details Canada Other
    Ransomware Sunflower Medical Group id16520 View details United States Healthcare / Pharma
    Ransomware Montreal North id16489 View details Canada Public Sector
    Ransomware T Smiles Dental id16383 View details Canada Healthcare / Pharma
    Ransomware Avstar Fuel Systems id16156 View details United States Energy
    Ransomware Rutherford County Schools id15977 View details United States Education
    Ransomware Matlock Security Services id15904 View details United States Services
    Ransomware Goodwill North Central Texas id15806 View details United States Hospitality / Food & Beverage / Tourism
    Ransomware Delmar International id15719 View details Canada Transportation / Travel / Logistics
    Ransomware Vermilion Parish School System id15664 View details United States Education
    Ransomware Bishop Ireton High School id15531 View details United States Retail / E-commerce
    Ransomware American Addiction Centers id15359 View details United States Telecommunications
    Ransomware Granite School District id15237 View details United States Education
    Ransomware Fylde Coast Academy Trust id15161 View details United Kingdom Education
    Ransomware Hope Valley Recovery id15104 View details United States Communication / Marketing
    Ransomware De Rose Lawyers id14980 View details Canada Finance / Legal / Insurance
    Ransomware Easterseals id14905 View details United States Services
    Ransomware Henry County Schools id14778 View details United States Education
    Ransomware Microworks id14768 View details Japan Hospitality / Food & Beverage / Tourism
    Ransomware Axis Health System id14720 View details United States Healthcare / Pharma
    Ransomware Golden Age Nursing Home id14570 View details Australia Healthcare / Pharma
    Ransomware Plastics Plus id14515 View details Canada Manufacturing / Engineering
    Ransomware Shenango Area School District id14471 View details United States NGOs / Associations
    Ransomware Daughterly Care id14408 View details Australia Communication / Marketing
    Ransomware Greene Acres Nursing Home id14392 View details United States Healthcare / Pharma
    Ransomware Port of Seattle/Seattle-Tacoma International Airport (SEA) id14348 View details United States Transportation / Travel
    Ransomware Qeco/coeq id14232 View details United States Education
    Ransomware Pennsylvania State Education Association id14227 View details United States Education
    Ransomware Stratford School Academy id14211 View details United Kingdom Education
    Ransomware Project Hospitality id14142 View details United States Healthcare / Pharma
    Ransomware White Mountain Backpacks id14132 View details Australia Other
    Ransomware Sports & Spine Orthopaedics id14112 View details United States Other
    Ransomware Corbally Gartland and Rappleyea id14060 View details Ireland Finance / Legal / Insurance
    Ransomware NewsBank id13990 View details United States Finance / Legal / Insurance
    Ransomware Affordable Tools id13987 View details United States Communication / Marketing
    Ransomware Kronick Moskovitz Tiedemann & Girard id13947 View details United States Other
    Ransomware Engedi id13940 View details Australia Communication / Marketing
    Ransomware Olympus Financial id13913 View details United States Finance / Legal / Insurance
    Ransomware Waynesboro Nurseries id13898 View details United States Public Sector
    Ransomware Sterling Rope id13860 View details United States Manufacturing / Engineering
    Ransomware Liberty Resources id13839 View details United States Other
    Ransomware The Washington Times id13831 View details United States Other
    Ransomware The White Center Community Development Association id13808 View details United States NGOs / Associations
    Ransomware Moser Wealth Advisors id13780 View details United States Finance / Legal / Insurance
    Ransomware Sumter County Sheriff id13747 View details United States Public Sector
    Ransomware Bayhealth Hospital id13727 View details United States Healthcare / Pharma
    Ransomware Maryville Academy id13687 View details United States Education
    Ransomware Ranney School id13684 View details United States Education
    Ransomware City of Columbus, Ohio id13622 View details United States Public Sector
    Ransomware New Jersey City University id13587 View details United States Education
    Ransomware Computer Networking Solutions id13586 View details United States Services
    Ransomware Community Care Alliance id13583 View details United States Communication / Marketing
    Ransomware LawDepot id13477 View details United States Finance / Legal / Insurance
    Ransomware Queens County Public Administrator id13457 View details United States Public Sector
    Ransomware Law Offices of the Public Defender - New Mexico id13425 View details Mexico Finance / Legal / Insurance
    Ransomware Gandara Center id13412 View details United States Communication / Marketing
    Ransomware Goede, DeBoest & Cross, PLLC. id13359 View details Finance / Legal / Insurance
    Ransomware BrownWinick id13344 View details Finance / Legal / Insurance
    Ransomware MYC Media id13282 View details Germany Communication / Marketing
    Ransomware DRM Resources id13205 View details United States Other
    Ransomware Erivan Gecom Inc id13107 View details Canada Manufacturing / Engineering
    Ransomware Production Machine & Enterprises id13032 View details United States Communication / Marketing
    Ransomware CETOS Services id13031 View details Germany Services
    Ransomware Kiemle-Hankins id13030 View details United States Manufacturing / Engineering
    Ransomware California Rice Exchange id12932 View details United States Agriculture / Food
    Ransomware Rob's Whole Health Pharmacy id12783 View details Canada Healthcare / Pharma
    Ransomware ICC id12683 View details United States Communication / Marketing
    Ransomware Widdop & Co. id12615 View details United Kingdom Communication / Marketing
    Ransomware Surrey Place Healthcare & Rehabilitation id12557 View details United States Healthcare / Pharma
    Ransomware Unimed Vales do Taquari e Rio Pardo id12392 View details Brazil Healthcare / Pharma
    Ransomware Lopez Hnos id12248 View details Argentina Manufacturing / Engineering
    Ransomware CDSHotels id12150 View details Italy Hospitality / Food & Beverage / Tourism
    Ransomware Ministerio de Desarrollo Local id12118 View details El Salvador Public Sector
    Ransomware Hernando County id11629 View details United States Public Sector
    Ransomware Oki Golf id11626 View details United States Communication / Marketing
    Ransomware Malaysian Industrial Development Finance id11535 View details Malaysia Finance / Legal / Insurance
    Ransomware Seven Seas Technology id11486 View details United Arab Emirates IT
    Ransomware El Debate id11378 View details Mexico Other
    Ransomware MarineMax id11295 View details United States Other
    Ransomware Kolbe Striping id11289 View details United States Other
    Ransomware Brooks Tropicals id11187 View details United States Other
    Ransomware Ann & Robert H. Lurie Children's Hospital of Chicago id10994 View details United States Healthcare / Pharma
    Ransomware Ironrock id10991 View details United States Other
    Ransomware ASP BasilicataASM MateraIRCCS CROB id10855 View details Italy Other
    Ransomware CNPC Peru S.A. id10634 View details Peru Other
    Ransomware Lee Spring id10418 View details United States Communication / Marketing
    Ransomware The Lutheran World Federation id10361 View details Switzerland NGOs / Associations
    Ransomware Aspiration Training id10342 View details United Kingdom Education
    Ransomware Abdali Hospital id10299 View details Jordan Healthcare / Pharma
    Ransomware Tshwane University of Technology id10298 View details South Africa IT
    Ransomware Kauno Technologijos Universitetas id10083 View details IT
    Ransomware Grupo Jose Alves id9970 View details Other