Ransomware Group intelligence

Rhysida

Active

Track Rhysida with 297 published victims and 7 known leak locations in a single intelligence view.

BREACH HOUSE ALERTS

Want an alert every time a new ransomware post is published?

Choose the feeds and the countries you care about — we email you when they move.

Victims 297 Known published victims in this dataset

First discovered 2023-06-05 Earliest victim discovery date

Last discovered 2026-09-10 Latest victim discovery date

Inactive since 1 days Days since the latest known victim

Top country United States 128 victims

Known locations 7 Leak or negotiation infrastructure tracked

Rhysida is tracked by Breach House as a ransomware group with 297 published victims.

United States is currently the most targeted country in this dataset.

7 known leak locations are currently associated with this group.

Leaked 12 37.5%
Pending 20 62.5%
Deleted 0 0.0%

Top Countries

Distribution

Label	Type	Availability	Links
Leak location 7	Onion service	Up checked 4h ago	`rhysidaqho36b6i6mvpmy5di4ro5zglovtxixrirky6q3fgack7q5uyd.onion`
Leak location 4	Onion service	Up checked 4h ago	`rhysidafc6lm7qa2mkiukbezh7zuth3i4wof4mh2audkymscjm6yegad.onion`
Leak location 1	Onion service	Up checked 4h ago	`rhysidafohrhyy2aszi7bm32tnjat5xri65fopcxkdfxhi4tidsg7cad.onion`
Leak location 2	Onion service	Up checked 4h ago	`rhysidafohrhyy2aszi7bm32tnjat5xri65fopcxkdfxhi4tidsg7cad.onion`
Leak location 3	Onion service	Up checked 4h ago	`rhysidafohrhyy2aszi7bm32tnjat5xri65fopcxkdfxhi4tidsg7cad.onion`
Leak location 6	Onion service	Down checked 4h ago	`rhysidaeoxtkejwuheks3a7htk4zn3dfuynt5mqw6oawlcx6kcxjdeyd.onion`
Leak location 5	Onion service	Down checked 4h ago	`grhysidafc6lm7qa2mkiukbezh7zuth3i4wof4mh2audkymscjm6yegad.onion`

Not identified 47
Education 44
Communication / Marketing 41
Healthcare / Pharma 33
Public Sector 27
Manufacturing / Engineering 17
Finance / Legal / Insurance 16
Services 14
Retail / E-commerce 7
IT 7
NGOs / Associations 6
Transportation / Travel / Logistics 6
Construction / Real Estate 5
Telecommunications 3
Hospitality / Food & Beverage / Tourism 3
Energy 2
Agriculture / Food 1

Typical Attacks (9)

▼

MITRE ATT&CK does not currently catalogue Rhysida, so this is our assessment of the techniques it uses, drawn from public reporting. The techniques themselves, and every "what that means" definition below, come from MITRE ATT&CK v19.2. Confidence: medium. Treat it as orientation, not attribution.

T1059.001 PowerShell Execution

What they do: rhysida executes malicious commands via PowerShell scripts to stage payloads and manipulate system behavior.

What that means: Adversaries may abuse PowerShell commands and scripts for execution.
T1547.001 Registry Run Keys / Startup Folder PersistencePrivilege Escalation

What they do: rhysida modifies registry run keys to ensure malware execution upon system reboot for persistence.

What that means: Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key.
T1685 Disable or Modify Tools Defense Impairment

What they do: rhysida disables antivirus tools and security software to prevent detection and hinder incident response efforts.

What that means: Adversaries may disable, degrade, or tamper with security tools or applications (e.g., endpoint detection and response (EDR) tools, intrusion detection systems (IDS), antivirus, logging agents, sensors, etc.) to impair or reduce visibility of defensive capabilities.
T1027.016 Junk Code Insertion Stealth

What they do: rhysida inserts junk code into legitimate binaries to evade static analysis and detection by security tools.

What that means: Adversaries may use junk code / dead code to obfuscate a malware’s functionality.
T1070.004 File Deletion Stealth

What they do: rhysida deletes Volume Shadow Copies and backup directories via vssadmin and native commands to eliminate recovery options.

What that means: Adversaries may delete files left behind by the actions of their intrusion activity.
T1018 Remote System Discovery Discovery

What they do: rhysida performs remote system discovery to identify additional hosts for lateral movement within the victim network.

What that means: Adversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for Lateral Movement from the current system.
T1135 Network Share Discovery Discovery

What they do: rhysida scans network shares using Windows tools to identify victim files and expand foothold across the network.

What that means: Adversaries may look for folders and drives shared on remote systems as a means of identifying sources of information to gather as a precursor for Collection and to identify potential systems of interest for Lateral Movement.
T1567.002 Exfiltration to Cloud Storage Exfiltration

What they do: rhysida exfiltrates stolen data via encrypted channels to pressure victims into paying ransom.

What that means: Adversaries may exfiltrate data to a cloud storage service rather than over their primary command and control channel.
T1486 Data Encrypted for Impact Impact

What they do: rhysida encrypts victim files using custom ransomware binaries targeting critical data across affected systems.

What that means: Adversaries may encrypt data on target systems or on large numbers of systems in a network to interrupt availability to system and network resources.

Tools Observed (8)

▼

Software Rhysida has been seen using, grouped by what it is used for. Legitimate administration tools appear here because these actors routinely abuse them — presence in this list is not itself malicious.

Discovery & enumeration

PowerView

Exfiltration

WinSCP

LOLBAS (living-off-the-land binaries)

NTDS Utility (ntdsutil) PsExec Windows Event Utility (wevtutil) WMIC

Offensive security tooling

Impacket

Remote monitoring & management

AnyDesk

Tool data from Ransomware Tool Matrix by BushidoUK, licensed CC BY 4.0. Grouped by purpose and matched to this group by Breach House.

Ransom Notes (1)

▼

The note this group leaves on a compromised machine. Click a filename to read it.

CriticalBreachDetected.txt txt · 1479 chars

Critical Breach Detected - Immediate Response Required

Dear company,

This is an automated alert from cybersecurity team Rhysida. An unfortunate situation has arisen - your digital ecosystem has been compromised, and a substantial amount of confidential data has been exfiltrated from your network. The potential ramifications of this could be dire, including the sale, publication, or distribution of your data to competitors or media outlets. This could inflict significant reputational and financial damage.

However, this situation is not without a remedy.

Our team has developed a unique key, specifically designed to restore your digital security. This key represents the first and most crucial step in recovering from this situation. To utilize this key, visit our secure portal: rhysidafohrhyy2aszi7bm32tnjat5xri65fopcxkdfxhi4tidsg7cad.onion with your secret key [snip]

It's vital to note that any attempts to decrypt the encrypted files independently could lead to permanent data loss. We strongly advise against such actions.

Time is a critical factor in mitigating the impact of this breach. With each passing moment, the potential damage escalates. Your immediate action and full cooperation are required to navigate this scenario effectively.

Rest assured, our team is committed to guiding you through this process. The journey to resolution begins with the use of the unique key. Together, we can restore the security of your digital environment.

Best regards

View on RansomLook

Ransom-note text from RansomLook, licensed CC BY 4.0.

Victims (297)

Search, filter and paginate the victim timeline for Rhysida. Showing 201–297 of 297.

Type	Target	Discovered	Country	Business Category	Intel Link	Leak status
Ransomware	Unimed Vales do Taquari e Rio Pardo id12392 View details	2024-05-08	Brazil	Healthcare / Pharma	—	—
Unimed Vales do Taquari e Rio Pardo We are the largest healthcare cooperative in the world. ID 12392
Ransomware	Lopez Hnos id12248 View details	2024-05-02	Argentina	Manufacturing / Engineering	—	—
Lopez Hnos Lopez Hnos is a leading company dedicated to offer a wide range of products in three business units: bicycles, bike parts and motorcycle parts with distribution throughout Argentina. ID 12248
Ransomware	CDSHotels id12150 View details	2024-04-26	Italy	Hospitality / Food & Beverage / Tourism	—	—
CDSHotels For thirty years our friendly staff, professionalism and attention to detail make CDSHotels a leader in the hospitality world. ID 12150
Ransomware	Ministerio de Desarrollo Local id12118 View details	2024-04-23	El Salvador	Public Sector		—
Ministerio de Desarrollo Local The Ministry of Local Development is the government entity in charge of bringing investment and infrastructure works to the country's municipalities. More ID 12118
Ransomware	Hernando County id11629 View details	2024-04-12	United States	Public Sector	—	—
Hernando County ID 11629
Ransomware	Oki Golf id11626 View details	2024-04-12	United States	Communication / Marketing	—	—
Oki Golf Oki Golf is a collection of 11 Seattle area golf courses, including The Golf Club at Newcastle, providing championship golf course layouts and outstanding course conditions to players of all skill levels. ID 11626
Ransomware	Malaysian Industrial Development Finance id11535 View details	2024-04-07	Malaysia	Finance / Legal / Insurance	—	—
Malaysian Industrial Development Finance MIDF, established in 1960 and based in Kuala Lumpur, is a financial development institution to modernize Malaysia's manufacturing industries. ID 11535
Ransomware	Seven Seas Technology id11486 View details	2024-04-03	United Arab Emirates	IT	—	—
Seven Seas Technology Seven Seas Technology has chosen a collaborative, multi-cloud strategy that puts customers first by partnering with most of the major technology vendors. We help our customers innovate their processes, create valuable connections and rapport with their business and increase their productivity. ID 11486
Ransomware	El Debate id11378 View details	2024-03-26	Mexico	Other	—	—
El Debate El Debate is a Mexican newspaper published by El Debate S.A. de C.V. of Culiacan, Sinaloa. ID 11378
Ransomware	MarineMax id11295 View details	2024-03-20	United States	Other	—	—
MarineMax ID 11295
Ransomware	Kolbe Striping id11289 View details	2024-03-20	United States	Other	—	—
Kolbe Striping Kolbe Striping offers both durable and lasting pavement marking as well as temporary markings designed to suit your needs. ID 11289
Ransomware	Brooks Tropicals id11187 View details	2024-03-12	United States	Other	—	—
Brooks Tropicals Brooks Tropicals grows its popular Caribbean Red papayas in several Caribbean locales. ID 11187
Ransomware	Ann & Robert H. Lurie Children's Hospital of Chicago id10994 View details	2024-02-27	United States	Healthcare / Pharma	—	—
Ann & Robert H. Lurie Children's Hospital of Chicago Ann & Robert H. Lurie Children's Hospital of Chicago provides superior pediatric care in a setting that offers the latest benefits and innovations in medical technology, research and family-friendly design. ID 10994
Ransomware	Ironrock id10991 View details	2024-02-26	United States	Other	—	—
Ironrock Ironrock is a manufacturer of high quality indoor/outdoor unglazed ceramic quarry tile, and architectural thin brick. ID 10991
Ransomware	ASP BasilicataASM MateraIRCCS CROB id10855 View details	2024-02-15	Italy	Other	—	—
ASP BasilicataASM MateraIRCCS CROB ... ID 10855
Ransomware	CNPC Peru S.A. id10634 View details	2024-02-01	Peru	Other	—	—
CNPC Peru S.A. CNPC Peru S.A., formerly known as Petrobras Energia Peru S.A., operates in the country since 1993. ID 10634
Ransomware	Lee Spring id10418 View details	2024-01-13	United States	Communication / Marketing	—	—
Lee Spring Lee Spring manufactures and distributes mechanical springs, wire forms, stampings and fourslide parts worldwide. ID 10418
Ransomware	The Lutheran World Federation id10361 View details	2024-01-06	Switzerland	NGOs / Associations	—	—
The Lutheran World Federation ID 10361
Ransomware	Aspiration Training id10342 View details	2024-01-01	United Kingdom	Education		—
Aspiration Training Aspiration Training is an award-winning specialist training provider, delivering qualifications in Dental, Adult Care and Early Years for over 20 years. ID 10342
Ransomware	Abdali Hospital id10299 View details	2023-12-26	Jordan	Healthcare / Pharma	—	—
Abdali Hospital Abdali Hospital is a 200-bed multi-specialty hospital with the mission to provide best practice patient-centred care and promote research and education. ID 10299
Ransomware	Tshwane University of Technology id10298 View details	2023-12-26	South Africa	IT	—	—
Tshwane University of Technology Tshwane University of Technology is a higher education institution in South Africa that came into being through a merger of three technikons - Technikon Northern Gauteng, Technikon North-West and Technikon Pretoria. ID 10298
Ransomware	Kauno Technologijos Universitetas id10083 View details	2023-12-19		IT		—
Kauno Technologijos Universitetas KTU offers 5 study programmes in computer sciences. ID 10083
Ransomware	Grupo Jose Alves id9970 View details	2023-12-12		Other	—	—
Grupo Jose Alves ID 9970
Ransomware	Insomniac Games id9969 View details	2023-12-12		Finance / Legal / Insurance	—	—
Insomniac Games Insomniac Games, Inc. is an American video game developer based in Burbank, California. ID 9969
Ransomware	Holding Slovenske elektarne id9951 View details	2023-12-10		Other	—	—
Holding Slovenske elektarne ID 9951
Ransomware	Hse id9950 View details	2023-12-10		Other	—	—
Hse ID 9950
Ransomware	Qatar Racing and Equestrian Club id9949 View details	2023-12-09	Qatar	Communication / Marketing		—
Qatar Racing and Equestrian Club Established in 1975 Qatar Racing and Equestrian Club is mandated with representing, promoting and advancing equine and equestrian initiatives from grassroots programs to the international arena. ID 9949
Ransomware	Travian Games id9922 View details	2023-12-08		Other		—
Travian Games Travian Games is one of the world's leading PC games companies, based in Munich. ID 9922
Ransomware	Tcman id9920 View details	2023-12-08		Communication / Marketing		—
Tcman Tcman was born with the vocation to provide real solutions to the need to improve the management of industrial assets. ID 9920
Ransomware	King Edward VII's Hospital id9778 View details	2023-11-29		Healthcare / Pharma	—	—
King Edward VII's Hospital Unique files are presented to your attention! Data from the Royal Family! A large amount of patient and employee data. Sale in one lot!!King Edward VII's Hospital is an independent charitable hospital with a proud history of Royal Patronage, discreetly located within London's Harley Street medical district. ID 9778
Ransomware	Bangkok University id9729 View details	2023-11-27	Thailand	Education	—	—
Bangkok University Bangkok University has operated since 1962, is one of the oldest and largest private, non-profit universities in Thailand. ID 9729
Ransomware	NC Central University id9728 View details	2023-11-27		Education	—	—
NC Central University North Carolina Central University (NCCU), a distinguished institution nestled in the heart of Durham, North Carolina, has earned national acclaim for its unwavering commitment to academic excellence, groundbreaking research opportunities and remarkable achievements in securing grants for innovative projects. ID 9728
Ransomware	Energy China id9705 View details	2023-11-24	China	Energy		pending
Energy China China Energy Engineering Corporation or Energy China, is a Chinese state-owned energy conglomerate, with headquarters in Chaoyang District, Beijing. ID 9705
Ransomware	St Edmund's College & Prep School id9646 View details	2023-11-21		Education		—
St Edmund's College & Prep School Located in 400 acres of beautiful Hertfordshire countryside, St Edmund's College and Prep School is a safe, stimulating environment for students aged 3-18, with boarding available from age 11. ID 9646
Ransomware	British Library id9622 View details	2023-11-20	United Kingdom	Other		—
British Library The British Library is a research library in London that is the national library of the United Kingdom. It is one of the largest libraries in the worl. ID 9622
Ransomware	MHM Health id9490 View details	2023-11-11		Healthcare / Pharma		—
MHM Health MHM Health is dedicated to help our partner Independent Physician Associations remain independent as the healthcare industry transitions to value-based care. ID 9490
Ransomware	Azienda Ospedaliera Universitaria Integrata di Verona id9476 View details	2023-11-10	Italy	Healthcare / Pharma		—
Azienda Ospedaliera Universitaria Integrata di Verona The Verona Integrated University Hospital Company is a hospital facility that is part of the Veneto Health Service, based in the city of Verona and is one of the largest hospitals in Italy. ID 9476
Ransomware	Indah Water Konsortium id9436 View details	2023-11-07	Malaysia	Finance / Legal / Insurance		pending
Indah Water Konsortium Indah Water Konsortium, a company owned by Minister of Finance Incorporated, is Malaysia's national sewerage company which has been entrusted with the tasks of developing and maintaining a modern and efficient sewerage system for all Malaysians. ID 9436
Ransomware	Mount St. Mary's Seminary id9410 View details	2023-11-06		Communication / Marketing		—
Mount St. Mary's Seminary Mount St. Mary's Seminary is the oldest division of the Athenaeum. The seminary has as its mission the preparation of candidates for the Catholic priesthood�a gift of God and the fruit of an integrated approach to formation. ID 9410
Ransomware	SMH Group id9391 View details	2023-11-05		Communication / Marketing		—
SMH Group In 2022, the SMH Group was born, with all the individual offices having their original names prefixed with 'SMH'. ID 9391
Ransomware	GO! Handelsschool Aalst id9345 View details	2023-11-02	Belgium	Education		—
GO! Handelsschool Aalst GO! Handelsschool Aalst is een milieubewuste school in het centrum van Aalst en streeft naar hoogstaand onderwijs op maat in een open sfeer. ID 9345
Ransomware	Northwest Eye Care Professionals id9085 View details	2023-10-14		Services		pending
Northwest Eye Care Professionals Serving Clackamas and the surrounding communities in Vancouver and Beaverton, we offer comprehensive eye health services for all members of your family as well as specialty services. ID 9085
Ransomware	Southern Arkansas University id9001 View details	2023-10-09		Education		—
Southern Arkansas University Southern Arkansas University offers personalized tour visits, faculty and staff who invest in student success, and a caring campus community. More ID 9001
Ransomware	Camara Municipal de Gondomar id8976 View details	2023-10-06	Portugal	Public Sector		—
Camara Municipal de Gondomar Discover Gondomar, a land of historical echoes, where the long history of generations attests to the identity of this Municipality. ID 8976
Ransomware	General Directorate of Migration of the Dominican Republic id8952 View details	2023-10-04	Dominican Republic	Public Sector		—
General Directorate of Migration of the Dominican Republic ID 8952
Ransomware	Federal University of Mato Grosso do Sul id8927 View details	2023-10-02	Brazil	Public Sector		—
Federal University of Mato Grosso do Sul The Federal University of Mato Grosso do Sul, is a public university located in the state of Mato Grosso do Sul in Brazil. ID 8927
Ransomware	Istituto Prosperius id8859 View details	2023-09-26	Italy	Communication / Marketing		pending
Istituto Prosperius Villa Cherubini reopens with a new facility within the Prosperius Institute health complex, established founded by Prof. Mario Bigazzi back in 1973. ID 8859
Ransomware	Ministry Of Finance (Kuwait) id8771 View details	2023-09-25	Kuwait	Public Sector		—
Ministry Of Finance (Kuwait) Ministry of Finance is one of the governmental bodies of Kuwait and part of the cabinet. ID 8771
Ransomware	Ort Harmelin College of Engineering id8752 View details	2023-09-23		Education	—	—
Ort Harmelin College of Engineering Ort Harmelin College of Engineering is an innovative technological college located in the heart of the hi-tech area, Sapir in Netanya. ID 8752
Ransomware	Holon Institute of Technology id8732 View details	2023-09-22	Israel	IT	—	—
Holon Institute of Technology HIT Holon Institute of Technology, is a well-established unique and multidisciplinary academic institution, which manages to maintain its young spirit as well as its dynamic and contemporary nature. ID 8732
Ransomware	Singing River Health System id8563 View details	2023-09-10		Healthcare / Pharma		pending
Singing River Health System Singing River Health System is both a mission-driven provider of health services and one of the largest employers on the Mississippi Gulf Coast. ID 8563
Ransomware	Core Desktop id8562 View details	2023-09-10	Australia	IT		pending
Core Desktop Core Desktop is a Microsoft Tier 1 CSP Partner delivering key IT managed solutions that merge legacy technology with innovative cloud solutions. ID 8562
Ransomware	IT-Center Syd id8556 View details	2023-09-09	Denmark	Education	—	—
IT-Center Syd IT Center South is an operations center for an administrative IT service community consisting of several state-owned educational institutions spread over 11 land registers around the region of Southern Denmark. More ID 8556
Ransomware	Prince George's County Public Schools id8292 View details	2023-08-25		Public Sector	—	—
Prince George's County Public Schools Prince George's County Public Schools (PGCPS), one of the nation's 20th largest school districts, has 201 schools and centers, more than 133,000 students and nearly 20,000 employees. ID 8292
Ransomware	Prospect Medical Holdings id8276 View details	2023-08-24		Healthcare / Pharma	—	—
Prospect Medical Holdings ID 8276
Ransomware	Pierce College id8220 View details	2023-08-21	United States	Education	—	—
Pierce College Pierce College creates quality educational opportunities for a diverse community of learners to thrive in an evolving world. ID 8220
Ransomware	Municipality of Ferrara id8151 View details	2023-08-16	Italy	Public Sector	—	—
Municipality of Ferrara Ferrara is a city and comune in Emilia-Romagna, northern Italy, capital city of the Province of Ferrara. ID 8151
Ransomware	National Institute of Social Services for Retirees and Pensioners id8120 View details	2023-08-12	Argentina	Education	—	—
National Institute of Social Services for Retirees and Pensioners ID 8120
Ransomware	Optimum Health Solutions id8090 View details	2023-08-09	Australia	Healthcare / Pharma	—	—
Optimum Health Solutions Optimum Health Solutions is Australia's leading preventative health company. ID 8090
Ransomware	Ramtha id8086 View details	2023-08-09		Other	—	—
Ramtha The teachings of Ramtha are a unique science. ID 8086
Ransomware	United Tractors id8029 View details	2023-08-03	Indonesia	Other	—	—
United Tractors United Tractors is a heavy equipment distribution company headquartered in Jakarta, Indonesia. ID 8029
Ransomware	ESMOD id7959 View details	2023-07-28		Education	—	—
ESMOD ESMOD, founded by master tailor Alexis Lavigne, has been one of the most prestigious fashion universities in the world since the first students crossed its threshold in 1841. ID 7959
Ransomware	ESKA Erich Schweizer id7954 View details	2023-07-28	Germany	Manufacturing / Engineering	—	—
ESKA Erich Schweizer ESKA is a leading German manufacturer of all types of fuses and passive components. ID 7954
Ransomware	Rouzbeh Educational Complex id7951 View details	2023-07-28	Iran, Islamic Republic of	Education		—
Rouzbeh Educational Complex The industry in which Rouzbeh Educational Complex operates is educational institution. The country where Rouzbeh Educational Complex is located is Iran, while the company's headquarters is in Tehran. ID 7951
Ransomware	University of Salerno id7453 View details	2023-07-26	Italy	Education	—	—
University of Salerno The University of Salerno is a university located in Fisciano and in Baronissi, Italy. Its main campus is located in Fisciano while the Faculty of Medicine is located in Baronissi. ID 7453
Ransomware	University of the West of Scotland id7437 View details	2023-07-25	United Kingdom	Education	—	—
University of the West of Scotland ID 7437
Ransomware	Axity id7409 View details	2023-07-22		Other	—	—
Axity Axity is one of the leading IT companies in Latin America and home to the best talent. ID 7409
Ransomware	Lumberton Independent School District id7367 View details	2023-07-19		Education	—	—
Lumberton Independent School District Lumberton Independent School District is a public school district based in Lumberton, Texas. In addition to Lumberton, the district serves the city of Rose Hill Acres. ID 7367
Ransomware	Stephen F. Austin State University id7320 View details	2023-07-17	United States	Education	—	—
Stephen F. Austin State University Stephen F. Austin State University is a public university in Nacogdoches, Texas. More ID 7320
Ransomware	IRIS Informatique id7319 View details	2023-07-17		Transportation / Travel / Logistics	—	—
IRIS Informatique IRIS Informatique is a team of experts with many areas of expertise: Helpdesk, IT Logistics, IT Repair and Recycling, delegation of IT resources, etc. More ID 7319
Ransomware	ICT-College id7318 View details	2023-07-17		Education	—	—
ICT-College ICT-College's experienced staff are always available to help and answer questions. More ID 7318
Ransomware	Caterham High School id7301 View details	2023-07-14		Education	—	—
Caterham High School Caterham High is a community school that serves a richly diverse area of East London, with many ethnic groups and languages represented. More ID 7301
Ransomware	The Big Life group id7280 View details	2023-07-14		Services	—	—
The Big Life group Big Life is in the business of changing lives. We fight inequality by working with people and places to create opportunities and inspire change. More ID 7280
Ransomware	Citta Nuova id7196 View details	2023-07-10	Italy	Other	—	—
Citta Nuova Citta Nuova is an Italian publishing house established in Rome in 1959. More ID 7196
Ransomware	Kenya Bureau Of Standards id7164 View details	2023-07-07	Kenya	Communication / Marketing	—	—
Kenya Bureau Of Standards The Kenya Bureau of Standards (KEBS) has remained the premier government agency for the provision of Standards, Metrology and Conformity Assessment (SMCA) services since its inception in 1974. More ID 7164
Ransomware	Ayuntamiento de Arganda City Council id7107 View details	2023-07-03	Spain	Public Sector	—	—
Ayuntamiento de Arganda City Council Located in the southeast of the Community of Madrid, 25 kilometers from Madrid capital, Arganda del Rey can boast of having an extremely interesting natural environment, since part of its municipal district is included in the 'Parque Regional del Sureste', as well as having large green areas and particular ecosystems of remarkable environmental richness. More ID 7107
Ransomware	Hollywood Forever id7106 View details	2023-07-03		Other	—	—
Hollywood Forever Hollywood Forever is a full-service funeral home, crematory, cemetery, and cultural events center in the heart of Hollywood. More ID 7106
Ransomware	BM GROUP POLYTEC S.p.A. id7103 View details	2023-07-03		Manufacturing / Engineering	—	—
BM GROUP POLYTEC S.p.A. Polytec is the merger of two leading companies in automation, robotics , renewable energy and plant engineering, an internationally renowned company operating in the field of system integration, specializing in solutions and platforms that combine robotics, artificial intelligence, process automation and software to help manufacturing companies achieve the technological transformation they need to become smart factories. More ID 7103
Ransomware	Enfield Grammar School id7075 View details	2023-06-29		Education		—
Enfield Grammar School Enfield Grammar School is a boys' Comprehensive school and sixth form with academy status, founded in 1558, situated in Enfield Town in the London Borough of Enfield in North London. Documents Data Catalog: 18 GB, 76 Files 20% Not sold data was uploaded, data hunters, enjoy More ID 7075
Ransomware	Western National Group id7057 View details	2023-06-29		Construction / Real Estate	—	—
Western National Group Experts in the Western US multifamily real estate industry, Western National Group is an outstanding curator of investment opportunities, a team of industry-leading builders, and an accredited property management company. More ID 7057
Ransomware	Alberta Newsprint id7056 View details	2023-06-28	Canada	Communication / Marketing		—
Alberta Newsprint Founded in 1989, Alberta Newsprint is a manufacturer of premium newsprint and high bright paper. Documents Data Catalog: 28 GB, 45 785 Files 40% Not sold data was uploaded, data hunters, enjoy More ID 7056
Ransomware	iMatica id7035 View details	2023-06-27		Communication / Marketing		—
iMatica iMatica was born in 2001 in Girona and we have expanded throughout the peninsula to provide more and better service. The specialty of the house is the implementation of business management software, also called ERP or billing and accounting program. Documents Data Catalog: 717 GB, 568 473 Files 90% Not sold data was uploaded, data hunters, enjoy More ID 7035
Ransomware	Hochschule Kaiserslautern id7033 View details	2023-06-27	Germany	Education		—
Hochschule Kaiserslautern The Kaiserslautern University of Applied Sciences is a Hochschule (University of Applied Sciences) with 3 campuses located in Kaiserslautern, Germany, in Pirmasens, Germany and in Zweibrucken, Germany. Documents Data Catalog: 241 GB, 294 254 Files 40% Not sold data was uploaded, data hunters, enjoy More ID 7033
Ransomware	Fassi Gru S.p.A. id7023 View details	2023-06-26		Communication / Marketing		—
Fassi Gru S.p.A. Fassi Gru S.p.A. - Loader cranes manufacturer since 1965. Fassi Gru is the market leader among Italian producers. Its product range and sales numbers place it among the top producers of hydraulic cranes in the world. Documents Data Catalog: 490 GB, 1 120 626 Files 100% All files was uploaded to public access, data hunters, enjoy More ID 7023
Ransomware	Avannubo id6988 View details	2023-06-21		Telecommunications		—
Avannubo Global provider of technological services with an official license for IP telephony, mobile phones and Internet access. Documents Data Catalog: 165Gb, 198760 Files 100% All files was uploaded to public access, data hunters, enjoy More ID 6988
Ransomware	SAPROS id6961 View details	2023-06-20	Germany	Communication / Marketing		—
SAPROS Sapros is a manufacturer, and supplier of food products like salads, vegetables, fruit and high-quality antipasti. Documents 100% All files was uploaded to public access, data hunters, enjoy More ID 6961
Ransomware	EDER id6926 View details	2023-06-18	Austria	Manufacturing / Engineering		pending
EDER The EDER group of companies includes the brick plants in Peuerbach and Weibern, four ready-mixed concrete plants in Upper Austria, Systembau Eder with prefabricated stairs, constructive concrete components and double-wall systems for industrial building construction and its own vehicle fleet. Documents 100% All files was uploaded to public access, data hunters, enjoy More ID 6926
Ransomware	Tyconz id6924 View details	2023-06-18		Public Sector		—
Tyconz Founded in 2011, TYCONZ has become one of the most experienced SAP-certified consultancy firms. Documents 100% All files was uploaded to public access, data hunters, enjoy More ID 6924
Ransomware	Ziegelwerk Eder id6922 View details	2023-06-17	Austria	Public Sector		—
Ziegelwerk Eder In 1996, the Upper Austrian family company EDER built a state-of-the-art brick factory in Freital near Dresden. Documents 100% All files was uploaded to public access, data hunters, enjoy More ID 6922
Ransomware	Koper Automatisering id6881 View details	2023-06-15	Netherlands	Construction / Real Estate		—
Koper Automatisering Koper Automatisering specializes in the development of specialized software for the food industry and floriculture. Documents 100% All files was uploaded to public access, data hunters, enjoy More ID 6881
Ransomware	Paris High School id6824 View details	2023-06-12		Education	—	—
Paris High School Paris High School is a learning community dedicated to developing well-rounded, productive, engaged citizens in a safe and supportive environment. More ID 6824
Ransomware	Northeastern State University id6823 View details	2023-06-12	United States	Education	—	—
Northeastern State University Northeastern State University is a public university with its main campus in Tahlequah, Oklahoma. More ID 6823
Ransomware	Ejercito de Chile id6803 View details	2023-06-10	Chile	Public Sector	—	—
Ejercito de Chile The Army of Chile is the branch of the Armed Forces of Chile in charge of the land defense of Chile, whose mission is to maintain the external security, sovereignty and territorial integrity of the Republic. More ID 6803
Ransomware	Haemokinesis id6736 View details	2023-06-05		Retail / E-commerce		—
Haemokinesis Haemokinesis specializes in research and development, laboratory systems, sales and distribution of immunohematology products. Documents 100% all files was uploaded to public access, data hunters, enjoy More ID 6736
Ransomware	Amstutz Produkte id6735 View details	2023-06-05	Switzerland	Communication / Marketing		—
Amstutz Produkte AMSTUTZ PRODUKTE AG is a leading Swiss manufacturer of chemicals and technical equipment for chemical applications. Documents 100% all files was uploaded to public access, data hunters, enjoy More ID 6735
Ransomware	The Thomas Hardye School id6734 View details	2023-06-05		Education		—
The Thomas Hardye School The Thomas Hardye School is a secondary academy school in Dorchester, Dorset, England. It is also part of the DASP group. Documents 100% all files was uploaded to public access, data hunters, enjoy More ID 6734
Ransomware	Collectivite Territoriale de Martinique id6733 View details	2023-06-05	Martinique	Public Sector		—
Collectivite Territoriale de Martinique The territorial collectivity of Martinique is a single French territorial collectivity that succeeds the overseas department and region of Martinique in all their rights and obligations on January 1, 2016. Documents 100% all files was uploaded to public access, data hunters, enjoy More ID 6733

Rhysida

Overview

Leak Status Distribution