ransomhouse
ransomware group · aka Ransom House, White Rose (affiliate/related group per some public trackers, 2023; not confirmed) · Exact origin unknown. 2022 vendor reporting (e.g., Advanced Intel) described likely Russian-speaking, experienced operators, possibly veterans of established ransomware crews; attribution unconfirmed. · active since March 2022 (first leak-site listings; vendor reporting from April 2022 with the AMD incident)
RansomHouse is a data-extortion operation first reported in spring 2022, best known for claiming large-scale data thefts such as the AMD and Seiko Epson breaches; in most incidents it extorts via threatened publication of stolen data, and researchers have noted limited evidence of actual file encryption. The group has been described as likely Russian-speaking with experienced operators and openly recruits affiliates and partners on criminal forums. Recent dashboard-tracked activity shows steady output: 24 victims posted since 2026-06-16 (6 in the last 30 days, 0 in the last 7), with the latest post on 2026-09-02. Recent listings span Japan (REXT Holdings, Nichirei), Brazil (Alya Construtora), Cyprus (TECHVENTURES BANK), and US municipalities (City of Beacon, City of McMinnville), indicating global, sector-agnostic targeting. No reliable public aggregate of illicit earnings exists.
- Data-theft extortion; threatens to publish stolen data without demonstrated file encryption in most cases
- Claims large-volume exfiltration (e.g., ~70 GB claimed in the April 2022 AMD incident)
- Tor-based leak site with countdown timers before data release
- Openly recruits affiliates/partners on criminal forums for access and exfiltration
- 2022 vendor reporting indicated use of purchased initial access from access brokers
- Posts taunting statements blaming victims' security failures to pressure payment
AMD - April 2022; ~70 GB of data claimed stolen; AMD confirmed the breach (widely reported), Seiko Epson - May 2022; customer and employee data exposed; company confirmed (widely reported), REXT Holdings Co., Ltd. (Japan) - dashboard-tracked leak-site listing, 2026, Nichirei (Japan) - dashboard-tracked leak-site listing, 2026, TECHVENTURES BANK S.A. - dashboard-tracked leak-site listing, 2026, Alya Construtora (Brazil) - dashboard-tracked leak-site listing, 2026, PCL Holding - dashboard-tracked leak-site listing, 2026, City of Beacon (NY, USA) - dashboard-tracked leak-site listing, 2026, City of McMinnville (OR, USA) - dashboard-tracked leak-site listing, 2026
No public figure.
Leak-site victims253 posts · newest first
| Victim | Discovered | Details |
|---|---|---|
| Lake Washington Institute of Technology | · Aug 2, 2024 | — |
| Al-Karam Textile Mills Pvt | · Aug 2, 2024 | — |
| Lago Group Spa | · Aug 2, 2024 | — |
| Valisana | · Jul 24, 2024 | — |
| Sibanye-Stillwater | · Jul 22, 2024 | — |
| Guaranteed Supply Company | · Jul 22, 2024 | — |
| RiverSoft | · Jul 22, 2024 | — |
| KuiperCompagnons | · Jul 19, 2024 | — |
| Infomedika | · Jul 18, 2024 | — |
| Ronglian Group | · Jul 10, 2024 | — |
| Creative Realities | · Jul 4, 2024 | — |
| Gestores Administrativos Reunidos | · Jun 28, 2024 | — |
| Francesco Parisi | · Jun 28, 2024 | — |
| Virum Apotek | · Jun 17, 2024 | — |
| United Urology Group | · May 23, 2024 | — |
| Advance Press | · May 22, 2024 | — |
| Royal Star & Garter | · May 22, 2024 | — |
| J & N Stone | · May 22, 2024 | — |
| Hedbergs | · May 22, 2024 | — |
| Cressex Community School | · May 22, 2024 | — |
| Berge Bulk | · May 20, 2024 | — |
| ABS-CBN Broadcasting | · May 17, 2024 | — |
| Gantan Beauty Industry | · May 17, 2024 | — |
| Isaacs Odinocki | · May 17, 2024 | — |
| Crescent Point Energy | · May 10, 2024 | — |
| Hong Kong College of Technology | · Apr 26, 2024 | — |
| STERCH - INTERNATIONAL s.r.o. | · Apr 24, 2024 | — |
| Army Welfare Trust | · Apr 24, 2024 | — |
| Hirsh Industries | · Apr 24, 2024 | — |
| Bank Pembangunan Daerah Banten Tbk PT | · Apr 23, 2024 | — |
| Lopesan Hotels | · Apr 16, 2024 | — |
| HAL Allergy | · Feb 29, 2024 | — |
| GCA Nederland | · Feb 26, 2024 | — |
| Webber International University | · Feb 26, 2024 | — |
| Wangkanai Group | · Feb 24, 2024 | — |
| Rapid Granulator | · Feb 24, 2024 | — |
| Shipleys LLP | · Feb 7, 2024 | — |
| Hbl Cpas, P.C. | · Feb 6, 2024 | — |
| Hawbaker Engineering | · Jan 24, 2024 | — |
| HOE Pharmaceuticals Sdn Bhd | · Jan 23, 2024 | — |
| Banco Promerica de la República Dominicana | · Dec 29, 2023 | — |
| Dameron Hospital | · Dec 13, 2023 | — |
| ALPS Ltd | · Nov 29, 2023 | — |
| First Financial Security | · Nov 28, 2023 | — |
| Warren General Hospital | · Nov 14, 2023 | — |
| Foursquare Healthcare | · Oct 21, 2023 | — |
| Van Oirschot | · Oct 10, 2023 | — |
| Hawkins Delafield Wood | · Sep 21, 2023 | — |
| Radley and Co | · Sep 21, 2023 | — |
| SAC Finance | · Sep 13, 2023 | — |
In the newsAll →
No articles mention this group yet.