ransomhouse
ransomware group · aka Ransom House, White Rose (affiliate/related group per some public trackers, 2023; not confirmed) · Exact origin unknown. 2022 vendor reporting (e.g., Advanced Intel) described likely Russian-speaking, experienced operators, possibly veterans of established ransomware crews; attribution unconfirmed. · active since March 2022 (first leak-site listings; vendor reporting from April 2022 with the AMD incident)
RansomHouse is a data-extortion operation first reported in spring 2022, best known for claiming large-scale data thefts such as the AMD and Seiko Epson breaches; in most incidents it extorts via threatened publication of stolen data, and researchers have noted limited evidence of actual file encryption. The group has been described as likely Russian-speaking with experienced operators and openly recruits affiliates and partners on criminal forums. Recent dashboard-tracked activity shows steady output: 24 victims posted since 2026-06-16 (6 in the last 30 days, 0 in the last 7), with the latest post on 2026-09-02. Recent listings span Japan (REXT Holdings, Nichirei), Brazil (Alya Construtora), Cyprus (TECHVENTURES BANK), and US municipalities (City of Beacon, City of McMinnville), indicating global, sector-agnostic targeting. No reliable public aggregate of illicit earnings exists.
- Data-theft extortion; threatens to publish stolen data without demonstrated file encryption in most cases
- Claims large-volume exfiltration (e.g., ~70 GB claimed in the April 2022 AMD incident)
- Tor-based leak site with countdown timers before data release
- Openly recruits affiliates/partners on criminal forums for access and exfiltration
- 2022 vendor reporting indicated use of purchased initial access from access brokers
- Posts taunting statements blaming victims' security failures to pressure payment
AMD - April 2022; ~70 GB of data claimed stolen; AMD confirmed the breach (widely reported), Seiko Epson - May 2022; customer and employee data exposed; company confirmed (widely reported), REXT Holdings Co., Ltd. (Japan) - dashboard-tracked leak-site listing, 2026, Nichirei (Japan) - dashboard-tracked leak-site listing, 2026, TECHVENTURES BANK S.A. - dashboard-tracked leak-site listing, 2026, Alya Construtora (Brazil) - dashboard-tracked leak-site listing, 2026, PCL Holding - dashboard-tracked leak-site listing, 2026, City of Beacon (NY, USA) - dashboard-tracked leak-site listing, 2026, City of McMinnville (OR, USA) - dashboard-tracked leak-site listing, 2026
No public figure.
Leak-site victims253 posts · newest first
| Victim | Discovered | Details |
|---|---|---|
| Low Keng Huat | · Sep 9, 2023 | — |
| Customer Elation - Business Information | · Jul 11, 2023 | — |
| Prada Gayoso | · Jun 16, 2023 | — |
| Roberto Verino Difusion | · Jun 16, 2023 | — |
| Wison Engineering | · Jun 14, 2023 | — |
| Mission Community Hospital | · Jun 1, 2023 | — |
| AvidXchange | · May 3, 2023 | — |
| 100X and ALL Clients | · May 1, 2023 | — |
| Albany ENT & Allergy Services | · Apr 29, 2023 | — |
| Tranztec Solutions | · Apr 26, 2023 | — |
| OMT Officine Meccaniche Torino S.p.A. | · Apr 26, 2023 | — |
| Aero Engine Solution INC | · Apr 3, 2023 | — |
| Hospital Clinic de Barcelona | · Mar 30, 2023 | — |
| AV Industries | · Mar 28, 2023 | — |
| Tanbridge House School | · Mar 27, 2023 | — |
| Cospec Srl | · Mar 24, 2023 | — |
| Comune Taggia | · Mar 24, 2023 | — |
| Design CATAPULT | · Mar 22, 2023 | — |
| Indonesia Power | · Mar 21, 2023 | — |
| Faraday Technology | · Mar 14, 2023 | — |
| St. Kitts & Nevis | · Mar 14, 2023 | — |
| Delaware Life Insurance Company | · Mar 10, 2023 | — |
| Audio Video | · Mar 1, 2023 | — |
| E&S Heating & Ventilation Ltd | · Mar 1, 2023 | — |
| AESCULAPIUS Farmaceutici | · Feb 23, 2023 | — |
| Bond It | · Feb 23, 2023 | — |
| Hospital Service SpA | · Feb 14, 2023 | — |
| Jeffries Morris | · Feb 10, 2023 | — |
| The DGCX | · Feb 7, 2023 | — |
| Holovis | · Jan 15, 2023 | — |
| Trans Maldivian Airways | · Jan 13, 2023 | — |
| IMI Hydronic Engineering | · Jan 12, 2023 | — |
| Republic of Vanuatu | · Dec 24, 2022 | — |
| Strem Chemicals | · Dec 23, 2022 | — |
| Keralty | · Dec 20, 2022 | — |
| BRYCON Construction | · Dec 6, 2022 | — |
| SMB Solutions | · Nov 22, 2022 | — |
| Lantek Systems Inс | · Oct 25, 2022 | — |
| ROFA INDUSTRIAL AUTOMATION | · Oct 12, 2022 | — |
| ADATA Technology | · Oct 12, 2022 | — |
| Severn Glocon Group | · Oct 12, 2022 | — |
| Mainstream Global Inc. | · Sep 21, 2022 | — |
| Carmen Copper Corporation | · Sep 19, 2022 | — |
| Ipca Laboratories | · Sep 10, 2022 | — |
| Saskatchewan Liquor and Gaming Authority | · Aug 18, 2022 | — |
| Jefferson Credit Union | · Aug 18, 2022 | — |
| Dellner Couplers AB | · Aug 18, 2022 | — |
| AHS Aviation Handling Services GmbH | · Aug 18, 2022 | — |
| SHOPRITE HOLDINGS LTD | · Aug 18, 2022 | — |
| Advanced Micro Devices, Inc | · Aug 18, 2022 | — |
In the newsAll →
No articles mention this group yet.