ZeroHour

ransomhub

Ransomware / extortion group tracked from leak-site posts

Victims · 7d
0flat
Victims · 30d
0active targets
Victims · 90d
0
All-time (tracked)
868since 2024-02-10
Last post
04-01 00:29UTC
Estimated earnings
public reporting
Profile not written yet: the pipeline profiles the most active groups first, a few per run.

Leak-site victims

VictimDiscoveredDetails
europtec.com · Apr 1, 2025
delta-life.com · Apr 1, 2025
intellioan.com · Apr 1, 2025
jackpotjunction.com · Apr 1, 2025
www.assisi.nl · Mar 29, 2025
phaus.us&phakr.com&phabodysystems.com · Mar 28, 2025
www.bassi.it · Mar 28, 2025
www.allmilmoe.com · Mar 27, 2025
brattenelectrictn.com · Mar 27, 2025
www.hongthongrice.com · Mar 26, 2025
www.fkm-elemente.de · Mar 26, 2025
conterra.com · Mar 26, 2025
www.DSelectrical.com · Mar 26, 2025
www.carolinaac.com · Mar 25, 2025
www.garbinc.com · Mar 25, 2025
www.mododoc.com · Mar 25, 2025
www.argentosc.com · Mar 25, 2025
www.ripplejunction.com · Mar 25, 2025
www.creativelogisticservices.com · Mar 25, 2025
www.afnigc.ca · Mar 25, 2025
www.cormidom.com.do · Mar 25, 2025
www.lions-online.org · Mar 25, 2025
www.solidworld.it · Mar 24, 2025
www.s3s.com · Mar 24, 2025
www.rivaldt.com · Mar 24, 2025
OMLTD.CO.JP · Mar 24, 2025
technicare.com · Mar 24, 2025
cisd.org · Mar 24, 2025
mnm.hu · Mar 24, 2025
texascompressionservices.com · Mar 24, 2025
www.solventacentroamerica.com · Mar 24, 2025
www.exemplar.com · Mar 24, 2025
gbsn.com.br · Mar 21, 2025
www.sinkdirect.com · Mar 21, 2025
www.broadmoormethodist.org · Mar 21, 2025
www.parklandmanufacturing.com · Mar 21, 2025
www.solinst.com · Mar 21, 2025
www.allstarhealthcaresolutions.com · Mar 21, 2025
www.njcalwe.com · Mar 21, 2025
www.gcsnet.com · Mar 21, 2025
www.core-1.com · Mar 21, 2025
www.esquirebrands.com · Mar 21, 2025
www.avalonapparel.com · Mar 21, 2025
www.oneupinnovations.com · Mar 21, 2025
www.scpautomation.com · Mar 21, 2025
www.gestionquintessence.com · Mar 21, 2025
www.engines.man.eu · Mar 21, 2025
www.abmenviro.ca · Mar 21, 2025
www.accessfinanceonline.com · Mar 21, 2025
www.ahmadiyya.ca · Mar 21, 2025

In the newsAll →

Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .