ZeroHour

ransomhub

Ransomware / extortion group tracked from leak-site posts

Victims · 7d
0flat
Victims · 30d
0active targets
Victims · 90d
0
All-time (tracked)
868since 2024-02-10
Last post
04-01 00:29UTC
Estimated earnings
public reporting
Profile not written yet: the pipeline profiles the most active groups first, a few per run.

Leak-site victims

VictimDiscoveredDetails
libertyfirstcu.com · Sep 19, 2024
avl1.com · Sep 19, 2024
www.galloway-macleod.co.uk · Sep 18, 2024
ringpower.com · Sep 18, 2024
www.plumbersstock.com · Sep 17, 2024
www.nikpol.com.au · Sep 17, 2024
www.quenotedeporten.com · Sep 17, 2024
capecodacademy.org · Sep 17, 2024
www.8010urbanliving.com · Sep 16, 2024
www.faithfc.org · Sep 16, 2024
www.adantia.es · Sep 16, 2024
topdoctors.com · Sep 16, 2024
www.taperuvicha.com · Sep 16, 2024
www.tta.cls · Sep 16, 2024
oipip.gda.pl · Sep 16, 2024
kryptonresources.com · Sep 16, 2024
www.atlcc.net · Sep 15, 2024
accuraterailroad.com · Sep 15, 2024
advantagecdc.org · Sep 15, 2024
lafuturasrl.it · Sep 15, 2024
www.southeasternretina.com · Sep 13, 2024
thornton-inc.com · Sep 12, 2024
mechdyne.com · Sep 12, 2024
www.galgorm.com · Sep 11, 2024
allamericanpoly.com · Sep 11, 2024
www.vinatiorganics.com · Sep 10, 2024
americagraphics.com · Sep 10, 2024
www.unige.it · Sep 9, 2024
www.dpe.go.th · Sep 9, 2024
www.bsg.com.au · Sep 9, 2024
www.avf-biomedical.com · Sep 9, 2024
cardiovirginia.com · Sep 7, 2024
briedis.lt · Sep 6, 2024
kawasaki.eu · Sep 5, 2024
phdservices.net · Sep 5, 2024
Inglenorth.co.uk · Sep 5, 2024
cps-k12.org · Sep 5, 2024
inorde.com · Sep 5, 2024
cbt-gmbh.de · Sep 5, 2024
tri-tech.us · Sep 5, 2024
www.towellengineering.net · Sep 5, 2024
www.parknfly.ca · Sep 5, 2024
www.galgorm.com<Auction> · Sep 4, 2024
www.pcipa.com · Sep 4, 2024
www.bennettcurrie.co.nz · Sep 4, 2024
plannedparenthood.org · Sep 4, 2024
inlighten.net<Disclose> · Sep 3, 2024
gardenhomesmanagement.com · Sep 3, 2024
wilmingtoncc.org · Sep 3, 2024
www.sanyo-bussan.co.jp · Sep 2, 2024

In the newsAll →

Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .