ZeroHour

ransomhub

Ransomware / extortion group tracked from leak-site posts

Victims · 7d
0flat
Victims · 30d
0active targets
Victims · 90d
0
All-time (tracked)
868since 2024-02-10
Last post
04-01 00:29UTC
Estimated earnings
public reporting
Profile not written yet: the pipeline profiles the most active groups first, a few per run.

Leak-site victims

VictimDiscoveredDetails
www.gmchc.org · Aug 17, 2024
www.regentcaravans.com.au · Aug 17, 2024
www.netconfig.co.za · Aug 17, 2024
www.manotherm.ie · Aug 17, 2024
nrcollecties.nl · Aug 17, 2024
www.wmwmeyer.com · Aug 17, 2024
www.vinakom.com · Aug 16, 2024
www.patelco.org<Auction> · Aug 16, 2024
ljglaw.com · Aug 15, 2024
www.aaconsultinc.com · Aug 15, 2024
www.isnart.it · Aug 15, 2024
www.atwoodcherny.com · Aug 15, 2024
police.praca.gov.pl · Aug 14, 2024
infotexim.pe<Auction> · Aug 13, 2024
bedford.k12.oh.us · Aug 12, 2024
naturalcuriosities.com · Aug 11, 2024
Jeffersoncountyclerk.org · Aug 11, 2024
alliuminteriors.co.nz · Aug 11, 2024
lmgroup.com · Aug 10, 2024
dhcgrp.com · Aug 9, 2024
pierrediamonds.com.au · Aug 9, 2024
golfoy.com · Aug 9, 2024
inv-dar.com · Aug 8, 2024
inv-darbank.com · Aug 8, 2024
rationalenterprise.com · Aug 8, 2024
modernceramics.com · Aug 8, 2024
hudsoncivil.com.au · Aug 7, 2024
www.jgsummit.com.ph · Aug 7, 2024
amplicon.com · Aug 7, 2024
infotexim.pe · Aug 7, 2024
kempe.com.au · Aug 7, 2024
www.sobha.com · Aug 6, 2024
hlbpr.com · Aug 3, 2024
www.bahia-principe.com · Aug 2, 2024
www.normandydiesel.fr · Aug 2, 2024
retaildatallc.com · Aug 2, 2024
mcdowallaffleck.com.au · Aug 1, 2024
effinghamschools.com · Aug 1, 2024
wgma.org · Jul 31, 2024
biggreenegg.com · Jul 31, 2024
nydj.com · Jul 31, 2024
www.pharm-int.com · Jul 31, 2024
verwarmingheyndrickx.be · Jul 30, 2024
welevelup.com · Jul 30, 2024
udch.in.th · Jul 30, 2024
labor-koblenz.de · Jul 29, 2024
www.neurologicalinstitute.com · Jul 26, 2024
www.castelligroup.com · Jul 26, 2024
www.whittakersystem.com · Jul 26, 2024
ach.co.th · Jul 26, 2024

In the newsAll →

Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .