ZeroHour

ransomhub

Ransomware / extortion group tracked from leak-site posts

Victims · 7d
0flat
Victims · 30d
0active targets
Victims · 90d
0
All-time (tracked)
868since 2024-02-10
Last post
04-01 00:29UTC
Estimated earnings
public reporting
Profile not written yet: the pipeline profiles the most active groups first, a few per run.

Leak-site victims

VictimDiscoveredDetails
www.elizajennings.org · Mar 21, 2025
www.mslglobalexp.com · Mar 21, 2025
www.georgehay.co.uk · Mar 20, 2025
georghay.co.uk · Mar 20, 2025
www.janvier-labs.com · Mar 20, 2025
controlledair.com · Mar 19, 2025
www.baxterlaboratories.com · Mar 17, 2025
ccktech.com · Mar 17, 2025
oneill.com · Mar 17, 2025
www.jhayber.com · Mar 17, 2025
www.ameda.com · Mar 16, 2025
dtrglaw.com · Mar 14, 2025
jennyyoo.com · Mar 14, 2025
idcconstruction.com · Mar 14, 2025
www.raymond.in · Mar 13, 2025
www.visualisation.one · Mar 12, 2025
dccsagroup.com&csahome.com · Mar 10, 2025
www.hexosys.com · Mar 10, 2025
www.dcarosolutions.com · Mar 9, 2025
mitchellmcnutt.com · Mar 8, 2025
www.jpwindustries.com · Mar 8, 2025
total-ps.com · Mar 7, 2025
bayvillage.org · Mar 7, 2025
wheats.com · Mar 7, 2025
srmg.com.au · Mar 7, 2025
www.portlandschools.org · Mar 6, 2025
www.hinton.ca · Mar 6, 2025
www.centersheetmetal.com · Mar 6, 2025
www.convention.qc.ca · Mar 6, 2025
hickorylaw.com · Mar 6, 2025
lovesac.com · Mar 6, 2025
www.cda.be · Mar 5, 2025
www.black-star.fr · Mar 5, 2025
www.japanrebuilt.jp · Mar 5, 2025
www.sunsweet.com · Mar 5, 2025
dsrny.com · Mar 4, 2025
goencon.com · Mar 4, 2025
familychc.com · Mar 4, 2025
andreyevengineering.com · Mar 4, 2025
www.casinoessentials.com · Feb 28, 2025
www.journeyoilfield.net · Feb 28, 2025
www.townofbourne.com · Feb 27, 2025
www.nasonptc.com · Feb 27, 2025
teamwass.com · Feb 27, 2025
www.envirolabsinc.com · Feb 26, 2025
www.kppm.com · Feb 26, 2025
www.newburghhealthcarecenter.com · Feb 26, 2025
www.obrienavocats.qc.ca · Feb 26, 2025
www.cmsg.cl · Feb 26, 2025
www.amerasphalt.com · Feb 26, 2025

In the newsAll →

Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .