ZeroHour

ransomhub

Ransomware / extortion group tracked from leak-site posts

Victims · 7d
0flat
Victims · 30d
0active targets
Victims · 90d
0
All-time (tracked)
868since 2024-02-10
Last post
04-01 00:29UTC
Estimated earnings
public reporting
Profile not written yet: the pipeline profiles the most active groups first, a few per run.

Leak-site victims

VictimDiscoveredDetails
www.emeryair.net · Feb 26, 2025
welcompanies.com · Feb 25, 2025
www.avalon-hotel.com · Feb 25, 2025
www.rgb.com · Feb 25, 2025
www.wpisd.com · Feb 25, 2025
www.ateliermonarque.com · Feb 25, 2025
www.confabca.com · Feb 25, 2025
www.bwdtechnology.com · Feb 25, 2025
hgmlegal.com · Feb 25, 2025
compactmould.com · Feb 24, 2025
denbyco.co.uk · Feb 24, 2025
www.famcomachine.com · Feb 23, 2025
ondaralogistica.com · Feb 23, 2025
alleghenybradford.com · Feb 22, 2025
www.electro-fusion.com · Feb 22, 2025
www.midwestvascular.net · Feb 22, 2025
www.witheyaddison.com · Feb 22, 2025
www.nola-law.com · Feb 22, 2025
guadeloupeformation.com · Feb 22, 2025
headcount.com · Feb 22, 2025
jindalgroup.com · Feb 22, 2025
www.elecgalapagos.com.ec · Feb 21, 2025
www.fla-esq.com · Feb 21, 2025
www.saracenproperties.com · Feb 21, 2025
eaglepost.com · Feb 20, 2025
gilcar.co · Feb 20, 2025
www.okddsi.net · Feb 20, 2025
zsattorneys.com · Feb 20, 2025
www.pransystems.com · Feb 20, 2025
www.phdental.com · Feb 20, 2025
www.riverdale.edu · Feb 20, 2025
haleycomfort.com · Feb 19, 2025
www.mwmechanicalinc.com · Feb 18, 2025
www.alphamedctr.com · Feb 18, 2025
www.ccttechnologies.com · Feb 18, 2025
www.copleystoughton.com · Feb 18, 2025
www.macmed.com · Feb 18, 2025
www.macter.com · Feb 17, 2025
lekiaviation.com · Feb 17, 2025
bisindustries.com · Feb 17, 2025
saulttribe.com/kewadin.com · Feb 15, 2025
www.rowetactical.com · Feb 15, 2025
www.transcend-info.com · Feb 15, 2025
www.naga.ae · Feb 15, 2025
www.cityoftarrant.com · Feb 15, 2025
www.imgenterprises.com · Feb 15, 2025
www.solardatasystems.com · Feb 15, 2025
www.310tempering.com · Feb 15, 2025
www.colacouronnelocations.com · Feb 15, 2025
brockbanks.co.uk · Feb 14, 2025

In the newsAll →

Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .