ZeroHour

ransomhub

Ransomware / extortion group tracked from leak-site posts

Victims · 7d
0flat
Victims · 30d
0active targets
Victims · 90d
0
All-time (tracked)
868since 2024-02-10
Last post
04-01 00:29UTC
Estimated earnings
public reporting
Profile not written yet: the pipeline profiles the most active groups first, a few per run.

Leak-site victims

VictimDiscoveredDetails
ilemgroup.com · Jan 22, 2025
www.grohe.com · Jan 22, 2025
www.americanstandard-us.com · Jan 22, 2025
miedemaproduce.com · Jan 21, 2025
precisionmechsd.com · Jan 21, 2025
whychoosebw.com · Jan 21, 2025
boardman-hamilton.com · Jan 21, 2025
supremegroup.co.in · Jan 21, 2025
bsegroup.it · Jan 16, 2025
www.solariumrevestimentos.com.br · Jan 16, 2025
www.liteputer.com.tw · Jan 16, 2025
AKConstructors.com · Jan 15, 2025
www.eurocert.pl · Jan 15, 2025
udb.net · Jan 14, 2025
Intelservice.com · Jan 14, 2025
healthcarewithinreach.org · Jan 13, 2025
mi.edu · Jan 13, 2025
www.leaguecenter.org · Jan 11, 2025
www.temotekstil.com.tr · Jan 11, 2025
www.excelresourcing.co.uk · Jan 11, 2025
www.mie.com.my · Jan 11, 2025
www.rotaryeng.co.th · Jan 11, 2025
www.primalwear.com · Jan 11, 2025
www.fairhallzhang.com · Jan 11, 2025
xtremmedia.com · Jan 11, 2025
amerplumb.com · Jan 11, 2025
www.wisesocon.com · Jan 11, 2025
castlehillha.co.uk · Jan 9, 2025
drive-lines.com · Jan 9, 2025
sahpetrol.com.tr · Jan 8, 2025
acquafertil.com.br · Jan 8, 2025
molars.co.ke · Jan 6, 2025
www.alliancemat.com · Jan 3, 2025
www.geedingconstruction.com · Jan 3, 2025
groupegm.com · Jan 2, 2025
lianbeng.sg · Jan 1, 2025
www.metlife.com · Dec 31, 2024
asesoriacamen.es · Dec 29, 2024
www.psccorporation.com · Dec 29, 2024
nigico.gr · Dec 28, 2024
diazfoodsolutions.es · Dec 27, 2024
sensualcollection.com · Dec 25, 2024
intellinet-es.com · Dec 23, 2024
www.mccoyglobal.com · Dec 23, 2024
www.semfin.com · Dec 23, 2024
www.marietta-city.org · Dec 21, 2024
www.groupe-setcar.com.tn · Dec 21, 2024
gilariver.org · Dec 20, 2024
tabocas.com.br · Dec 20, 2024
www.tekni-plex.com · Dec 19, 2024

In the newsAll →

Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .