rhysida
ransomware group · aka Rhysida, Rhysida ransomware, possible Vice Society overlap (suspected by some vendors, unconfirmed) · unknown; no confirmed attribution. Some vendor reporting (2023) suggested tooling or operational overlap with the Vice Society actor based on shared TTPs, but a direct link remains unconfirmed. · active since May 2023 (per vendor research)
Victims · 7d
3▲1 vs prev. week
Victims · 30d
12active targets
Victims · 90d
15
All-time (tracked)
288since 2023-06-09
Last post
09-12 15:39UTC
Estimated earnings
—public reporting
Profile · glm-5.3-flash · updated
Rhysida is a ransomware and double-extortion group first publicly observed in May 2023, operating an affiliate-style model and publishing stolen data on a Tor leak site. It is known for high-profile attacks on public-sector and critical-service targets, including Prospect Medical Holdings, the British Library, and the Chilean Army (all 2023). Several researchers have suggested overlap with the Vice Society actor, citing shared tactics such as intermittent encryption, though this remains unconfirmed. Per this dashboard, the group's leak site posted 2 victims in the past 30 days, most recently on 2026-09-08, including publication of stolen Berlin state government login credentials after a reported €2 million extortion demand was refused (news reporting, 2026). No comprehensive public earnings estimate for the group has been identified.
Tactics & tooling
- Initial access via phishing emails with malicious links or attachments (vendor reporting, 2023)
- Use of legitimate remote monitoring/management and remote-access tools in intrusions
- Double extortion: data exfiltration followed by publication on a Tor leak site
- Public auctions of stolen victim data on cybercrime markets (reported 2023, e.g., Prospect Medical Holdings)
- C-based ransomware encryptor using ChaCha20 for file encryption with RSA-4096-protected keys (analyst analyses, 2023)
- Intermittent/partial encryption in some incidents, a technique also associated with the Vice Society actor
- Recruitment of affiliates via cybercrime forums (reported 2023)
- Targeting skewed toward healthcare, education, government, and cultural institutions, though activity is opportunistic
Targeted sectors
HealthcareEducation and cultural institutionsGovernment and public sectorPublic health agenciesMultiple verticals (opportunistic)
Notable public victims
Prospect Medical Holdings (US healthcare; 2023; breach and reported data auction covered by media/vendor reporting), British Library (UK; 2023; reported £600,000 (~$750,000) demand refused; data published), Chilean Army (2023), Southern Nevada Health District (US; 2023; incident confirmed by the agency), Berlin state government (Germany; 2026; reported €2 million demand refused; stolen credentials published per news reporting), Leak-site listings tracked by this dashboard (2026): SAD'S Interim; Rug & Home
Estimated earnings
No public figure.
Leak-site victims288 posts · newest first
| Victim | Discovered | Details |
|---|---|---|
| Automated Logistics Systems | · Nov 4, 2025 | Automated Logistics Systems Automated Logistics Systems provides non-asset transportation and value-add warehousing solutions, and, for those customers having challenges with managing their end-to-end supply chain needs, ALS offers third party logistics (3PL) services. More |
| Invacare | · Nov 4, 2025 | Invacare Invacare, founded in 1885 and headquartered out of Elyria, Ohio, is a manufacturer and distributor of home and long term care medical products. More |
| Spindletop Center | · Oct 30, 2025 | Spindletop Center Spindletop Center is a non-profit healthcare organization focused on providing behavioral healthcare, as well as programs for individuals with intellectual and developmental disabilities and substance use recovery services. Over 100,000 patient records (address, phone number, passport number, social security number, diagnosis, medical history, etc.) More |
| Gemini Group | · Oct 28, 2025 | Gemini Group Founded in 1972 and headquartered in Bad Axe, Michigan, Gemini Group is a company that designs and manufactures engineering plastic and metal products. More |
| Bellflower Unified School District | · Oct 28, 2025 | Bellflower Unified School District Headquartered Bellflower, California, Bellflower Unified School District is a general education district that offers K-12 classes. More |
| Abilene Family Medical Associates | · Oct 27, 2025 | Abilene Family Medical Associates Abilene Family Medical Associates is a family medicine practice located in Abilene, Texas, providing comprehensive medical care to patients of all ages, from children to seniors. More |
| Peraso | · Oct 21, 2025 | Peraso Peraso is a global leader in the development of 5G mmWave silicon devices, developing mmWave technology since its inception in 2008. More |
| Hematology Oncology Consultants | · Oct 17, 2025 | Hematology Oncology Consultants Michigan Hematology Oncology is a private practice dedicated to providing the highest level of quality care in a healing environment for the mind, body and spirit of patients dealing with cancer and blood disorders. More |
| GEIGER | · Oct 17, 2025 | GEIGER GEIGER Antriebstechnik is a leading manufacturer of innovative mechanical and electric drive solutions for sun protection products such as blinds, awnings, and shutters, employing over 250 staff. More |
| Sibbalds | · Oct 16, 2025 | Sibbalds Sibbalds Chartered Accountants, based in Derby, specializes in providing a wide range of accountancy services to owner-managed businesses across England. More |
| Tex-Tube | · Oct 15, 2025 | Tex-Tube Tex Tube has over 75 years of experience in manufacturing steel products, specifically electric resistance welded (ERW) steel pipes, adhering to API and ASTM specifications. Serving the North American continent, the company produces tubular steel products that meet both API and ASTM standards. More |
| Furuno Electric | · Oct 13, 2025 | Furuno Electric FURUNO strives to contribute to realisation of the pleasant society filled with safety and peace of mind by giving visual form to that previously invisible, such as underwater condition, situation around ships, accurate time, people's physical conditions, etc. More |
| Sdii Global | · Oct 9, 2025 | Sdii Global Since 1989, Sdii Global has set the standard in forensic engineering and consulting, renowned for our expertise and unwavering commitment to excellence. More |
| JASCO Applied Sciences | · Oct 7, 2025 | JASCO Applied Sciences JASCO Applied Sciences specializes in acoustic monitoring and assessments of underwater noise, offering scientific consulting services for environmental impact assessments. More |
| Medstar Health | · Oct 4, 2025 | Medstar Health MedStar Health, founded in 1998, is a not-for-profit healthcare system serving Maryland and the Washington, D.C. region. The organization operates a network of 10 hospitals, multiple ambulatory care facilities, and urgent care centers. Over 7 million pieces of patient personal data!SQL databases, diagnoses, pharmaceuticals, and much more! More |
| Peavey Electronics Corporation | · Sep 29, 2025 | Peavey Electronics Corporation Founded by Hartley Peavey in 1965 as a one-man shop, today Peavey Electronics Corporation is one of the largest makers and suppliers of musical instruments, amplifiers and professional audio systems in the world-distributing more than 2,000 products to more than 130 countries. More |
| The Maryland Department of Transportation | · Sep 24, 2025 | The Maryland Department of Transportation The Maryland Department of Transportation (MDOT) is made up of five modal administrations: the Maryland Aviation Administration; the Maryland Port Administration; the Motor Vehicle Administration; the State Highway Administration; the Maryland Transit Administration - and authorities that are a part of MDOT, including the Maryland Transportation Authority and the Washington Metropolitan Area Transit Authority. More |
| Coastal Pacific Xpress | · Sep 10, 2025 | Coastal Pacific Xpress CPX is BC's largest refrigerated carrier, employing approximately 150 administrative and warehouse staff and 400 drivers and owner operators throughout our locations in Alberta and British Columbia. More |
| Elite Trailers | · Sep 5, 2025 | Elite Trailers Elite Trailer MFG, LLC. specializes in the custom manufacturing of high-quality trailers, including horse, livestock, and specialty models. More |
| Firelands Scientific | · Aug 28, 2025 | Firelands Scientific Firelands Scientific is an Ohio-based cannabis company that combines the best of nature, science and technology to provide customers and patients with a range of cannabis products to meet their needs. More |
| ZCORP | · Aug 27, 2025 | ZCORP ZCORP is a technology enterprise based in Princeton, NJ, specializing in providing innovative products, services, and tools to help clients navigate the challenges of a rapidly evolving marketplace. More |
| Elkhart Independent School District | · Aug 20, 2025 | Elkhart Independent School District Elkhart Independent School District is a public school district based in Elkhart, Texas (USA). The district is located in southwest Anderson County and extends into northern Houston County. More |
| Trans-Tex | · Aug 12, 2025 | Trans-Tex Trans-Tex has been the leader in narrow web dye sublimation printing for over 25 years. More |
| Alascom | · Aug 10, 2025 | Alascom It has been operating for over 20 years as a system integrator and supplier of technical consulting services in the ICT and industrial automation sector with a fundamental knowledge of telecommunication networks and IP technologies. More |
| Cookeville Regional Medical Center | · Aug 2, 2025 | Cookeville Regional Medical Center At Cookeville Regional Medical Center, we are dedicated to providing the highest quality care to our patients and making a positive impact on our community. More |
| First Baptist Church of Hammond | · Jul 29, 2025 | First Baptist Church of Hammond Established in 1887, The First Baptist Church was listed as 2009's 12th largest church in America in Outreach magazine. More |
| Cardinal Services | · Jul 15, 2025 | Cardinal Services Cardinal Services was established by Bud and Gail Freeman in Coos Bay, Oregon in 1984, and we've been helping local business owners and job seekers achieve marketplace success ever since. More |
| Florida Hand Center | · Jul 8, 2025 | Florida Hand Center Florida Hand Center specializes in non-surgical and minimally invasive treatments for hand, wrist, and elbow conditions, serving patients in Punta Gorda, Port Charlotte, and Fort Myers, Florida. More |
| Welthungerhilfe | · Jun 29, 2025 | Welthungerhilfe Welthungerhilfe (WHH) is one of the largest private aid agencies in Germany; politically and religiously independent. More |
| Coreix | · Jun 18, 2025 | Coreix Coreix Cloud Services Limited provides a wide range of cloud computing solutions including public cloud servers, dedicated servers, virtual private servers, and colocation services. More |
| CNPC USA | · Jun 16, 2025 | CNPC USA CNPC USA Corporation is a Houston-based company that was founded in 2011 to help connect North America with CNPC's worldwide operations. More |
| Hudson River Housing | · Jun 7, 2025 | Hudson River Housing Hudson River Housing provides quality, affordable rental housing for individual, families and seniors throughout the Mid-Hudson Valley region. More |
| Cator Ruma & Associates | · May 28, 2025 | Cator Ruma & Associates Since our founding in 1959, Cator, Ruma & Associates has worked with many architects and clients to build thriving communities across the western and central United States. More |
| Carrera Chevrolet | · May 26, 2025 | Carrera Chevrolet Carrera Acelera Veiculos specializes in the sale of new, semi-new, and used vehicles from various brands such as Chevrolet, Volkswagen, and Nissan. More |
| Florida Lung | · May 20, 2025 | Florida Lung The Mission of Florida Lung, Asthma & Sleep Specialists is to be a leader in the provision of comprehensive medical care to patients with pulmonary disease, critical illness, allergic diseases and sleep disorders. More |
| Termolar | · May 18, 2025 | Termolar Termolar is the largest manufacturer of thermal conservation products in Latin America. More |
| Sao Camilo Cachoeiro de Itapemirim | · May 14, 2025 | Sao Camilo Cachoeiro de Itapemirim The Sao Camilo Espirito Santo Educational Center was founded in 1969, under the name Instituto Cachoeirense de Ensino, in the city of Cachoeiro de Itapemirim, ES. More |
| Mountain View Mushrooms | · May 9, 2025 | Mountain View Mushrooms Mountain View Mushrooms was established in 2003. We are the largest producer and wholesaler of fresh mushrooms in the Intermountain West. More |
| Mediprobe Research | · May 5, 2025 | Mediprobe Research Mediprobe Research Inc. is a world class dermatology research and clinical trials center. More |
| Kalin Hobeltechnik | · May 3, 2025 | Kalin Hobeltechnik Kalin operates throughout Europe and has established a solid reputation with planing machines and systems for solid wood processing. More |
| Government of Peru | · May 2, 2025 | Government of Peru Gob.pe is defined as the Single Digital Platform of the Peruvian State. More |
| Coop UQAM | · May 1, 2025 | Coop UQAM COOP UQAM is one of the largest school-based cooperatives in Quebec. Located in the heart of UQAM in downtown Montreal, it primarily serves university customers, but also offers individuals and businesses the opportunity and privilege of becoming a member and using its services. More |
| LaBella Associates | · Apr 28, 2025 | LaBella Associates Founded in 1978, LaBella Associates is a full service Architecture, Engineering, Planning, Environmental and Energy Consulting firm headquartered in Rochester, NY. More |
| MDB | · Apr 26, 2025 | MDB MDB Srl was founded in 1977 by Mario Di Biase in Abruzzo, Italy. More |
| Milicic | · Apr 23, 2025 | Milicic We are an Argentine construction and services company with 50 years of experience in large-scale projects that have supported the development of key productive sectors. More |
| Acos Favorit | · Apr 22, 2025 | Acos Favorit Founded in 1996 by Rudolf Fritsch, Acos Favorit Distribuidora Ltda focuses on cutting and distributing special steels (tools), stainless bars, mechanical construction steels, structural beams and mechanical tubes. More |
| Oregon Department of Environmental Quality | · Apr 15, 2025 | Oregon Department of Environmental Quality They think their data hasn't been stolen. They're sorely mistaken.Over 2.5 terabytes of unique data. (SQL, employee data and more)We are waiting for your suggestions. More |
| Dimension Composite | · Apr 12, 2025 | Dimension Composite Dimension Composite is an ISO 9001:2000 certified company, whose mission is to develop and manufacture parts for transport and specialty vehicles, as well as other industrial and commercial products. More |
| Swiss Capitals Group | · Apr 6, 2025 | Swiss Capitals Group Swiss Capitals Group is the holding of a group of companies with more than 40 years of experience of investments in differents sectors. More |
| Clarity Ventures | · Apr 2, 2025 | Clarity Ventures Clarity Ventures, Inc offers custom eCommerce and mobile web design solutions as well as it's own software platform. More |
In the newsAll →
Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .