rhysida
ransomware group · aka Rhysida, Rhysida ransomware, possible Vice Society overlap (suspected by some vendors, unconfirmed) · unknown; no confirmed attribution. Some vendor reporting (2023) suggested tooling or operational overlap with the Vice Society actor based on shared TTPs, but a direct link remains unconfirmed. · active since May 2023 (per vendor research)
Victims · 7d
3▲1 vs prev. week
Victims · 30d
12active targets
Victims · 90d
15
All-time (tracked)
288since 2023-06-09
Last post
09-12 15:39UTC
Estimated earnings
—public reporting
Profile · glm-5.3-flash · updated
Rhysida is a ransomware and double-extortion group first publicly observed in May 2023, operating an affiliate-style model and publishing stolen data on a Tor leak site. It is known for high-profile attacks on public-sector and critical-service targets, including Prospect Medical Holdings, the British Library, and the Chilean Army (all 2023). Several researchers have suggested overlap with the Vice Society actor, citing shared tactics such as intermittent encryption, though this remains unconfirmed. Per this dashboard, the group's leak site posted 2 victims in the past 30 days, most recently on 2026-09-08, including publication of stolen Berlin state government login credentials after a reported €2 million extortion demand was refused (news reporting, 2026). No comprehensive public earnings estimate for the group has been identified.
Tactics & tooling
- Initial access via phishing emails with malicious links or attachments (vendor reporting, 2023)
- Use of legitimate remote monitoring/management and remote-access tools in intrusions
- Double extortion: data exfiltration followed by publication on a Tor leak site
- Public auctions of stolen victim data on cybercrime markets (reported 2023, e.g., Prospect Medical Holdings)
- C-based ransomware encryptor using ChaCha20 for file encryption with RSA-4096-protected keys (analyst analyses, 2023)
- Intermittent/partial encryption in some incidents, a technique also associated with the Vice Society actor
- Recruitment of affiliates via cybercrime forums (reported 2023)
- Targeting skewed toward healthcare, education, government, and cultural institutions, though activity is opportunistic
Targeted sectors
HealthcareEducation and cultural institutionsGovernment and public sectorPublic health agenciesMultiple verticals (opportunistic)
Notable public victims
Prospect Medical Holdings (US healthcare; 2023; breach and reported data auction covered by media/vendor reporting), British Library (UK; 2023; reported £600,000 (~$750,000) demand refused; data published), Chilean Army (2023), Southern Nevada Health District (US; 2023; incident confirmed by the agency), Berlin state government (Germany; 2026; reported €2 million demand refused; stolen credentials published per news reporting), Leak-site listings tracked by this dashboard (2026): SAD'S Interim; Rug & Home
Estimated earnings
No public figure.
Leak-site victims288 posts · newest first
| Victim | Discovered | Details |
|---|---|---|
| Forrest City School District | · Mar 29, 2025 | Forrest City School District Forrest City School District 7 is a school district headquartered in Forrest City, Arkansas. More |
| Senior Support Services | · Mar 27, 2025 | Senior Support Services Senior Support Services (CPHC) first began serving the seniors of Brockville in 1913. By 1970, Senior Support Services (CPHC) had expanded throughout Lanark, Leeds and Grenville to serve communities such as Smiths Falls, Carleton Place, and Gananoque. More |
| Okeene Elementary School | · Mar 25, 2025 | Okeene Elementary School Okeene Elementary School is a public school located in Okeene, OK, which is in a remote rural setting. More |
| Ted Hosmer Enterprises | · Mar 19, 2025 | Ted Hosmer Enterprises Ted Hosmer Enterprises, established in 1987, specializes in lawn care and snow removal services, consistently exceeding customer expectations through teamwork and innovation. More |
| Cothron's Security Professionals | · Mar 14, 2025 | Cothron's Security Professionals Founded by Mr. Olen Cothron in 1948, Cothron's is a leader in the security industry. More |
| British virgin islands London Office | · Mar 9, 2025 | British virgin islands London Office Opened in 2002, the BVI London Office represents the interests of the Government and people of the British Virgin Islands in the United Kingdom and Europe. More |
| Best Collateral, Inc. | · Mar 5, 2025 | Best Collateral, Inc. Headquartered in San Rafael, California, Best Collateral opened its first store in 1903 in San Francisco and provides financial services to individuals, families and small businesses. More |
| Newton & Associates, Inc | · Mar 1, 2025 | Newton & Associates, Inc Newton & Associates Inc is a company that operates in the Accounting Services industry. More |
| Peter Glenn Ski Sport | · Feb 22, 2025 | Peter Glenn Ski Sport Peter Glenn Ski and Sport is a retailer of clothing and accessories for skiing, hiking, and water sports. More |
| Buanderie Centrale de Montreal | · Feb 18, 2025 | Buanderie Centrale de Montreal BCM is a non-profit organization that, since 1979 , has offered laundry services focused on the very varied needs of its clients. More |
| The Agency | · Feb 14, 2025 | The Agency Established in 1995, The Agency represents the most formidable list of writers, directors, and creatives working across film, television and theatre, from those at the peak of their careers to those at the very beginning. More |
| Hammond Trucking & Excavation | · Feb 12, 2025 | Hammond Trucking & Excavation Hammond Trucking & Excavation Inc. is a family-owned and operated business located in the Kenai Peninsula, specializing in a variety of dirt work services. More |
| Leading Edge Specialized Dentistry | · Feb 9, 2025 | Leading Edge Specialized Dentistry Leading Edge Specialized Dentistry takes a modern approach to dental care. More |
| Town Counsel Law & Litigation | · Feb 4, 2025 | Town Counsel Law & Litigation Town Counsel Law & Litigation is a client-focused law firm concentrated on municipal law and successfully resolving municipal issues. More |
| My New Jersey Dentist | · Feb 1, 2025 | My New Jersey Dentist At My New Jersey Dentist, we're committed to providing exemplary dental care for your entire family. More |
| BH Aircraft Company, Inc. | · Jan 31, 2025 | BH Aircraft Company, Inc. Serving the Aerospace and Aircraft Industries with leading edge technology and products. More |
| Pembina Trails School Division | · Jan 31, 2025 | Pembina Trails School Division Pembina Trails School Division serves the South West communities of Winnipeg with a student population of approximately 14,000 in 34 schools. More |
| Carthage Police Department | · Jan 28, 2025 | Carthage Police Department Carthage Police Department More |
| ORU Mabee Center | · Jan 24, 2025 | ORU Mabee Center ORU is a liberal arts university with programs for every interest, from business and biology to engineering, computer science, nursing, criminal justice, theology and ministry, and more! More |
| TG3 Electronics | · Jan 19, 2025 | TG3 Electronics TG3 Electronics, Inc. is a second-generation family-owned custom keyboard and electronics manufacturer based in Kenosha, Wisconsin. More |
| The Chicano Federation | · Jan 14, 2025 | The Chicano Federation The Chicano Federation is a leading nonprofit in the region and has worked towards the benefit of all San Diegans since 1969. More |
| Qualinet | · Jan 11, 2025 | Qualinet One customer at a time, since 1994, Qualinet has become Quebec's benchmark for disaster response and cleanup. More |
| Sunflower Medical Group | · Jan 7, 2025 | Sunflower Medical Group With only 7 days to spare, take the opportunity to bet on exclusive, unique, and impressive data. More than 400 thousand driver's licenses, insurance cards, social security numbers. Sql base is more than 3TB. Open your wallets and get ready to buy exclusive data. We sell only to one person, no resale, you will be the only owner! More |
| Montreal North | · Jan 4, 2025 | Montreal North Montreal North is a borough within the city of Montreal, Canada. It consists entirely of the former city of Montreal North on the Island of Montreal in southwestern Quebec. More |
| T Smiles Dental | · Dec 25, 2024 | T Smiles Dental T Smiles Dental has been a trusted dental practice in Tottenham since 2018. More |
| Avstar Fuel Systems | · Dec 18, 2024 | Avstar Fuel Systems AVStar was formed in 1999 to overhaul Marvel Schebler/Precision/Volare type float carburetors and Bendix/Precision fuel injection systems. More |
| Rutherford County Schools | · Dec 11, 2024 | Rutherford County Schools Rutherford County Schools is a school district based in Murfreesboro, Tennessee, United States. More |
| Matlock Security Services | · Dec 7, 2024 | Matlock Security Services With over 30 years of experience, Matlock Security has been protecting business throughout the Tulsa metro area. More |
| Goodwill North Central Texas | · Dec 3, 2024 | Goodwill North Central Texas You'll find a lot of personal employee information here, SQL databases with clients payment information. Enjoy.Founded by Methodist Minister Edgar J. Helms in 1902, Goodwill gave people with disabilities and other social barriers the opportunity to find meaningful work. From the beginning, Goodwill's mission has promoted job creation for the disenfranchised. More |
| Delmar International | · Nov 28, 2024 | Delmar International Delmar International Inc. was established as a family-run customs broker in Montreal, Canada in 1965. Since then, we have evolved into a global logistics and supply chain management leader. More |
| Vermilion Parish School System | · Nov 27, 2024 | Vermilion Parish School System Vermilion Parish School Board is a school district headquartered in Abbeville, Louisiana, United States. It was established in 1876. More |
| Bishop Ireton High School | · Nov 20, 2024 | Bishop Ireton High School Bishop Ireton High School, a Catholic preparatory high school located in historic Alexandria, Va., began its proud heritage of academic excellence in 1964. More |
| American Addiction Centers | · Nov 16, 2024 | American Addiction Centers American Addiction Centers was founded in 2007. Since that time, we have grown into the largest network of rehab facilities nationwide, with programs in California, Florida, Texas, Nevada, Massachusetts, Mississippi, New Jersey, and Rhode Island. More |
| Granite School District | · Nov 9, 2024 | Granite School District The Granite School District is a public school district spread across central Salt Lake County, Utah, serving West Valley City, Millcreek, Taylorsville, South Salt Lake, and Holladay; Kearns and Magna Townships; and parts of West Jordan, Murray and Cottonwood Heights. More |
| Fylde Coast Academy Trust | · Nov 5, 2024 | Fylde Coast Academy Trust Fylde Coast Academy Trust (FCAT) was established in 2012 by Fylde Coast Teaching School, a partnership of Blackpool Sixth Form College and Hodgson Academy, both Outstandin learning organisations recognised for their contribution to education on a national level. More |
| Hope Valley Recovery | · Nov 1, 2024 | Hope Valley Recovery Hope Valley Recovery is built around a non-judgmental, client-centered approach; where we assist and guide the client as they pave a path to recovery. More |
| De Rose Lawyers | · Oct 25, 2024 | De Rose Lawyers We are a knowledgeable litigation firm with over 40 years of combined experience, solely dedicated to the practice of personal injury law. More |
| Easterseals | · Oct 23, 2024 | Easterseals Easterseals is leading the way to full equity, inclusion, and access through life-changing disability and community services. More |
| Henry County Schools | · Oct 15, 2024 | Henry County Schools We strive to provide our students and families access to the most skilled professional educators available. We take pride in our offerings in the areas of academics, athletics, arts, and social/emotional supports. More |
| Microworks | · Oct 15, 2024 | Microworks Microworks Point of Sale Prism offers an ideal computer system for pizza delivery, restaurant management, and franchise food service. More |
| Axis Health System | · Oct 10, 2024 | Axis Health System Axis Health System is a private, nonprofit healthcare organization established in 1960, providing healthcare to residents of Southwest & Western Colorado. More |
| Golden Age Nursing Home | · Oct 3, 2024 | Golden Age Nursing Home Golden Age Nursing Home is a Medicare-certified facility providing short- and long-term nursing and rehabilitative services. More |
| Plastics Plus | · Sep 30, 2024 | Plastics Plus Since our founding in 1990, Plastics Plus has emerged as a leader in the plastic resin distribution industry. As a privately held company, we've dedicated ourselves to mastering the distribution of thermoplastics, serving a wide range of industries with our expertise. More |
| Shenango Area School District | · Sep 26, 2024 | Shenango Area School District The Shenango Area School District is located in southern Lawrence County, conveniently situated 45 miles north of Pittsburgh and 90 miles south of Erie. The district encompasses 25 square miles, which includes both Shenango Township and South New Castle Borough. More |
| Daughterly Care | · Sep 22, 2024 | Daughterly Care Daughterly Care has been providing Consumer Directed Care for private clients for over 16 years. More |
| Greene Acres Nursing Home | · Sep 20, 2024 | Greene Acres Nursing Home A recognized leader in the provision of superior rehabilitation and long term care services, Greene Acres Nursing Home is the largest non-profit, nursing home in Greene County. More |
| Port of Seattle/Seattle-Tacoma International Airport (SEA) | · Sep 16, 2024 | Port of Seattle/Seattle-Tacoma International Airport (SEA) Participating in the auction, you have the opportunity to buy more than over 3Tb of databases, internal logins and passwords of employees, a full dump of servers with emergency services applications Port of Seattle and Seattle-Tacoma International Airport (SEA), personal data staff and customers. When buying, you also get full instructions and support, certificates for databases. More |
| Port of Seattle | · Sep 16, 2024 | Port of Seattle Formed in 1911 and located in Seattle, Washington, Port of Seattle is a government agency that oversees Seattle's seaport and airport. More |
| Qeco/coeq | · Sep 10, 2024 | Qeco/coeq The Qualifications Evaluation Council of Ontario (confident-teacherQECO) was founded in 1969 by OECTA, ETFO (FWTAO & OPSTF at the time) and AEFO to provide, and to objectively administer, the evaluation of teacher qualifications for salary purposes. More |
| Pennsylvania State Education Association | · Sep 9, 2024 | Pennsylvania State Education Association PSEA is 178,000 members strong a community of education professionals who make a difference in the lives of Pennsylvania's students every day. More |
In the newsAll →
Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .