ZeroHour

termite

ransomware group · aka unknown · unknown · active since unknown (tracked by this dashboard since 2026-07-28)

Victims · 7d
0flat
Victims · 30d
1active targets
Victims · 90d
3
All-time (tracked)
44since 2024-11-17
Last post
08-22 00:23UTC
Estimated earnings
public reporting
Profile · glm-5.3-flash · updated

Termite is a ransomware and data-extortion group that operates a leak site used to publish stolen victim data; public reporting on its origins, operators, and affiliate model is limited, and attribution remains unknown. This dashboard began tracking the group's leak site on 2026-07-28 and has recorded three victim posts since, with the most recent post on 2026-08-22 and no new posts in the past seven days. Victims recently listed on the leak site are predominantly small and mid-sized organizations in the United States, spanning manufacturing, healthcare, education, state and municipal government, food production, and professional services. No widely reported ransom demands, payment figures, initial-access details, or malware samples are available for the group, so technical details and earnings remain unknown.

Tactics & tooling
  • Data-theft extortion with public leak-site postings of stolen victim data
  • Lists victims by organization name and website domain
  • Observed victim base concentrated among small and mid-sized organizations in the United States
  • Initial access vector: unknown
  • Encryption tooling and malware indicators: unknown (no public vendor technical write-ups identified)
  • Ransom demand sizes and payment methods: unknown
Targeted sectors
manufacturinghealthcareeducationgovernment (state and municipal)food and beverageprofessional services (architecture/engineering)business services
Notable public victims

Everglades Boats (evergladesboats.com), Affinia Healthcare (affiniahealthcare.org), J.D. Young (jdyoung.com), CalFresh, California benefits program (calfresh.ca.gov), Wiese USA (wieseusa.com), Roland Machinery (rolandmachinery.com), Imminet (imminet.com), UEI (uei.edu), Ramar Foods (ramarfoods.com), LANAP (lanap.com)

Estimated earnings

No public figure.

Leak-site victims

VictimDiscoveredDetails
https://www.evergladesboats.com/ · 25d agoEverglades Boats
https://affiniahealthcare.org/ · Jul 28, 2026Affinia Healthcare
https://www.jdyoung.com/ · Jul 28, 2026JD Young
https://calfresh.ca.gov/ · Jun 10, 2026Cal Fresh
https://www.wieseusa.com/ · Jun 9, 2026Wiese USA
https://www.rolandmachinery.com/ · Jun 9, 2026Roland Machinery
https://www.imminet.com/ · May 30, 2026Indiana Mills and Manufacturing
https://www.uei.edu/ · May 29, 2026UEI College
https://www.ramarfoods.com/ · May 16, 2026RAMAR FOODS INTERNATIONAL
https://www.lanap.com/ · Apr 17, 2026Millennium Dental Technologies
https://www.nollandtam.com/ · Mar 17, 2026Noll and Tam Architects
https://www.cityofhuntington.com/ · Mar 7, 2026City of Huntington
https://www.bartramtrail.net/ · Mar 3, 2026Bartram Trail Surveying
https://www.joneshaberlaw.com/ · Feb 25, 2026Jones Haber
https://www.siskiyoutelephone.com/ · Feb 25, 2026The Siskiyou Telephone
https://www.artsbma.org/ · Feb 25, 2026Birmingham Museum of Art
https://insightchicago.com/ · Feb 24, 2026Insight Hospital & Medical Center Chicago
https://www.fhcenters.org/ · Feb 2, 2026Family Health Center
https://www.hermesmedical.com/ · Dec 25, 2025Hermes Medical Solutions
https://medhelpclinics.com/ · Dec 17, 2025MedHelp
https://www.npgco.com/ · Sep 16, 2025News-Press & Gazette Co.
https://www.lgm.fr/ · May 6, 2025LGM
https://www.ushio.eu/ · May 1, 2025Ushio
https://www.bjorklund.no/ · Apr 12, 2025Bjørklund
https://weareonit.com/ · Apr 11, 2025On IT
https://www.perrigo.com/ · Mar 16, 2025Perrigo Company
https://lbl.london/ · Feb 26, 2025London Belgravia
https://nationallegalservice.co.uk/ · Feb 26, 2025National Legal Service
https://rooksrider.co.uk/ · Feb 26, 2025Rooks Rider Solicitors
https://www.arcandco.com/ · Feb 26, 2025Arcandco
https://www.genea.com.au/ · Feb 26, 2025Genea
https://www.ligentia.com/ · Feb 20, 2025Ligentia
https://www.cesi.fr/ · Feb 12, 2025CESI
www.zschimmer-schwarz.com · Jan 30, 2025Zschimmer and Schwarz
https://www.huntingtonhotelgroup.com/ · Jan 8, 2025Huntington Hotel Group
https://tharisa.com/ · Dec 17, 2024Tharisa
http://watsonvillehospital.com · Dec 11, 2024Watsonville Community Hospital
https://blueyonder.com · Dec 6, 2024Blue Yonder
https://www.departement974.fr/ · Nov 20, 2024Département de La Réunion
https://csviamonde.ca/ · Nov 17, 2024Conseil scolaire Viamonde
https://www.lebenshilfe-heinsberg.de/ · Nov 17, 2024Lebenshilfe Heinsberg
https://oq.com/ · Nov 17, 2024Oman Oil
https://www.culligan.fr/ · Nov 17, 2024Culligan
https://www.nifast.com · Nov 17, 2024Nifast

In the newsAll →

No articles mention this group yet.

Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .