THREAT ACTOR
HIVE_
DormantHive was a ransomware-as-a-service operation active from mid-2021 until early 2023, when an FBI-led international operation seized its leak-site infrastructure and decryption keys after a months-long covert intrusion. Hive’s affiliates targeted hospitals, schools, and financial services across more than 80 countries.
For Ransomnews editorial coverage of HIVE, including incident write-ups, attribution notes and additional context, see the Threat Groups archive or run a site search.
201
Victims tracked
0 / 3
Active mirrors
2022-01-25
First listing
2023-01-17
Most recent
Victims by year
- 2023 4
- 2022 197
Leak site mirrors
3 mirrors tracked, 0 currently reachable. These are criminal-infrastructure URLs; links are deliberately not provided.
-
hiveleakdbtnp76ulyhi52eag6c6tyc3xw7ez7iqy6wc34gd2nekazyd.onionThis domain has been seized snapshot · 2023-05-26 16:04 -
hivecust6vhekztbqgdnkks64ucehqacge3dij3gyrrpdp57zoq3ooqd.onionThis domain has been seized snapshot · 2023-05-26 16:03 -
hiveapi4nyabjdfz2hxdsr7otrcv6zq6m4rk5i2w7j64lrtny4b7vjad.onionThis domain has been seized snapshot · 2023-05-26 16:03
Recent victims
The 50 most recent victims claimed by HIVE. Total in the index: 201.
| Date listed | Victim | Description |
|---|---|---|
| 2023-01-17 | R C Stevens Construction | As commercial construction specialists in Orlando, we provide new cons… |
| 2023-01-12 | G.W. Becker | ***** DATA IS COMING SOON **** G.W. Becker, Inc. is a full service, s… |
| 2023-01-06 | Consulate Health Care | Consulate Health Care is a leading provider of senior healthcare servi… |
| 2023-01-01 | Centro Médico Virgen De La Caridad | Grupo Centro Médico Virgen de la Caridad, a private health company wit… |
| 2022-12-30 | Camst Group | Camst Group is a company that specializes in restaurant services. It o… |
| 2022-12-22 | Alvaria | Alvaria, (pronounced: ahl-vahr-ee-uh), a global leader delivering opti… |
| 2022-12-22 | MHMR Authority Of Brazos Valley | The MHMR Authority of Brazos Valley is a public non-profit community M… |
| 2022-12-21 | Innovative Education Management | Innovative Education Management (IEM) has been successfully developing… |
| 2022-12-21 | Interface | **** 30% OF THE DATA IS COMING SOON **** Interface, Inc. is a global … |
| 2022-12-21 | North Idaho College | Founded in 1933, North Idaho College is a community college in Coeur d… |
| 2022-12-20 | Dixons Allerton Academy | Dixons Allerton Academy (formerly Rhodesway Academy) is a coeducationa… |
| 2022-12-20 | City Of Huntsville, Texas | Huntsville Texas is a city in the Texas Hill Country. |
| 2022-12-20 | JAKKS Pacific Inc | Corporate Overview JAKKS Pacific, Inc. is a multi-brand company that, … |
| 2022-12-20 | Stolle Machinery | **** ALL BLUEPRINTS OF ALL PRODUCT LINES WILL BE AVAILABLE SOON **** … |
| 2022-12-15 | Expand Group | We are one of Singapore’s major home-grown building construction group… |
| 2022-12-15 | Mark-Taylor | Established in 1985, the Mark-Taylor Companies is a privately-held, Ar… |
| 2022-12-10 | KNOX College | Knox College is a private liberal arts college in Galesburg, Illinois.… |
| 2022-12-07 | INTERSPORT France | Intersport is a French retailer of sporting goods and equipment, it al… |
| 2022-11-25 | Guilford College | Guilford College is a small liberal arts college in Greensboro, North … |
| 2022-11-24 | Norman Public Schools | Nestled in the heart of a world-class academic community, the Norman P… |
| 2022-11-17 | LCMH | Lake Charles Memorial Health System is the only locally owned, regiona… |
| 2022-11-17 | Hydro-Gear & Agri-Fab | Hydro-Gear, headquartered in Sullivan, Illinois, is a manufacturing co… |
| 2022-11-10 | MCCROSSAN | C.S. Mccrossan, Inc. provides construction infrastructure services to … |
| 2022-11-08 | APM Terminals | Terminal de Contenedores Quetzal |
| 2022-11-08 | ROYAL GATEWAY CO., LTD | Royal Gateway Company limited is leading distributor of alcohol bevera… |
| 2022-11-08 | Cornwell Quality Tools | **** EXFILTRATED DATA IS COMING SOON **** Headquartered in Wadsworth,… |
| 2022-11-04 | Landi Renzo | Today, Landi Renzo has become a world leader in the design and constru… |
| 2022-10-25 | Tata Power | India's Largest Integrated Power Company Tata Power, formerly a part o… |
| 2022-10-09 | Município De Loures | Município de Loures Loures City in Portugal Loures is a city and a mu… |
| 2022-10-05 | Mansfield Independent School District (MISD) | Mansfield Independent School District is a premiere school district lo… |
| 2022-09-28 | Southwell, Inc. | About Southwell With a reputation as an innovative provider of quality… |
| 2022-09-27 | TSMTU | Meccanotecnica Umbra is an international Group specialized in engineer… |
| 2022-09-27 | JANMARINI | Jan Marini Skin Research, Inc. is a recognized leader and innovator in… |
| 2022-09-27 | Hendry Regional Medical Center | Hendry Regional Medical Center is a Critical Access Hospital offering … |
| 2022-09-27 | TAKAO-UK | G-TEM, headquartered in Gloucester, is a manufacturer of metal pressin… |
| 2022-09-27 | GFG | FAT Brands established in 1952 is a franchising company that strategic… |
| 2022-09-23 | BHARBERT | BL Harbert International is a privately-owned construction company wit… |
| 2022-09-20 | Sigmund Software | Team Our team is passionate about improving outcomes. With many former… |
| 2022-09-19 | New York Racing Association | New York Racing Association, not-for-profit corporation that operates … |
| 2022-09-16 | Bell Technical Solutions | Bell Technical Solutions (BTS) is a wholly owned subsidiary of Bell Ca… |
| 2022-09-15 | FONTAINEBLEAU | Situated on oceanfront Collins Avenue in the heart of Millionaire's Ro… |
| 2022-09-08 | California-Oregon Telecommunications Company | |
| 2022-09-02 | Eurocell | Stocks: ======= LSE:ECEL.L FRA:6YQ.F MUN:6YQ.MU STU:GB00BVV2KN49.SG *… |
| 2022-09-01 | NCG Medical | The Next Generation of Medical Billing & RCM Since 1979, our team at … |
| 2022-08-25 | Altice International | Altice international is a multinational group specializing in telecoms… |
| 2022-08-25 | Baton Rouge General | Baton Rouge General is a hospital that offers pediatrics, gastroentero… |
| 2022-08-19 | Reiter Affiliated Companies | Reiter Affiliated Companies, founded in 1868 and headquartered in Oxna… |
| 2022-08-18 | WOOTTON ACADEMY TRUST | Wootton Upper School Kimberley College |
| 2022-08-18 | Sardinha Family Trust | |
| 2022-08-18 | Massy Distribution Limited | Massy Distribution Limited is located in Trincity, Trinidad and Tobago… |
CONFIRMED ATTACKS
Hive confirmed attacks: 78 verified incidents
Ransomnews has verified 78 Hive incidents against named organisations, each corroborated by a public source such as a breach notification, regulatory filing or press report. The confirmed record runs from December 2019 to January 2023. United States accounts for 36 of them (46%), with victims recorded in 25 countries in total. The most affected sector is healthcare, at 22 confirmed victims. A ransom payment was publicly confirmed in 2 cases and publicly refused in 14; the outcome is unrecorded in the remaining 62. Where a figure was disclosed (26 cases), these incidents account for 6,269,992 exposed records.
78Verified incidents
25Countries
2019–2023Active range
13%Paid, where outcome known
Confirmed victims by year
Most affected sectors
Most affected countries
Verified Hive incidents
| Date | Organisation | Sector | Location | Records | Ransom paid | Source |
|---|---|---|---|---|---|---|
| January 2023 | Citi Trends, Inc. | Retail | Georgia, United States | 5,307 | Unknown | Source |
| December 2022 | SIFCO Industries, Inc. | Manufacturing | Ohio, United States | — | Unknown | Source |
| December 2022 | R.C. Stevens Construction Company | Construction | Florida, United States | — | Unknown | Source |
| December 2022 | Regal Medical Group, Lakeside Medical Organization, ADOC Medical Group, and Greater Covina Medical | Healthcare | California, United States | 3,388,856 | Unknown | Source |
| December 2022 | Debt Collection Agency (unnamed) | Finance | Bauru, Brazil | — | Yes | Source |
| November 2022 | MHMR Authority of Brazos Valley | Healthcare | Texas, United States | 83,245 | Unknown | Source |
| November 2022 | Innovative Education Management, Inc. | Education | California, United States | 586 | Unknown | Source |
| November 2022 | Alvaria, Inc. | Technology | Massachusetts, United States | 4,695 | Unknown | Source |
| November 2022 | Conseil régional de la Guadeloupe | Government | Guadeloupe, Guadeloupe | — | Unknown | Source |
| November 2022 | Camst | Food and Beverage | Bologna, Italy | — | Unknown | Source |
| November 2022 | Intersport | Retail | Berne, Switzerland | — | Unknown | Source |
| November 2022 | APM Terminals (Maersk) | Transportation | Den Haag, Netherlands | — | Unknown | Source |
| November 2022 | DomusVi | Healthcare | Pontevedra, Spain | — | Unknown | Source |
| November 2022 | Knox College | Education | Illinois, United States | 63,100 | Unknown | Source |
| November 2022 | Jackson Intermediate School District | Education | Michigan, United States | — | Unknown | Source |
| October 2022 | Interface, Inc. | Manufacturing | Georgia, United States | 14,776 | Unknown | Source |
| October 2022 | Atacama Large Millimeter/submillimeter Array (ALMA) | Other | Antofagasta, Chile | 0 | No | Source |
| October 2022 | Le Département de Seine-Maritime | Government | Seine-Maritime, France | — | Unknown | Source |
| October 2022 | Landi Renzo | Manufacturing | Cavriago, Italy | — | No | Source |
| October 2022 | Massy Jamaica Distribution Ltd | Retail | Kingston, Jamaica | — | Unknown | Source |
| October 2022 | Tata Power | Utilities | Mumbai, India | — | Unknown | Source |
| October 2022 | Norman Public Schools | Education | United States, United States | — | No | Source |
| October 2022 | Lake Charles Memorial Health System | Healthcare | Louisiana, United States | 269,752 | No | Source |
| October 2022 | Guilford College | Education | North Carolina, United States | — | Unknown | Source |
| September 2022 | Cornwell Quality Tools | Manufacturing | Ohio, United States | 11,884 | Unknown | Source |
| September 2022 | C. S. McCrossan, Inc. | Construction | Minnesota, United States | 3,905 | Unknown | Source |
| September 2022 | Câmara de Loures | Government | Loures, Portugal | — | Unknown | Source |
| August 2022 | The Fontainebleau Hotel | Other | Florida, United States | 18,653 | Unknown | Source |
| August 2022 | Altice International | Utilities | Paris, France | — | Unknown | Source |
| August 2022 | ENN Group | Utilities | Langfang, China | — | Unknown | Source |
| August 2022 | Bell Technical Solutions (BTS) | Utilities | Quebec, Canada | — | Unknown | Source |
| August 2022 | Damart | Retail | Roubaix, France | — | No | Source |
| August 2022 | Mansfield Independent School District | Education | Texas, United States | 129,593 | Unknown | Source |
| July 2022 | Weidmüller | Manufacturing | Detmold, Germany | — | Unknown | Source |
| July 2022 | Tift Regional Medical Center | Healthcare | Georgia, United States | 180,142 | No | Source |
| July 2022 | Sando | Construction | Málaga, Spain | — | Unknown | Source |
| July 2022 | Wootton Upper School and Kimberley College (Wootton Academy Trust) | Education | Bedford, United Kingdom | — | Unknown | Source |
| July 2022 | Empress EMS | Healthcare | New York, United States | 305,056 | Unknown | Source |
| June 2022 | Cal-Ore Telecommunications Company | Utilities | Oregon, United States | — | Unknown | Source |
| June 2022 | Apetito | Food and Beverage | Trowbridge, United Kingdom | — | Unknown | Source |
| June 2022 | The New York Racing Association, Inc. | Other | New York, United States | — | Unknown | Source |
| June 2022 | SuperAlloy Industrial Company Ltd. (SAI) | Manufacturing | Douliu, Taiwan | — | Unknown | Source |
| June 2022 | Artear (Arte Radiotelevisivo Argentino) | Other | Buenos Aires, Argentina | — | Unknown | Source |
| June 2022 | Reiter Affiliated Companies, LLC | Food and Beverage | California, United States | 93,000 | Unknown | Source |
| June 2022 | General Health System | Healthcare | Louisiana, United States | 46,149 | No | Source |
| June 2022 | Diskriter Inc. | Healthcare | Pennsylvania, United States | — | Unknown | Source |
| June 2022 | Baton Rouge General Medical Center | Healthcare | Louisiana, United States | — | Unknown | Source |
| May 2022 | Bank of Zambia | Government | Lusaka, Zambia | — | No | Source |
| May 2022 | Asociación Navarra de Informática Municipal (Animsa) | Service | Navarra, Spain | — | Unknown | Source |
| May 2022 | SERV Behavioral Health Systems, Inc. | Healthcare | New Jersey, United States | 8,110 | Unknown | Source |
| May 2022 | Caja Costarricense de Seguro Social (CCSS) | Government | San José, Costa Rica | — | Unknown | Source |
| May 2022 | Goodman Campbell Brain and Spine | Healthcare | Indiana, United States | 362,833 | Unknown | Source |
| April 2022 | Massy Stores | Food and Beverage | Port of Spain, Trinidad and Tobago | — | Unknown | Source |
| April 2022 | Hospital Garcia de Orta (HGO) | Healthcare | Almada, Portugal | — | Unknown | Source |
| April 2022 | Perusahaan Gas Negara (PGN) | Government | Jakarta, Indonesia | — | Unknown | Source |
| March 2022 | Trenitalia and Ferrovie dello Stato | Government | Rome, Italy | — | No | Source |
| March 2022 | École Nationale de l’Aviation Civile | Education | Toulouse, France | — | Unknown | Source |
| March 2022 | State Electric Company Limited (STELCO) | Government | Malé, Maldives | — | Unknown | Source |
| March 2022 | Partnership HealthPlan of California | Healthcare | California, United States | 852,375 | Unknown | Source |
| March 2022 | RomPetrol | Other | Bucharest, Romania | — | Unknown | Source |
| March 2022 | First Choice Community Healthcare | Healthcare | New Mexico, United States | 101,541 | Unknown | Source |
| February 2022 | Germano de Sousa | Healthcare | Lisbon, Portugal | — | Unknown | Source |
| January 2022 | Medizin Campus Bodensee | Healthcare | Friedrichshafen, Germany | — | No | Source |
| January 2022 | Poder Judicial de Chaco | Government | Chaco, Argentina | — | No | Source |
| January 2022 | Emil Frey | Retail | Zürich, Switzerland | — | Unknown | Source |
| December 2021 | Syndicat Intercommunal Informatique de Bobigny | Government | Bobigny, France | — | No | Source |
| November 2021 | Supernus Pharmaceuticals, Inc. | Healthcare | Maryland, United States | — | No | Source |
| November 2021 | MediaMarktSaturn Holding | Retail | Ingolstadt, Germany | — | Unknown | Source |
| October 2021 | Macquarie Health | Healthcare | Leichhardt, Australia | 6,717 | Unknown | Source |
| October 2021 | Marten Transport | Transportation | Wisconsin, United States | 35,294 | Unknown | Source |
| October 2021 | Newfoundland and Labrador Health Care Systems | Healthcare | Newfoundland, Canada | 58,200 | Unknown | Source |
| October 2021 | Johnson Memorial Health | Healthcare | Indiana, United States | — | No | Source |
| October 2021 | Janesville School District | Education | Wisconsin, United States | — | Unknown | Source |
| August 2021 | Missouri Delta Medical Center | Healthcare | Missouri, United States | 9,745 | Unknown | Source |
| August 2021 | Memorial Health System | Healthcare | Ohio, United States | 216,478 | Unknown | Source |
| June 2021 | Altus Group | Technology | Toronto, Canada | — | Unknown | Source |
| May 2021 | Daihatsu Diesel Company | Manufacturing | London, United Kingdom | — | Unknown | Source |
| December 2019 | Eastern Band of Cherokee Indians | Government | North Carolina, United States | — | Yes | Source |
Claimed vs confirmed. The figures above the fold on this page come from Hive's own leak-site postings and reflect what the operation claims. The table here is a separate evidence class: incidents Ransomnews verified against a public source. Confirmed counts are lower than claimed counts by design: most victims never disclose, and some leak-site listings are recycled, exaggerated or fabricated. Records and ransom figures are shown only where a named source disclosed them. See the full ransomware statistics or the Ransomtracker dataset.