Close Menu

PYSA · Threat actor profile

THREAT ACTOR

PYSA_

Dormant

PYSA is a ransomware operator tracked through its public data-leak infrastructure. The group operates under the double-extortion model that defines the modern ransomware ecosystem: file encryption combined with the threat of stolen-data publication on a public leak site. It continues to post fresh victim claims as part of an ongoing extortion campaign.

For Ransomnews editorial coverage of PYSA, including incident write-ups, attribution notes and additional context, see the Threat Groups archive or run a site search.

308 Victims tracked
0 / 1 Active mirrors
2021-09-09 First listing
2021-12-29 Most recent

Victims by year

  • 2021 308

Leak site mirrors

1 mirror tracked, 0 currently reachable. These are criminal-infrastructure URLs; links are deliberately not provided.

  • pysa2bitc5ldeyfak4seeruqymqs4sj5wt5qkcq7aoyg4h2acqieywad.onion Pysa's Partners snapshot · 2022-02-21 21:07

Recent victims

The 50 most recent victims claimed by PYSA. Total in the index: 308.

Date listed Victim Description
2021-12-29
2021-12-06 CHR Solutions
2021-11-08 The Skinners Kent Academy
2021-11-08 Kent County Council
2021-11-08 Rusty Hardin & Associates
2021-11-08 R.E. Pedrotti Co.
2021-11-08 UEMOA
2021-11-08 Skatetown
2021-11-08 CHRYSO
2021-11-08 itimCloud
2021-11-08 Bayonet
2021-11-08 Fly Arik Air
2021-11-08 Las Vegas Cancer Center
2021-11-08 CarpenterProjects
2021-11-08 Westmont Helena
2021-11-08 Woodchurch High School
2021-11-08 Emkay Food Sales
2021-11-08 Premier Energy
2021-11-08 Schmincke Künstlerfarben
2021-11-08 Stratford Land
2021-11-08 Dr Schneider
2021-11-08 Rockbridge and Bath County
2021-11-08 Nordic Pharma
2021-11-08 The Leschaco Group
2021-11-08 Eason Horticultural Resources
2021-11-08 ΤΕΧΝΟΛΟΓΙΚΟ ΠΑΝΕΠΙΣΤΗΜΙΟ ΚΥΠΡΟΥ
2021-11-08 SWL
2021-11-08 Lucton School
2021-11-08 Hickory Veterinary Hospital
2021-11-08 Westvale Primary School
2021-11-08 Property Damage Restoration
2021-11-08 Garner Dental Group
2021-11-08 MVS Mailers
2021-11-08 EHS
2021-11-08 Comstock Johnson Architects
2021-11-08 La Bodega
2021-11-08 Gulfport MS
2021-11-08 Pitts Baptist Church
2021-11-08 Emi Jay
2021-11-08 Niemi Bil i Luleå
2021-11-08 Department of Justice and Constitutional Development
2021-11-08 MPRL E&P
2021-11-08 Capitol Beauty School
2021-11-08 Bryant Industrial Services
2021-11-08 Alternatives, Inc.
2021-11-08 Family Dental Health
2021-11-08 Community Brands
2021-11-08 Vision Source
2021-11-08 AECOM
2021-11-08 Jalasoft

CONFIRMED ATTACKS

Pysa confirmed attacks: 83 verified incidents

Ransomnews has verified 83 Pysa incidents against named organisations, each corroborated by a public source such as a breach notification, regulatory filing or press report. The confirmed record runs from July 2019 to January 2022. United States accounts for 36 of them (43%), with victims recorded in 20 countries in total. The most affected sector is education, at 30 confirmed victims. A ransom payment was publicly confirmed in 2 cases and publicly refused in 17; the outcome is unrecorded in the remaining 64. Where a figure was disclosed (21 cases), these incidents account for 1,503,226 exposed records.

83Verified incidents
20Countries
2019–2022Active range
11%Paid, where outcome known

Confirmed victims by year

  • 20191
  • 202055
  • 202126
  • 20221

Most affected sectors

  • Education30
  • Healthcare20
  • Government10
  • Other4
  • Manufacturing4
  • Technology3
  • Finance3
  • Transportation2

Most affected countries

  • United States36
  • United Kingdom11
  • France6
  • Spain5
  • Brazil4
  • Australia3
  • Colombia2
  • Canada2

Verified Pysa incidents

DateOrganisationSector LocationRecordsRansom paidSource
January 2022 Jackson County Hospital Healthcare Florida, United States 98,746 Unknown Source
November 2021 Upstate HomeCare Healthcare New York, United States 5,114 Unknown Source
October 2021 Autonomous University of Barcelona Education Barcelona, Spain — No Source
August 2021 University of Liechtenstein Education Vaduz, Liechtenstein — No Source
June 2021 FCS Financial Finance Missouri, United States 85,755 Unknown Source
June 2021 Judson Independent School District Education Texas, United States 428,761 Yes Source
May 2021 Greater New York Mutural Insurance, Inc. Finance New York, United States 33,959 Unknown Source
May 2021 Florida Heart Associates Healthcare Florida, United States 45,148 No Source
April 2021 Woodlake Unified School District Education California, United States — Unknown Source
April 2021 Spartanburg & Pelham OB-GYN Healthcare South Carolina, United States — Unknown Source
April 2021 One Community Health Healthcare Oregon, United States 39,865 Unknown Source
April 2021 Santélys Healthcare Loos, France — Unknown Source
April 2021 Logansport Community School Corporation Education Indiana, United States 2,750 No Source
April 2021 Haverhill Public Schools Education Massachusetts, United States 229 Unknown Source
April 2021 Consolidated High School District 230 Education Illinois, United States 2,823 Unknown Source
March 2021 Syracuse ASC, dba Specialty Surgery Center of Central New York Healthcare New York, United States 24,891 Unknown Source
March 2021 Buffalo Public Schools Education New York, United States 14,039 No Source
March 2021 Bridgeway, Inc. Healthcare Oklahoma, United States — Unknown Source
February 2021 Millersville University Education Pennsylvania, United States — No Source
February 2021 LifeBridge Community Gastroenterology, LLC dba Woodholme Gastroenterology Healthcare Maryland, United States 66,342 Unknown Source
February 2021 Levante UD Other Valencia, Spain — Unknown Source
February 2021 Gering Public Schools Education Nebraska, United States — Unknown Source
February 2021 Bolton Street Pediatrics Healthcare Massachusetts, United States 986 Unknown Source
February 2021 Affton School District Education Missouri, United States 1,183 Unknown Source
January 2021 Virgin Islands Port Authority Government St. Thomas, U.S. Virgin Islands — Unknown Source
January 2021 Østre Toten Government Østre Toten, Norway — No Source
January 2021 Bridgwater & Taunton College Education Bridgwater, United Kingdom — Unknown Source
December 2020 Palos Community Consolidated School District 118 Education Illinois, United States — Unknown Source
December 2020 King Henry VIII School Education Coventry, United Kingdom — Unknown Source
December 2020 Felix Storch, Inc. Manufacturing New York, United States 226 No Source
December 2020 Ville d’Annecy Government Annecy, France 1,018 No Source
December 2020 Flamingo Horticulture Other Hertfordshire, United Kingdom — Unknown Source
December 2020 FitzWimarc School Education Rayleigh, United Kingdom — Unknown Source
December 2020 Cleveland Institute of Music Education Ohio, United States — Unknown Source
December 2020 Brookfield Public Schools Education Connecticut, United States — Unknown Source
November 2020 St. Mary School Hyde Park Education Ohio, United States — Unknown Source
November 2020 St. Margaret’s Hospice Healthcare Louisiana, United States — Unknown Source
November 2020 Salesianum School Education Delaware, United States — No Source
November 2020 Overlake Obstetricians & Gynecologists Healthcare Washington, United States — Unknown Source
November 2020 Mid-Florida Pathology Healthcare Florida, United States — Unknown Source
November 2020 Nama Khoi Municipality Government Nama Khoi, South Africa — No Source
November 2020 Mendes Júnior Engenharia Construction Belo Horizonte, Brazil — Unknown Source
November 2020 Davis & Shirtliff (Dayliff) Retail Nairobi, Kenya — Unknown Source
November 2020 Affinity Education Education Brisbane, Australia — Unknown Source
October 2020 Winters Independent School District Education Texas, United States — Unknown Source
October 2020 UCEL (Universidad del Centro Educativo Latinoamericano) Education Rosario, Argentina — Unknown Source
October 2020 Rafaela Alimentos Food and Beverage Santa Fe, Argentina — Unknown Source
October 2020 Hackney Council Government Hackney, United Kingdom 280,000 No Source
October 2020 Ayuntamiento de Guadarrama Government Madrid, Spain — No Source
October 2020 ASE București (Bucharest University of Economic Studies/Academia de Studii Economice din București) Education Bucharest, Romania — Unknown Source
September 2020 Uxbridge College Education Uxbridge, United Kingdom — Unknown Source
September 2020 The Teka Group Manufacturing Santander, Spain — Unknown Source
September 2020 The Sixth Form Bolton Education Bolton, United Kingdom — Unknown Source
September 2020 Seifert Logistics Group Transportation Ulm, Germany — Unknown Source
September 2020 Econocom Technology Puteaux, France — Unknown Source
September 2020 Conselho Federal de Contabilidade (CFC) Government Brasilia, Brazil — Unknown Source
August 2020 Myerscough College Education Preston, United Kingdom — Unknown Source
July 2020 Piedmont Orthopedics/OrthoAtlanta Healthcare Georgia, United States 5,600 Unknown Source
July 2020 Q3 Academies Trust Education Birmingham, United Kingdom — Unknown Source
June 2020 St Andrew's College (Sacschool) Education Makhanda, South Africa — Unknown Source
June 2020 Ribas Alvarez Legal Girona, Spain — Unknown Source
June 2020 Red de Salud de Ladera Healthcare Cali, Colombia — Unknown Source
June 2020 Poliview Tecnologia Technology São Paulo, Brazil — Unknown Source
June 2020 Noor UI Islam Other London, United Kingdom — Unknown Source
June 2020 Matthews Australasia Technology Victoria, Australia — Unknown Source
June 2020 Liberty Linehaul Transportation Ontario, Canada — Unknown Source
June 2020 Fincamex Construction Sinaloa, Mexico — Unknown Source
June 2020 EPS Famisanar Healthcare Bogota, Colombia — Unknown Source
June 2020 Diamond Box Manufacturing West Bromwich, United Kingdom — Unknown Source
June 2020 PJ Fitzpatrick & Associates Finance Victoria, Australia — Unknown Source
June 2020 CDPO (Conditionnement Distribution et Production d’œufs) Food and Beverage Esternay, France — Unknown Source
June 2020 Allard Europe Manufacturing Turnhout, Belgium — Unknown Source
June 2020 Associação Evangélica Beneficente de Londrina (AEBEL) Healthcare Londrina, Brazil — Unknown Source
May 2020 City of Dublin Government California, United States — Unknown Source
May 2020 Assured Imaging Healthcare Arizona, United States 244,813 Unknown Source
April 2020 Illinois Valley Community College Education Illinois, United States 120,978 No Source
April 2020 Faic Service Rome, Italy — Unknown Source
March 2020 Sheldon Independent School District Education Texas, United States — Yes Source
March 2020 Marseille Provence Government Marseille, France — No Source
February 2020 Nonin Medical Healthcare Minnesota, United States — Unknown Source
February 2020 Mairie de Crêts en Belledonne Government Crets en Belledonne, France — Unknown Source
January 2020 Fondation Les Oliviers Healthcare Lausanne, Switzerland — No Source
July 2019 Durham Radio Other Ontario, Canada — No Source

Claimed vs confirmed. The figures above the fold on this page come from Pysa's own leak-site postings and reflect what the operation claims. The table here is a separate evidence class: incidents Ransomnews verified against a public source. Confirmed counts are lower than claimed counts by design: most victims never disclose, and some leak-site listings are recycled, exaggerated or fabricated. Records and ransom figures are shown only where a named source disclosed them. See the full ransomware statistics or the Ransomtracker dataset.

← Back to Ransomtracker

Statistics on this page are computed by Ransomnews from a live leak-site monitoring feed. Numbers update every ten minutes. Operator-written victim descriptions are truncated and shown in snippet form only. Source data: RansomLook (CC BY 4.0), aggregated and adapted by Ransomnews.