Close Menu
  • Home
  • News
  • Security
  • Privacy
  • Cybercrime
    • Threat Groups
    • Ransomware
    • Explainers
    • Stealer Logs
  • AI
  • OSINT
  • Tools
    • Ransomtracker
    • Stealercheck
    • FortiBleed Checker
  • About Us
Facebook X (Twitter) Instagram Threads
Ransomnews
  • Home
  • News
  • Security
  • Privacy
  • Cybercrime
    • Threat Groups
    • Ransomware
    • Explainers
    • Stealer Logs
  • AI
  • OSINT
  • Tools
    • Ransomtracker
    • Stealercheck
    • FortiBleed Checker
  • About Us
Facebook X (Twitter) LinkedIn
Ransomnews

RANSOMHOUSE · Threat actor profile

// THREAT ACTOR

RANSOMHOUSE_

Active

RANSOMHOUSE is a ransomware operator tracked through its public data-leak infrastructure. The group operates under the double-extortion model that defines the modern ransomware ecosystem — file encryption combined with the threat of stolen-data publication on a public leak site — and continues to post fresh victim claims as part of an ongoing extortion campaign.

For Ransomnews editorial coverage of RANSOMHOUSE — incident write-ups, attribution notes, and additional context — see the Threat Groups archive or run a site search.

242 Victims tracked
18 / 186 Active mirrors
2022-08-18 First listing
2026-08-06 Most recent

Victims by year

  • 2026 43
  • 2025 67
  • 2024 69
  • 2023 42
  • 2022 21

Leak site mirrors

186 mirrors tracked, 18 currently reachable. These are criminal-infrastructure URLs — links are deliberately not provided.

  • xw7au5pnwtl6lozbsudkmyd32n6gnqdngitjdppybudan3x3pjgpmpid.onion ©RansomHouse snapshot · 2022-09-30 06:11
  • zohlm7ahjwegcedoz7lrdrti7bvpofymcayotp744qhx6gjmxbuo2yid.onion ©RansomHouse snapshot · 2026-08-06 21:32
  • q2injs6dqvzemu2kkfpk7u3lsrcn4rddip3h2a7oc6uqwq6vjnduamad.onion 404 Not Found snapshot · 2026-05-21 12:00
  • b4k2fi62ctrid4k73itusuvcz5x5yczk27bpqdrsvwu3nl5mnz5dg3id.onion Index of / snapshot · 2026-06-08 18:31
  • gfkngfw25qwhd2sn43x7cflcehk3bb7v2uifjndr2sc3k2abhqs22rad.onion 404 Not Found snapshot · 2026-05-21 12:21
  • ge74uts2ybu22kzwahiayovxelbq5fwhywl73agev5w4fef2e5ikplid.onion Index of / snapshot · 2026-06-08 18:01
  • xlirefmk3w2gsk3n5mkddinbfdatk6lhi7fj36knubhtoxiaqyus44yd.onion Index of / snapshot · 2026-06-08 12:15
  • q2bwuip5xq4qjn2vyevprcddhk26cigyqfqfu6yki7korjys2rposaad.onion 404 Not Found snapshot · 2026-05-21 12:12
  • nuhnnxg3owawo36mwdffyblbzplhthfswny55mh7yhbxq74en6jihyad.onion 404 Not Found snapshot · 2026-05-21 12:00
  • m7vtnbsgctdcsccqmpnmi6igg3pcuiliqqqsq6uonkzg4blpa4eysiad.onion Index of / snapshot · 2026-06-08 18:05
  • vopa354z4toilkjn4ileaf6rinkzn2givaokvj4yguq5kbiqoulxnzyd.onion 404 Not Found snapshot · 2026-05-21 12:00
  • helc2q6kbiyz4cwegzlp5anigkbjsbowjxrjxv3j27rjbvycgr2qd2qd.onion 404 Not Found snapshot · 2026-05-21 12:15
  • aw5q5nzdok52cgprlzik4n44qstoajrlbixqqukqqcennjyas4x4opad.onion 404 Not Found snapshot · 2026-05-21 13:00
  • bffujdbkhxfs2y63haztye4txuqgbkttmtxuxzkrlnruyioak5aoohid.onion 404 Not Found snapshot · 2026-05-21 13:00
  • swnoxbuqfh7dmbqzaigqllkkljspipnvft3a4offxh3m5zwxg6ob46ad.onion 404 Not Found snapshot · 2026-05-21 12:00
  • nw4f4x2gix7y7y3nizwj2fnf5u4tqy2mwej62r6tdqye4s5ogrtftuid.onion 404 Not Found snapshot · 2026-05-21 12:10
  • pnhyueueqsog3gbjuq3o7ixqbcdctpqnzv4uujsg3j76nt2bsm2p3rid.onion 404 Not Found snapshot · 2026-05-21 12:00
  • oujq7kjgzj4r3fyvsb2wtz6bxycrvawqdtj6zqgljw7u4hwqsak34jqd.onion 404 Not Found snapshot · 2026-05-21 11:00
  • jjgql4ddcs3hk5ptmfrpjriplialbjwi5a4tekffbfzv6n6oj5bmklid.onion 404 Not Found snapshot · 2026-05-21 13:00
  • hyinn53atxthbme4n76ry76jiaohqd6uk35jwni32g6dqtqkaejgquid.onion 404 Not Found snapshot · 2026-05-21 13:00
  • 3nr2abdugd4mqabdmhialw3nbhol2qpywsphkocrhp6f7yxp3cps5iad.onion 404 Not Found snapshot · 2026-05-21 12:26
  • blofpgq5q3talt3y2w3y6r3focrtrk7ugmwl3e6a4pjuf5t2tivkxbqd.onion 404 Not Found snapshot · 2026-05-21 12:34
  • t7ezcjqq7h24gwswhyde72x4gkqxsjeyt2fxz44kcls6ipm4wd6bmsid.onion Index of / snapshot · 2026-05-09 15:15
  • 57yqe2tksgsmmwaqrxf45uaqy45t3hxu3dcnywjdks6lhtfztkpx57yd.onion 404 Not Found snapshot · 2026-05-21 12:30
  • uvl645c47e5bozdzrrtjtm6pea5oltef63tsewz5ucmubvsj5i7meiid.onion 404 Not Found snapshot · 2026-05-21 12:29
  • omdcwhef4ztuwhdiv3dbcgz2iyh2yb3gkkbusgvegbyjcacctahpxryd.onion 404 Not Found snapshot · 2026-05-21 12:18
  • uv4sykhrapb2t3mnhw6imkbdym4fh6vstwcdsvbtzrvdwzcd5zzlylqd.onion 404 Not Found snapshot · 2026-05-21 12:00
  • 7yrwf73tckb4mtt2kms4qc7nr7rzghu3jdzycm4w4qq2nwrybi7hq7ad.onion 404 Not Found snapshot · 2026-05-21 13:00
  • ggyosmcjq5vw7qimqhn2bf2gbr5zhdqmrfl35nnki6q5dmvblcqsmhyd.onion 404 Not Found snapshot · 2026-05-21 12:25
  • rfbka2dt27wyuzymonzzx2zeaohx7sejti4gpihhc22hv74hya4h4vyd.onion 404 Not Found snapshot · 2026-05-21 12:36

Recent victims

The 50 most recent victims claimed by RANSOMHOUSE. Total in the index: 242.

Date listed Victim Description
2026-08-06 TECHVENTURES BANK S.A.
2026-08-06 City of Beacon
2026-08-06 lya Construtora
2026-08-06 City of McMinnville OR
2026-08-03 PCL Holding
2026-08-03 [DISCLOSED]Fidelity Services Group
2026-07-22 Nichirei
2026-07-16 Megawork
2026-07-15 Fidelity Services Group
2026-07-06 [DISCLOSED]Prince George County
2026-07-03 [EVIDENCE]Prince George County
2026-06-29 Bonacio
2026-06-23 [DISCLOSED]Karl Chevrolet
2026-06-17 Prince George County
2026-06-16 Promepla
2026-06-08 Aegle Aviation
2026-06-08 Ma Pak Leung Company Limited
2026-05-07 Trellix (McAfee & FireEye)
2026-04-29 Karl Chevrolet
2026-04-28 Cybersecurity Vendor
2026-04-24 Star Energy Geothermal Salak
2026-04-21 Jiangsu Zenergy Battery Technologies Group Co., Ltd.
2026-04-17 Winnitex (Americas) Limited
2026-04-13 Transaction Packing Inc
2026-04-08 [DISCLOSED]Accelerated Services
2026-04-06 [DISCLOSED]Bioptik Technology
2026-03-26 [DISCLOSED] Irec Sas
2026-03-13 Irec Sas
2026-03-12 Bioptik Technology
2026-02-27 Neinver
2026-02-27 Accelerated Services
2026-02-18 [Internal database pack 4] Warren County Sheriff’s Office
2026-02-06 Associated Endocrinologists
2026-02-05 [Internal database pack 2] Warren County Sheriff’s Office
2026-02-04 [Apple Data, Additional evidence (Apple Watch) pack-2]Luxshare Precision Industry Co. Ltd.
2026-01-30 [Internal database pack 1] Warren County Sheriff’s Office
2026-01-29 [Weapons License] Warren County Sheriff’s Office
2026-01-26 [Apple Data, Additional evidence]Luxshare Precision Industry Co. Ltd.
2026-01-23 Warren County Sheriff’s Office
2026-01-19 [Apple Data]Luxshare Precision Industry Co. Ltd.
2026-01-08 Fedcap
2026-01-08 [DISCLOSED]Assolim
2026-01-08 Luxshare Precision Industry Co. Ltd.
2025-12-29 ESSPL
2025-12-29 Arkan
2025-12-26 [DISCLOSED]Soderstrom Architects, LTD
2025-12-24 [DISCLOSED] Diaz Gill Medicina Laboratorial S.A.
2025-12-22 Assolim
2025-12-19 Lawsoft
2025-12-15 Diaz Gill Medicina Laboratorial S.A.

← Back to Ransomtracker

Statistics on this page are computed by Ransomnews from a live leak-site monitoring feed. Numbers update every ten minutes. Operator-written victim descriptions are truncated and shown in snippet form only. Source data: RansomLook (CC BY 4.0), aggregated and adapted by Ransomnews.

Facebook X (Twitter) LinkedIn
© 2026 Ransomnews.com

Type above and press Enter to search. Press Esc to cancel.

Cookies on Ransomnews

We use strictly-necessary cookies to run the site and may use first-party analytics to understand which articles are read. Some pages contain affiliate links — when you click one, the affiliate network sets cookies on the merchant's domain to attribute the referral. See the Cookie Policy and Affiliate Disclosure for detail.

RANSOMNEWS.COM

Tracking the criminal infrastructure of the internet.

Independent coverage of ransomware, breach economics, threat actors, privacy, AI security, and the open-source investigation toolkit.

// Topics

  • News
  • Security
  • Privacy
  • Cybercrime
  • AI
  • OSINT
  • Threat Groups
  • Stealer Logs
  • Ransomtracker
  • Stealercheck
  • FortiBleed Checker

// Site

  • About Us
  • Editorial Team
  • Contact
  • Tip Line
  • Editorial

// Legal

  • Privacy Policy
  • Terms of Service
  • Cookie Policy
  • Funding & Independence
  • RSS Feed
© 2026 Ransomnews.com · Tracking the criminal infrastructure of the internet.