THREAT ACTOR
RHYSIDA_
ActiveRhysida is a ransomware operation active since mid-2023, named for the centipede genus depicted on its leak site. The group has hit healthcare, education, and government targets, including the British Library, Insomniac Games, and the Chilean Army.
For Ransomnews editorial coverage of RHYSIDA, including incident write-ups, attribution notes and additional context, see the Threat Groups archive or run a site search.
290
Victims tracked
5 / 7
Active mirrors
2023-06-09
First listing
2026-09-19
Most recent
Victims by year
- 2026 32
- 2025 94
- 2024 86
- 2023 78
Leak site mirrors
7 mirrors tracked, 5 currently reachable. These are criminal-infrastructure URLs; links are deliberately not provided.
-
rhysidafohrhyy2aszi7bm32tnjat5xri65fopcxkdfxhi4tidsg7cad.onionRhysida snapshot · 2026-09-23 00:12 -
rhysidafohrhyy2aszi7bm32tnjat5xri65fopcxkdfxhi4tidsg7cad.onionsnapshot · 2026-09-23 00:01 -
rhysidafohrhyy2aszi7bm32tnjat5xri65fopcxkdfxhi4tidsg7cad.onionsnapshot · 2026-09-23 00:16 -
rhysidafc6lm7qa2mkiukbezh7zuth3i4wof4mh2audkymscjm6yegad.onionRhysida snapshot · 2026-09-23 00:00 -
rhysidaeoxtkejwuheks3a7htk4zn3dfuynt5mqw6oawlcx6kcxjdeyd.onionOnionsite Not Found snapshot · 2026-01-05 14:03 -
rhysidaiqemmlrvn2jvncdwhkvuiv7s2iu342xnrpeynxoe6r2dtjfyd.onionOnionsite Not Found snapshot · 2026-01-06 18:13 -
rhysidaqho36b6i6mvpmy5di4ro5zglovtxixrirky6q3fgack7q5uyd.onionOnionsite Not Found snapshot · 2026-09-23 00:26
Recent victims
The 50 most recent victims claimed by RHYSIDA. Total in the index: 290.
| Date listed | Victim | Description |
|---|---|---|
| 2026-09-19 | Kreishandwerkerschaft Borken | Kreishandwerkerschaft Borken The Kreishandwerkerschaft Borken is the o… |
| 2026-09-18 | MPA Pharma | MPA Pharma MPA Pharma GmbH is an internationally active, rapidly growi… |
| 2026-09-12 | Axdia International | Axdia International Axdia International is a German electronics compan… |
| 2026-09-10 | General Santos Doctors Hospital | General Santos Doctors Hospital 3.502.636 files, total volume ~2.44 TB… |
| 2026-09-10 | Professional Retail Services | Professional Retail Services Owner�s documents: employee evaluations, … |
| 2026-09-08 | SAD'S Interim | SAD'S Interim Since 2000, SAD'S INTERIM has established itself as a ke… |
| 2026-09-07 | Rug & Home | Rug & Home Rug & Home is a leading destination in the USA for rugs, fu… |
| 2026-09-01 | Szechenyi Programiroda Nonprofit Kf | Szechenyi Programiroda Nonprofit Kf As a key player in Hungarian devel… |
| 2026-08-28 | Berlin, Germany | Berlin, Germany Total capacity 5.79 TBArchive scale: ~1.44 million fil… |
| 2026-08-28 | Valley Health Team | Valley Health Team 9,056,196 files3.28 TBLarge SQL databases containin… |
| 2026-08-22 | CRI Electric | CRI Electric CRI Electric is a veteran-owned business based in San Ant… |
| 2026-08-21 | Fairview Dental Group | Fairview Dental Group Fairview Dental Group offers a range of dental s… |
| 2026-08-21 | Coming soon | Coming soon Total capacity 5.79 TBLegal/Complaints/Offenses 77,939 OWi… |
| 2026-08-21 | Battle Creek Public Schools | Battle Creek Public Schools Battle Creek Public Schools in Nebraska pr… |
| 2026-08-14 | Pierce Township | Pierce Township Pierce Township is a growing community in Ohio that bl… |
| 2026-08-13 | SIA Medical Centre | SIA Medical Centre SIA Medical was established in 1993 and was founded… |
| 2026-06-18 | Lawson Roofing | Lawson Roofing Lawson Roofing is a fourth-generation company based in … |
| 2026-05-25 | IDS Group | IDS Group IDS Group is an award-winning multi-discipline design, engin… |
| 2026-05-19 | Landeshauptstadt Stuttgart | Landeshauptstadt Stuttgart Stuttgart is the capital city of Baden-Wurt… |
| 2026-05-15 | Tower View Primary School | Tower View Primary School Tower View Primary School is an educational … |
| 2026-04-27 | Stelia North America | Stelia North America STELIA North America is an aerospace and defence … |
| 2026-03-02 | Southold Town Senior ServicesSouthold Police Department | Southold Town Senior ServicesSouthold Police Department The Town of So… |
| 2026-02-23 | Rohner | Rohner Rohner designs and builds high-quality, custom paint booths and… |
| 2026-02-17 | Cheyenne & Arapaho Tribes | Cheyenne & Arapaho Tribes The Cheyenne and Arapaho Tribes are a federa… |
| 2026-02-12 | Phoenix Art Museum | Phoenix Art Museum Phoenix Art Museum is an art museum that showcases … |
| 2026-02-06 | Leading Edge Speciali | Leading Edge Speciali |
| 2026-02-04 | Lakeside Union School District | Lakeside Union School District The Lakeside Union School District in C… |
| 2026-02-02 | Elabs | Elabs Elabs is a pioneer in IT services in Germany, delivering innovat… |
| 2026-01-29 | MACT Health Board | MACT Health Board MACT Health Board, Inc. provides quality and compreh… |
| 2026-01-25 | Cytek Biosciences | Cytek Biosciences Cytek Biosciences is a leading cell analysis solutio… |
| 2026-01-21 | Jet-care International | Jet-care International Jet-Care provides first-class laboratory servic… |
| 2026-01-06 | Charles Leonard Steel Services | Charles Leonard Steel Services Charles Leonard Steel Services (CLSS) i… |
| 2025-12-30 | Falk, Waas, Hernandez, Cortina, Solomon & Bonner Overview Metrics | Falk, Waas, Hernandez, Cortina, Solomon & Bonner Overview Metrics Falk… |
| 2025-12-19 | Larry Pitt & Associates | Larry Pitt & Associates Larry Pitt Associates is a law firm specializi… |
| 2025-12-15 | YOKOSUKA GAKUIN | YOKOSUKA GAKUIN Yokosuka Gakuin, a private school in Yokosuka, Kanagaw… |
| 2025-12-13 | ***** *********** | ***** *********** The company is one of the leaders in the production … |
| 2025-12-12 | United Keetoowah Band of Cherokee Indians in Oklahoma | United Keetoowah Band of Cherokee Indians in Oklahoma The Keetoowahs w… |
| 2025-12-11 | Woodard, Emhardt, Henry, Reeves & Wagner, LLP | Woodard, Emhardt, Henry, Reeves & Wagner, LLP Woodard, Emhardt, Henry,… |
| 2025-12-11 | Harbour Town Doctors | Harbour Town Doctors Harbour Town Doctors is an accredited comprehensi… |
| 2025-12-07 | Kane's Furniture | Kane's Furniture Kane's Furniture is a long-established home furnishin… |
| 2025-12-06 | SODISE | SODISE SODISE is a French wholesale distributor and manufacturer of pr… |
| 2025-12-03 | Bo Beuckman Ford | Bo Beuckman Ford At Bo Beuckman Ford, we're a family-owned business th… |
| 2025-12-02 | Cleveland County Sheriff's Office | Cleveland County Sheriff's Office The Cleveland County Sheriffs Office… |
| 2025-11-26 | AGS | AGS Today, Accelerated Global Solutions (AGS) is a rapid-growing globa… |
| 2025-11-25 | Marlex Human Capital | Marlex Human Capital Marlex Great People specializes in human resource… |
| 2025-11-24 | Collge Superieur De Montreal | Collge Superieur De Montreal College Superieur de Montreal is a privat… |
| 2025-11-22 | St. Joseph's Healthcare Hamilton | St. Joseph's Healthcare Hamilton St. Joseph's Healthcare Hamilton (SJH… |
| 2025-11-21 | Wachusett School District MA | Wachusett School District MA Wachusett School District MA is a public … |
| 2025-11-18 | Smoll & Banning, CPAs | Smoll & Banning, CPAs Smoll & Banning, CPA's, LLC is an independent ac… |
| 2025-11-10 | Heart South Cardiovascular Group | Heart South Cardiovascular Group Heart South is a leading provider of … |
CONFIRMED ATTACKS
Rhysida confirmed attacks: 118 verified incidents
Ransomnews has verified 118 Rhysida incidents against named organisations, each corroborated by a public source such as a breach notification, regulatory filing or press report. The confirmed record runs from May 2023 to September 2026. United States accounts for 66 of them (56%), with victims recorded in 25 countries in total. The most affected sector is education, at 30 confirmed victims. A ransom payment was publicly confirmed in 1 case and publicly refused in 25; the outcome is unrecorded in the remaining 92. Where a figure was disclosed (42 cases), these incidents account for 6,120,960 exposed records.
118Verified incidents
25Countries
2023–2026Active range
4%Paid, where outcome known
Confirmed victims by year
Most affected sectors
Most affected countries
Verified Rhysida incidents (100 most recent of 118)
| Date | Organisation | Sector | Location | Records | Ransom paid | Source |
|---|---|---|---|---|---|---|
| September 2026 | Kreishandwerkerschaft Borken | Other | Borken, Germany | — | Unknown | Source |
| August 2026 | Berlin | Government | Berlin, Germany | — | No | Source |
| August 2026 | SIA Medical Centre | Healthcare | Essendon, Australia | — | Unknown | Source |
| June 2026 | Széchenyi Programiroda Nonprofit Kft. | Other | Budapest, Hungary | — | Unknown | Source |
| April 2026 | The Lawson Roofing Co., Inc. | Construction | California, United States | — | Unknown | Source |
| April 2026 | STELIA Aerospace North America Inc. | Manufacturing | Lunenburg, Canada | — | Unknown | Source |
| January 2026 | Elabs AG | Technology | Frankfurt, Germany | — | No | Source |
| December 2025 | Phoenix Art Museum | Other | Arizona, United States | 1,758 | Unknown | Source |
| December 2025 | Cheyenne and Arapaho Tribes | Government | Oklahoma, United States | — | No | Source |
| December 2025 | YOKOSUKA GAKUIN Elementary School | Education | Yokosuka, Japan | — | Unknown | Source |
| November 2025 | Heart South Cardiovascular Group | Healthcare | Alabama, United States | 46,666 | Unknown | Source |
| November 2025 | MACT Health Board, Inc. | Healthcare | California, United States | — | Unknown | Source |
| November 2025 | Cytek Biosciences, Inc. | Healthcare | California, United States | 331 | Unknown | Source |
| November 2025 | Town of Southold | Government | New York, United States | — | No | Source |
| November 2025 | Cleveland County Sheriff's Office | Government | Oklahoma, United States | — | Unknown | Source |
| October 2025 | Marlex | Service | Girona, Spain | — | Unknown | Source |
| October 2025 | Collège Supérieur de Montréal | Education | Montreal, Canada | — | Unknown | Source |
| September 2025 | Hematology Oncology Consultants | Healthcare | Michigan, United States | — | Unknown | Source |
| September 2025 | Spindletop Center | Healthcare | Texas, United States | 88,863 | Unknown | Source |
| September 2025 | MedStar Health | Healthcare | Maryland, United States | — | Unknown | Source |
| August 2025 | Bellflower Unified School District | Education | California, United States | 22,802 | Unknown | Source |
| August 2025 | Maryland Department of Transportation | Government | Maryland, United States | — | No | Source |
| July 2025 | JASCO Applied Sciences Ltd. | Service | Dartmouth, Canada | 66 | No | Source |
| July 2025 | First Baptist Church of Hammond | Other | Indiana, United States | 5,217 | Unknown | Source |
| July 2025 | Cookeville Regional Medical Center | Healthcare | Tennessee, United States | 337,917 | Unknown | Source |
| June 2025 | Cardinal Services, Inc. | Service | Oregon, United States | 142,323 | Unknown | Source |
| June 2025 | Furuno Electric Co., Ltd. | Manufacturing | Nishinomiya, Japan | 8,606 | Unknown | Source |
| May 2025 | Florida Lung, Asthma & Sleep Specialists (FLASS) | Healthcare | Florida, United States | 10,000 | Unknown | Source |
| May 2025 | Welthungerhilfe (WHH) | Other | Bonn, Germany | — | No | Source |
| April 2025 | Oregon Department of Environmental Quality | Government | Oregon, United States | 250 | No | Source |
| March 2025 | Hudson River Housing, Inc. | Other | New York, United States | — | Unknown | Source |
| March 2025 | LaBella Associates | Service | New York, United States | 6,712 | Unknown | Source |
| February 2025 | The Agency (London) Ltd. | Service | London, United Kingdom | — | Unknown | Source |
| January 2025 | Best Collateral, Inc. | Retail | California, United States | — | Unknown | Source |
| December 2024 | City of Carthage | Government | Texas, United States | 8,517 | Unknown | Source |
| December 2024 | Chicano Federation of San Diego County | Other | California, United States | — | Unknown | Source |
| December 2024 | Forrest City School District | Education | Arkansas, United States | — | Unknown | Source |
| December 2024 | Sunflower Medical Group, P.A. | Healthcare | Kansas, United States | 220,968 | Unknown | Source |
| December 2024 | Oral Roberts University | Education | Oklahoma, United States | 2,333 | Unknown | Source |
| December 2024 | Pembina Trails School Division | Education | Winnipeg, Canada | — | Unknown | Source |
| November 2024 | Goodwill North Central Texas | Other | Texas, United States | 6,432 | Unknown | Source |
| November 2024 | Montréal-Nord | Government | Montréal-Nord, Canada | — | Unknown | Source |
| November 2024 | Delmar International Inc. | Transportation | Montreal, Canada | — | No | Source |
| November 2024 | Rutherford County Schools | Education | Tennessee, United States | — | Unknown | Source |
| October 2024 | Granite School District | Education | Salt Lake City, United States | — | Unknown | Source |
| October 2024 | Vermilion Parish School System | Education | Louisiana, United States | — | Unknown | Source |
| September 2024 | Shenango Area School District | Education | Pennsylvania, United States | — | Unknown | Source |
| September 2024 | American Addiction Centers, Inc. | Healthcare | Tennessee, United States | 422,424 | Unknown | Source |
| September 2024 | Fylde Coast Academy Trust | Education | Blackpool, United Kingdom | — | Unknown | Source |
| August 2024 | Kronick Moskovitz Tiedemann & Girard | Legal | California, United States | 24,601 | Yes | Source |
| August 2024 | Henry County Schools | Education | Tennessee, United States | — | Unknown | Source |
| August 2024 | Port of Seattle/Seattle-Tacoma International Airport | Government | Washington, United States | 90,000 | No | Source |
| August 2024 | Sumter County Sheriff's Office | Government | Florida, United States | — | No | Source |
| July 2024 | Pennsylvania State Education Association | Education | Pennsylvania, United States | 517,487 | Unknown | Source |
| July 2024 | Community Care Alliance | Healthcare | Rhode Island, United States | 114,975 | Unknown | Source |
| July 2024 | Liberty Resources, Inc. | Healthcare | New York, United States | 363 | Unknown | Source |
| July 2024 | Project Hospitality | Other | New York, United States | — | Unknown | Source |
| July 2024 | Southwest Colorado Mental Health Center, Inc. d/b/a Axis Health System | Healthcare | Colorado, United States | 23,385 | Unknown | Source |
| July 2024 | Maryville Academy | Other | Illinois, United States | 513 | Unknown | Source |
| July 2024 | Bayhealth Medical Center | Healthcare | Delaware, United States | 2,767 | Unknown | Source |
| July 2024 | City of Columbus | Government | Ohio, United States | 500,000 | No | Source |
| June 2024 | NewsBank, Inc. | Service | Florida, United States | 2,664 | Unknown | Source |
| June 2024 | Gándara Mental Health Center | Healthcare | Massachusetts, United States | 20,024 | Unknown | Source |
| June 2024 | Moser Wealth Advisors | Finance | Washington, United States | 955 | Unknown | Source |
| June 2024 | Olympus Financial | Finance | California, United States | — | Unknown | Source |
| June 2024 | New Jersey City University | Education | New Jersey, United States | — | No | Source |
| June 2024 | New Mexico Law Offices of the Public Defender | Government | New Mexico, United States | — | Unknown | Source |
| April 2024 | Easterseals Central Illinois | Healthcare | Illinois, United States | 14,855 | Unknown | Source |
| April 2024 | Hernando County | Government | Florida, United States | — | Unknown | Source |
| April 2024 | Malaysian Industrial Development Finance | Finance | Petaling Jaya, Malaysia | — | Unknown | Source |
| March 2024 | Unimed Vales do Taquari e Rio Pardo | Healthcare | Lajeado, Brazil | — | No | Source |
| March 2024 | MarineMax, Inc. | Retail | Florida, United States | 123,494 | Unknown | Source |
| February 2024 | China National Petroleum Corporation (CNPC Perú S.A.) | Other | Miraflores, Peru | — | Unknown | Source |
| January 2024 | Ann & Robert H. Lurie Children's Hospital of Chicago | Healthcare | Illinois, United States | 791,784 | No | Source |
| January 2024 | Azienda Sanitaria di Matera, Azienda Sanitaria di Potenza, AOR San Carlo Potenza ed IRCCS-CROB Rionero in Vulture | Healthcare | Matera, Italy | — | No | Source |
| December 2023 | Abdali Hospital | Healthcare | Amman, Jordan | — | Unknown | Source |
| December 2023 | Tshwane University of Technology | Education | Pretoria, South Africa | — | Unknown | Source |
| December 2023 | Aspiration Training | Education | Redditch, United Kingdom | — | Unknown | Source |
| December 2023 | Kauno Technologijos Universitetas | Education | Kaunas, Lithuania | — | Unknown | Source |
| December 2023 | World Council of Churches/Lutheran World Federation | Other | Geneva, Switzerland | — | Unknown | Source |
| December 2023 | Insomniac Games | Technology | California, United States | — | Unknown | Source |
| November 2023 | King Edward VII’s Hospital | Healthcare | London, United Kingdom | — | Unknown | Source |
| November 2023 | Holding Slovenske Elektrarne (HSE) | Government | Ljubljana, Slovenia | — | No | Source |
| November 2023 | NC Central University | Education | North Carolina, United States | — | Unknown | Source |
| October 2023 | Northwest Eye Care Professionals | Healthcare | Oregon, United States | 950 | Unknown | Source |
| October 2023 | British Library | Government | London, United Kingdom | — | No | Source |
| October 2023 | Azienda Ospedaliera Universitaria Integrata Verona | Healthcare | Verona, Italy | — | No | Source |
| September 2023 | Southern Arkansas University | Education | Arkansas, United States | — | Unknown | Source |
| September 2023 | Istituto Prosperius Srl | Healthcare | Florence, Italy | — | No | Source |
| September 2023 | Universidade Federal de Mato Grosso do Sul (UFMS) | Education | Mato Grosso do Sul, Brazil | — | Unknown | Source |
| September 2023 | Câmara Municipal de Gondomar | Government | Gondomar, Portugal | — | No | Source |
| September 2023 | Dirección General de Migración | Government | Santo Domingo, Dominican Republic | — | Unknown | Source |
| September 2023 | Ministry of Finance | Government | Kuwait City, Kuwait | — | Unknown | Source |
| August 2023 | Optimum Allied Health | Healthcare | Ballina, Australia | — | Unknown | Source |
| August 2023 | Travian Games | Technology | Munich, Germany | — | Unknown | Source |
| August 2023 | IT-Center Syd | Technology | Sønderborg, Denmark | — | Unknown | Source |
| August 2023 | Singing River Health System | Healthcare | Mississippi, United States | 895,204 | No | Source |
| August 2023 | Prince George County Public Schools | Education | Maryland, United States | 117,785 | Unknown | Source |
| August 2023 | Instituto de Servicios Sociales para Jubilados y Pensionados de Argentina (PAMI) | Government | Buenos Aires, Argentina | — | No | Source |
| July 2023 | Pierce College | Education | Washington, United States | 155,811 | Unknown | Source |
Claimed vs confirmed. The figures above the fold on this page come from Rhysida's own leak-site postings and reflect what the operation claims. The table here is a separate evidence class: incidents Ransomnews verified against a public source. Confirmed counts are lower than claimed counts by design: most victims never disclose, and some leak-site listings are recycled, exaggerated or fabricated. Records and ransom figures are shown only where a named source disclosed them. See the full ransomware statistics or the Ransomtracker dataset.