Skip to content
Leak site of termite, captured by ThreatCluster

termite

Active

25 tracked victims · First seen May 11, 2023 · Last seen Sep 25, 2026

About

Written by ThreatCluster from 2 stories

Termite is a ransomware actor operating an extortion-driven model that centers on data access and exposure, with the group publicly claiming responsibility for breaches involving sensitive information. The victims claimed total 49, spanning Healthcare, Manufacturing, Telecommunication, Business Services, and Technology sectors, with targets in the US, GB, FR, CA, and DE. A discernible pattern across the reporting is that breaches result in sensitive-data exposure, illustrated by the Family Health Centers of Southern Indiana incident discovered January 16, 2026, where names, Social Security numbers, medical information, and health-insurance details were exposed and Termite claimed responsibility.

Sectors: Healthcare, Telecommunication, Automotive parts · Countries: US, GB, FR

Recent victims

View all →
VictimSectorCountryDataFilesViewsPostedStatus
Crossett
crossettinc.com
Petroleum transportationUnited States; Canada70gb of data.—378Sep 26, 2026published
Sealcon
sealconusa.com
cable management providerUnited States——555Sep 22, 2026published
TruAmerica Multifamily
truamerica.com
Real estateUnited States——532Sep 22, 2026published
theLender
thelender.com
Wholesale mortgageUnited States——549Sep 22, 2026published
Everglades Boats
evergladesboats.com
Boat manufacturing (offshore fishing boats)United States—6,0941,789Aug 22, 2026published
Affinia Healthcare
affiniahealthcare.org
HealthcareUS——2,729Jul 28, 2026published
JD Young
jdyoung.com
financial institutionsCN——2,640Jul 27, 2026published
Cal Fresh
calfresh.ca.gov
Food Assistance/NonprofitCA——4,614Jun 9, 2026published
Wiese USA
ieseusa.com
Material handling machinery / industrial equipmentUS~350gb of data.—4,358Jun 8, 2026published
Roland Machinery
rolandmachinery.com
wholesale distribution of construction equipmentUnited States——4,404Jun 8, 2026published
Indiana Mills and Manufacturing
imminet.com
design, testing, and manufacturing of advanced safety systems for various industriesUnited StatesWe have ~200gb of data.—4,737May 30, 2026published
UEI College
uei.edu
EducationUnited States~450gb—4,842May 30, 2026published
RAMAR FOODS INTERNATIONAL
ramarfoods.com
Frozen food manufacturing and distributionUS~160gb of data—5,212May 16, 2026published
Millennium Dental Technologies
lanap.com
Dental products manufacturing and distribution——6,283Apr 17, 2026published
Noll and Tam Architects
nollandtam.com
ArchitectureUS~300gb of data—7,236Mar 17, 2026published
City of Huntington
cityofhuntington.com
Public Sector——7,584Mar 7, 2026published
Bartram Trail Surveying
bartramtrail.net
land surveyingUS——7,356Mar 3, 2026published
Insight Hospital and Medical Center Chicago
insightchicago.com
Teaching hospitalUS360gb (~900.000 files)900,0007,613Feb 28, 2026published
Jones Haber
joneshaberlaw.com
Law firm——7,720Feb 25, 2026published
The Siskiyou Telephone
siskiyoutelephone.com
telecommunicationsUS——7,803Feb 25, 2026published
Birmingham Museum of Art
artsbma.org
Not FoundUS——7,732Feb 25, 2026published
Insight Hospital & Medical Center ChicagoHealthcareUS———Feb 24, 2026
Family Health Center
fhcenters.org
HealthcareWe have ~250gb of data.—8,568Feb 2, 2026published
Hermes Medical Solutions
hermesmedical.com
HealthcareSE~25gb of confidential data.—10,042Dec 25, 2025published
MedHelp
medhelpclinics.com
HealthcareUS~25gb of confidential data.—10,588Dec 17, 2025published

All ransomware groups · Dark web intelligence