Skip to content
Leak site of ransomhouse, captured by ThreatCluster

ransomhouse

Active

25 tracked victims · First seen Jun 1, 2021 · Last seen Oct 5, 2026

About

Written by ThreatCluster from 17 stories

ransomhouse operates as a ransomware‑as‑a‑service group pursuing an extortion‑driven model, combining data theft with encryption and leveraging upgrades to multi‑layered encryption and dual‑extortion tactics. The group has claimed 139 victims, with the most affected sectors being Manufacturing, Business Services, Technology, Healthcare, and Public Sector, and the countries most frequently impacted are the United States, China, Japan, Brazil, and Spain. Recent reporting shows a pattern of targeting high‑value organizations with data exfiltration and ransom demands, as illustrated by the Nichirei Corp. attack in July 2026, where stolen confidential data was threatened with release. Incidents span manufacturing, e-commerce, and cultural sectors across Asia, Europe, and North America.

Sectors: Manufacturing, Business Services, Technology · Countries: US, CN, JP

Recent victims

View all →
VictimSectorCountryPostedStatus
TFG LondonRetail & E-CommerceGBNov 4, 2026
Phillips NizerProfessional ServicesUSOct 30, 2026
Excess BaggageTransportationGBOct 13, 2026
PT Indo Tambangraya MegahEnergy & UtilitiesIDOct 2, 2026
Hospital Hermilio ValdizánHealthcarePEOct 1, 2026listed
TercaOtherBROct 1, 2026
PertaminaEnergy & UtilitiesIDSep 17, 2026
Namibian Defence ForceGovernment & DefenseNASep 16, 2026
California School Employees AssociationEducationUSSep 10, 2026
REXT Holdings Co., Ltd.OtherJPSep 1, 2026
Alya ConstrutoraManufacturingBRAug 7, 2026
TECHVENTURES BANK S.A.Financial ServicesPAAug 6, 2026
City of BeaconGovernment & DefenseUSAug 6, 2026
lya ConstrutoraManufacturingUSAug 6, 2026
City of McMinnville ORGovernment & DefenseUSAug 6, 2026
PCL HoldingProfessional ServicesCAAug 3, 2026
NichireiAgriculture and Food ProductionJPJul 21, 2026
MegaworkBusiness ServicesBRJul 10, 2026
Fidelity Services GroupFinancial ServicesZAJul 15, 2026
BonacioConstructionITJun 29, 2026
Prince George CountyPublic SectorUSJun 17, 2026
PromeplaManufacturingARJun 16, 2026
Aegle AviationTransportation/LogisticsINJun 8, 2026
Ma Pak Leung Company LimitedConsumer goodsHong KongMay 23, 2026
Jiangsu Zenergy Battery Technologies Group Co., Ltd.ManufacturingCNApr 21, 2026

All ransomware groups · Dark web intelligence