Ransomware Group intelligence

Benzona

Active

Track Benzona with 14 published victims and 2 known leak locations in a single intelligence view.

Victims 14 Known published victims in this dataset
First discovered 2025-11-26 Earliest victim discovery date
Last discovered 2026-01-30 Latest victim discovery date
Inactive since 85 days Days since the latest known victim
Top country Romania 4 victims
Known locations 2 Leak or negotiation infrastructure tracked

Overview

Benzona is tracked by Breach House as a ransomware group with 14 published victims.

Romania is currently the most targeted country in this dataset.

2 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (2)

    Label Type Availability Links
    Leak location 1 Onion service Unknown benzona6x5ggng3hx52h4mak5sgx5vukrdlrrd3of54g2uppqog2joyd.onion
    Leak location 2 Onion service Unknown rwsu75mtgj5oiz3alkfpnxnopcbiqed6wllyoffpuruuu6my6imjzuqd.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (14)

    Search, filter and paginate the victim timeline for Benzona.

    Type Target Discovered Country Business Category Intel Link
    Ransomware casamedica.com.gt id26002 View details Guatemala Communication / Marketing
    Ransomware empreinte-hotel.com id25692 View details France Hospitality / Food & Beverage / Tourism
    Ransomware *a*ame*i*a.com.g* id25691 View details Other
    Ransomware ccbrt.org id25566 View details Tanzania, United Republic of Healthcare / Pharma
    Ransomware em***int*-ho***.com id25565 View details Other
    Ransomware cc***.or.*z id25439 View details Other
    Ransomware taminsho.com id24984 View details Iran, Islamic Republic of Other
    Ransomware platinumone.in id24479 View details India Services
    Ransomware SUNNYGO.COM.TW id24411 View details Taiwan, Province of China Communication / Marketing
    Ransomware suzuki-ploiesti.ro id24254 View details Romania Other
    Ransomware poliserv.ro id24253 View details Romania Other
    Ransomware mazda-ploiesti.ro id24252 View details Romania Other
    Ransomware dacia-ploiesti.ro id24251 View details Romania Other
    Ransomware sevci.org id24250 View details Côte d'Ivoire Other