Ransomware Group intelligence

Cactus

Inactive

Track Cactus with 248 published victims and 3 known leak locations in a single intelligence view.

Victims 248 Known published victims in this dataset
First discovered 2023-07-20 Earliest victim discovery date
Last discovered 2025-03-21 Latest victim discovery date
Inactive since 400 days Days since the latest known victim
Top country United States 102 victims
Known locations 3 Leak or negotiation infrastructure tracked

Overview

Cactus is tracked by Breach House as a ransomware group with 248 published victims.

United States is currently the most targeted country in this dataset.

3 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (3)

    Label Type Availability Links
    Leak location 1 Onion service Unknown cactusbloguuodvqjmnzlwetjlpj6aggc6iocwhuupb47laukux7ckid.onion
    Leak location 2 Onion service Unknown cactus5dqnqkppa5ayckiyk6dttpqwczdqphv5mxh4dkk5ct544q5aad.onion
    Leak location 3 Onion service Unknown sonarmsng5vzwqezlvtu2iiwwdn3dxkhotftikhowpfjuzg7p3ca5eid.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (248)

    Search, filter and paginate the victim timeline for Cactus.

    Type Target Discovered Country Business Category Intel Link
    Ransomware optiline.com id18578 View details Estonia Communication / Marketing
    Ransomware fplfood.com id18577 View details United States Agriculture / Food
    Ransomware biagibros.com id18576 View details United States Transportation / Travel / Logistics
    Ransomware assaabloy.com id18465 View details Sweden Communication / Marketing
    Ransomware kyb.com id18464 View details Japan Communication / Marketing
    Ransomware tempel.com id18366 View details United States Communication / Marketing
    Ransomware thermoid.com id18365 View details United States Manufacturing / Engineering
    Ransomware baillie.com id18364 View details United States Communication / Marketing
    Ransomware urban1.com id18356 View details United States Communication / Marketing
    Ransomware rocketstores.com id18355 View details United States Retail / E-commerce
    Ransomware quigleyeye.com id18136 View details United States Healthcare / Pharma
    Ransomware stanleyconsultants.com id18105 View details United States Communication / Marketing
    Ransomware caltrol.com id17828 View details United States Communication / Marketing
    Ransomware holtcat.com id17820 View details United States Communication / Marketing
    Ransomware alphabaking.com id17819 View details United States Communication / Marketing
    Ransomware bluedge.com id17791 View details United States Communication / Marketing
    Ransomware lifting.com id17784 View details United States Communication / Marketing
    Ransomware chfindustries.com id17750 View details United States Communication / Marketing
    Ransomware aiibeauty.com id17749 View details United States Communication / Marketing
    Ransomware formanmills.com id17748 View details United States Communication / Marketing
    Ransomware amalgamatedsugar.com id17747 View details United States Communication / Marketing
    Ransomware everelgroup.com id17746 View details Italy Communication / Marketing
    Ransomware regulvar.com id17745 View details Canada Communication / Marketing
    Ransomware electrocraft.com id17739 View details United States Communication / Marketing
    Ransomware associatedasset.com id17738 View details United States Communication / Marketing
    Ransomware grede.com id17737 View details United States Communication / Marketing
    Ransomware branchgroup.com id17736 View details United States Construction / Real Estate
    Ransomware pace-usa.com id17735 View details United States Communication / Marketing
    Ransomware steelwarehouse.com id17734 View details United States Manufacturing / Engineering
    Ransomware newhorizonsbaking.com id17675 View details United States Communication / Marketing
    Ransomware uniekinc.com id17620 View details United States Communication / Marketing
    Ransomware midwayimporting.com id17619 View details United States Communication / Marketing
    Ransomware revitalash.com id17618 View details United States Communication / Marketing
    Ransomware bestbrands.com id17617 View details United States Communication / Marketing
    Ransomware kinseysinc.com id17585 View details United States Communication / Marketing
    Ransomware steelerubber.com id17584 View details United States Manufacturing / Engineering
    Ransomware almostfamousclothing.com id17583 View details United States Communication / Marketing
    Ransomware This entry has been removed following a request from the company. id17582 View details United States Services
    Ransomware ssmcoop.com id17581 View details United States Communication / Marketing
    Ransomware curtisint.com id17467 View details Canada Communication / Marketing
    Ransomware britannicahome.com id17466 View details United States Communication / Marketing
    Ransomware uniquehd.com id17465 View details United States Communication / Marketing
    Ransomware northernresponse.com id17254 View details Canada Communication / Marketing
    Ransomware savoiesfoods.com id17253 View details United States Agriculture / Food
    Ransomware mgainnovation.com id17166 View details United States Communication / Marketing
    Ransomware cornwelltools.com id17165 View details United States Communication / Marketing
    Ransomware rashtiandrashti.com id17164 View details United States Communication / Marketing
    Ransomware alkodistributors.com id17029 View details United States Communication / Marketing
    Ransomware ttucorp.com id17028 View details United States Communication / Marketing
    Ransomware jayaapparelgroup.com id17027 View details United States Finance / Legal / Insurance
    Ransomware johnpaulrichard.com id17026 View details United States Communication / Marketing
    Ransomware vsstransportationgroup.com id17025 View details United States Transportation / Travel / Logistics
    Ransomware sunrise-soya.com id17024 View details Canada Communication / Marketing
    Ransomware awimc.com id16298 View details United States Communication / Marketing
    Ransomware galatachemicals.com id16294 View details United States Manufacturing / Engineering
    Ransomware ptcky.com id16279 View details United States Communication / Marketing
    Ransomware adveo.com id16277 View details France Services
    Ransomware massdevelopment.com id16159 View details United States IT
    Ransomware ottosimon.co.uk id15224 View details United Kingdom Communication / Marketing
    Ransomware lumiplan.com id15110 View details France Communication / Marketing
    Ransomware lsst.ac id15103 View details United Kingdom Education
    Ransomware hacla.org id15076 View details United States Communication / Marketing
    Ransomware picsolve.com id14928 View details United States Communication / Marketing
    Ransomware bcllegal.com id14927 View details United Kingdom Finance / Legal / Insurance
    Ransomware synertrade.com id14788 View details France Communication / Marketing
    Ransomware matki.co.uk id14648 View details United Kingdom Communication / Marketing
    Ransomware corporatejobbank.com id14647 View details United States Finance / Legal / Insurance
    Ransomware www.galab.com id14544 View details Germany Communication / Marketing
    Ransomware actionfirepros.com id14479 View details United States Communication / Marketing
    Ransomware hindlegroup.com id14450 View details United Kingdom Communication / Marketing
    Ransomware kjtait.com id14449 View details United Kingdom Communication / Marketing
    Ransomware www.amchar.com id14448 View details United States Finance / Legal / Insurance
    Ransomware ten8fire.com id14413 View details United States Communication / Marketing
    Ransomware natcoglobal.com id14317 View details United States Finance / Legal / Insurance
    Ransomware peerlessumbrella.com id14315 View details United States Manufacturing / Engineering
    Ransomware thomas-lloyd.com id14314 View details United States Communication / Marketing
    Ransomware riomarineinc.com id14197 View details United States Communication / Marketing
    Ransomware champeau.com id14196 View details Canada Communication / Marketing
    Ransomware simson-maxwell.com id14159 View details Canada Communication / Marketing
    Ransomware balboabayresort.com id14158 View details United States Hospitality / Food & Beverage / Tourism
    Ransomware flodraulic.com id14157 View details United States Communication / Marketing
    Ransomware mcphillips.co.uk id14156 View details United Kingdom Communication / Marketing
    Ransomware rangeramerican.com id14155 View details Puerto Rico Communication / Marketing
    Ransomware securityinstrument.com id14013 View details United States Communication / Marketing
    Ransomware tibaitservices.com id13735 View details Services
    Ransomware mihlfeld.com id13734 View details United States Communication / Marketing
    Ransomware exco-solutions.com id13688 View details Services
    Ransomware dahlvalve.com id13646 View details Canada Communication / Marketing
    Ransomware chubb-bulleid.co.uk id13616 View details United Kingdom Communication / Marketing
    Ransomware leonardssyrups.com id13615 View details United States Finance / Legal / Insurance
    Ransomware westernwyomingbeverages.com id13614 View details United States Hospitality / Food & Beverage / Tourism
    Ransomware demos.fr id13613 View details France Communication / Marketing
    Ransomware denkaiamerica.com id13612 View details United States Communication / Marketing
    Ransomware isometrix.com id13404 View details United States Communication / Marketing
    Ransomware verco.co.uk id13369 View details United Kingdom Communication / Marketing
    Ransomware hydmech.com id13144 View details Communication / Marketing
    Ransomware westfalia-automotive.com id13143 View details Manufacturing / Engineering
    Ransomware millimages.com id13123 View details France Finance / Legal / Insurance
    Ransomware www.glynmarais.co.za id13122 View details South Africa Communication / Marketing
    Ransomware hundhausen.de id13121 View details Germany Communication / Marketing
    Ransomware fbttransport.com id13120 View details Transportation / Travel / Logistics
    Ransomware daystar.com id13119 View details United States Finance / Legal / Insurance
    Ransomware deskcenter.com id13117 View details Communication / Marketing
    Ransomware suminoe.us id13070 View details United States Communication / Marketing
    Ransomware sofidel.com id13063 View details Italy Communication / Marketing
    Ransomware sky-light.com id13062 View details Denmark Communication / Marketing
    Ransomware reawire.com id13061 View details United States Communication / Marketing
    Ransomware transportlaberge.com id12944 View details Canada Transportation / Travel / Logistics
    Ransomware sanyo-shokai.co.jp id12943 View details Japan Communication / Marketing
    Ransomware jmthompson.com id12941 View details United States Communication / Marketing
    Ransomware ctsystem.com id12940 View details Taiwan, Province of China Communication / Marketing
    Ransomware ctgbrands.com id12939 View details United States Communication / Marketing
    Ransomware fpr-us.com id12916 View details United States Communication / Marketing
    Ransomware dollmar.com id12794 View details Italy Communication / Marketing
    Ransomware familyguardian.com id12793 View details Bahamas Communication / Marketing
    Ransomware espackeuro.com id12792 View details Spain Communication / Marketing
    Ransomware schuettemetals.com id12621 View details United States Manufacturing / Engineering
    Ransomware fulcrum.pro id12583 View details United States Communication / Marketing
    Ransomware scanda.com.mx id12516 View details Mexico Finance / Legal / Insurance
    Ransomware acfin.cl id12515 View details Chile Communication / Marketing
    Ransomware iddink.nl id12166 View details Netherlands Communication / Marketing
    Ransomware ghimli.com id12115 View details Australia Communication / Marketing
    Ransomware saglobal.com id12109 View details Canada Energy
    Ransomware concordegroup.ca id12108 View details Canada Healthcare / Pharma
    Ransomware ebir.com id12107 View details Spain Communication / Marketing
    Ransomware coastalcargogroup.com id12106 View details United States Transportation / Travel / Logistics
    Ransomware xdconnects.com id11720 View details Netherlands Communication / Marketing
    Ransomware drmarbys.com id11704 View details United States Communication / Marketing
    Ransomware regulatormarine.com id11674 View details United States Communication / Marketing
    Ransomware mcalvain.com id11509 View details United States Communication / Marketing
    Ransomware regencyfurniture.com id11483 View details United States Communication / Marketing
    Ransomware aerodynamicinc.com id11467 View details United States Communication / Marketing
    Ransomware besttrans.com id11466 View details United States Communication / Marketing
    Ransomware qosina.com id11402 View details United States Communication / Marketing
    Ransomware contenderboats.com id11385 View details United States Communication / Marketing
    Ransomware newagesys.com id11340 View details United States Communication / Marketing
    Ransomware kelson.on.ca id11339 View details Canada Communication / Marketing
    Ransomware eclinicalsol.com id11267 View details United States Healthcare / Pharma
    Ransomware grupatopex.com id11266 View details Poland Communication / Marketing
    Ransomware plymouth.com id11162 View details United States Communication / Marketing
    Ransomware cleshar.co.uk id11158 View details United Kingdom Communication / Marketing
    Ransomware ammega.com id11157 View details Netherlands Communication / Marketing
    Ransomware renypicot.es id11156 View details Spain Communication / Marketing
    Ransomware abtexelgroup.com id11009 View details Netherlands Communication / Marketing
    Ransomware remkes.nl id10949 View details Netherlands Communication / Marketing
    Ransomware advancedprosolutions.com id10910 View details United States Communication / Marketing
    Ransomware se.com id10907 View details France Communication / Marketing
    Ransomware parksite.com id10726 View details United States Communication / Marketing
    Ransomware gocco.com id10695 View details Spain Communication / Marketing
    Ransomware spbglobal.com id10694 View details Spain Communication / Marketing
    Ransomware oogp.com id10589 View details United States Communication / Marketing
    Ransomware jaygroup.com id10576 View details United States Communication / Marketing
    Ransomware asburyauto.com id10408 View details United States Communication / Marketing
    Ransomware acutis.com id10401 View details United States Communication / Marketing
    Ransomware dtsolutions.net id10400 View details United States Services
    Ransomware intercityinvestments.com id10399 View details United States Public Sector
    Ransomware hi-cone.com id10398 View details United States Communication / Marketing
    Ransomware bellgroup.co.uk id10329 View details United Kingdom Communication / Marketing
    Ransomware coop.se id10328 View details Sweden Communication / Marketing
    Ransomware tridon.com.au id10327 View details Australia Communication / Marketing
    Ransomware gdi.com id10324 View details Canada Communication / Marketing
    Ransomware bachoco.com.mx id10323 View details Mexico Communication / Marketing
    Ransomware pbssystems.com id10322 View details Communication / Marketing
    Ransomware quakerwindows.com id10274 View details Energy
    Ransomware dillarddoor.com id10246 View details United States Communication / Marketing
    Ransomware cts.co.uk id10245 View details United Kingdom Communication / Marketing
    Ransomware hunterbuildings.com id10244 View details Construction / Real Estate
    Ransomware larlyn.com id10243 View details Other
    Ransomware wkw-group.com id10242 View details Services
    Ransomware dbmgroup.com id10241 View details Services
    Ransomware LAJOLLAGROUP id10071 View details United States Construction / Real Estate
    Ransomware CTS id10048 View details United Kingdom Other
    Ransomware MEDIMARKET id10043 View details Belgium Healthcare / Pharma
    Ransomware ODALYS id10042 View details France Hospitality / Food & Beverage / Tourism
    Ransomware CIE id10041 View details Spain Manufacturing / Engineering
    Ransomware NNDOMAIN id10040 View details United States Construction / Real Estate
    Ransomware ISC id10039 View details Denmark Energy
    Ransomware DILLARD id10038 View details United States Communication / Marketing
    Ransomware Dillard Door & Security id9994 View details Communication / Marketing
    Ransomware ISC Consulting Engineers id9955 View details Denmark Services
    Ransomware CIE Automotive id9887 View details Manufacturing / Engineering
    Ransomware National Nail Corp id9886 View details Construction / Real Estate
    Ransomware FYIdoctors id9736 View details Canada Healthcare / Pharma
    Ransomware Axiom Construction & Consulting id9735 View details Construction / Real Estate
    Ransomware Medi-Market id9734 View details Belgium Healthcare / Pharma
    Ransomware Odalys Vacances id9733 View details Hospitality / Food & Beverage / Tourism
    Ransomware Verhelst id9653 View details Belgium Construction / Real Estate
    Ransomware Petersen Health Care id9652 View details Healthcare / Pharma
    Ransomware Paul Stuart id9651 View details Finance / Legal / Insurance
    Ransomware GEOCOM id9407 View details Uruguay Communication / Marketing
    Ransomware MultiMasters id9406 View details Belgium Services
    Ransomware UTI Group id9405 View details Romania Communication / Marketing
    Ransomware SCS SpA id9104 View details Public Sector
    Ransomware OmniVision Technologies id9103 View details IT
    Ransomware The Hurley Group id8992 View details Construction / Real Estate
    Ransomware Cornerstone Projects Group id8971 View details Construction / Real Estate
    Ransomware RICOR Global Limited id8970 View details Slovakia Manufacturing / Engineering
    Ransomware UTC Overseas id8875 View details Transportation / Travel / Logistics
    Ransomware Unitex Textile Rental Services id8874 View details Services
    Ransomware Orthum Bau id8861 View details Construction / Real Estate
    Ransomware Astro Lighting id8860 View details Communication / Marketing
    Ransomware DM Civil id8716 View details Australia Construction / Real Estate
    Ransomware Bacon Universal id8699 View details Construction / Real Estate
    Ransomware Spuncast id8698 View details Communication / Marketing
    Ransomware Peacock Bros id8689 View details Australia Services
    Ransomware Wardlaw Claims Service id8581 View details Finance / Legal / Insurance
    Ransomware Levine Bagade Han id8576 View details Communication / Marketing
    Ransomware Leekes id8575 View details United Kingdom Retail / E-commerce
    Ransomware My Insurance Broker id8574 View details Finance / Legal / Insurance
    Ransomware Unimarketing id8573 View details Canada Communication / Marketing
    Ransomware Geo Tek id8549 View details Communication / Marketing
    Ransomware Custom Powder Systems id8547 View details Services
    Ransomware JSS Almonds id8546 View details Communication / Marketing
    Ransomware atWork Office Furniture id8545 View details Canada Services
    Ransomware BRiC Partnership id8544 View details India Communication / Marketing
    Ransomware TORMAX USA id8531 View details Communication / Marketing
    Ransomware West Craft Manufacturing id8530 View details Manufacturing / Engineering
    Ransomware Trimaran Capital Partners id8529 View details Finance / Legal / Insurance
    Ransomware Specialised Management Services id8528 View details Services
    Ransomware Maxxd Trailers id8502 View details Canada Retail / E-commerce
    Ransomware MINEMAN Systems id8501 View details Manufacturing / Engineering
    Ransomware Promotrans id8500 View details France Communication / Marketing
    Ransomware Seymours id8499 View details United Kingdom Construction / Real Estate
    Ransomware Marfrig Global Foods id8496 View details Brazil Agriculture / Food
    Ransomware Barsco id8493 View details Hospitality / Food & Beverage / Tourism
    Ransomware Foroni SPA id8492 View details Manufacturing / Engineering
    Ransomware Hornsyld Købmandsgaard id8491 View details Denmark Agriculture / Food
    Ransomware Lagarde Meregnani id8490 View details France Construction / Real Estate
    Ransomware Balcan id8468 View details Canada IT
    Ransomware Barco Uniforms id8467 View details Hospitality / Food & Beverage / Tourism
    Ransomware Alberto Couto Alves id7401 View details Construction / Real Estate
    Ransomware Agoravita id7400 View details IT
    Ransomware American Meteorological Society id7399 View details NGOs / Associations
    Ransomware Biocair International id7398 View details Healthcare / Pharma
    Ransomware Confartigianato Federimpresa FC id7397 View details Communication / Marketing
    Ransomware ScanSource id7396 View details IT
    Ransomware CWS id7395 View details IT
    Ransomware Hawa Sliding Solutions id7394 View details Communication / Marketing
    Ransomware Imagination id7393 View details Other
    Ransomware Italkraft id7392 View details Communication / Marketing
    Ransomware Michigan Production Machining id7391 View details United States Manufacturing / Engineering
    Ransomware Novobit id7390 View details Communication / Marketing
    Ransomware Artemide id7389 View details Italy Manufacturing / Engineering
    Ransomware Reyes Automotive Group id7388 View details Manufacturing / Engineering
    Ransomware Rotomail Italia SpA id7387 View details Communication / Marketing
    Ransomware Phoenix Taxis id7386 View details Other
    Ransomware Wasserstrom id7385 View details Hospitality / Food & Beverage / Tourism
    Ransomware Americold id7384 View details United States Construction / Real Estate