Ransomware Group intelligence

Payload

Active

Track Payload with 39 published victims and 2 known leak locations in a single intelligence view.

Victims 39 Known published victims in this dataset
First discovered 2026-02-17 Earliest victim discovery date
Last discovered 2026-04-23 Latest victim discovery date
Inactive since 2 days Days since the latest known victim
Top country United States 4 victims
Known locations 2 Leak or negotiation infrastructure tracked

Overview

Payload is tracked by Breach House as a ransomware group with 39 published victims.

United States is currently the most targeted country in this dataset.

2 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (2)

    Label Type Availability Links
    Leak location 1 Onion service Unknown payloadrz5yw227brtbvdqpnlhq3rdcdekdnn3rgucbcdeawq2v6vuyd.onion
    Leak location 2 Onion service Unknown payloadynyvabjacbun4uwhmxc7yvdzorycslzmnleguxjn7glahsvqd.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (39)

    Search, filter and paginate the victim timeline for Payload.

    Type Target Discovered Country Business Category Intel Link
    Ransomware Peroni Sosa Tellechea Burt & Narvaja id28414 View details Uruguay Finance / Legal / Insurance
    Ransomware meditron.com.ve id28413 View details Venezuela, Bolivarian Republic of Healthcare / Medicine
    Ransomware b3-bruck.at id28412 View details Austria Construction / Real Estate
    Ransomware caravaningcity.com id28411 View details Germany Retail / E-commerce
    Ransomware JOH Investments Limited id28340 View details Finance / Legal / Insurance
    Ransomware Better House id28331 View details Construction / Real Estate
    Ransomware Al Sulaiti Law Firm id28330 View details Qatar Finance / Legal / Insurance
    Ransomware Franziskusschule Wilhelmshaven id28255 View details Germany Education
    Ransomware Marino Food Products Pvt id28254 View details Sri Lanka Agriculture / Food
    Ransomware Sunlight Express Airways id28253 View details Transportation / Travel / Logistics
    Ransomware orientalweavers.com id28252 View details Egypt Manufacturing / Engineering
    Ransomware TFE Group id28251 View details Australia Transportation / Travel / Logistics
    Ransomware El Wastani Petroleum Company (WASCO) id27962 View details Libya Energy
    Ransomware United Finance Egypt id27844 View details Egypt Finance / Legal / Insurance
    Ransomware Tscherne Consulting Steuerberatung GmbH id27843 View details Austria Finance / Legal / Insurance
    Ransomware SAYEGH id27800 View details Manufacturing / Engineering
    Ransomware NKAR Travels & Tours id27725 View details Sri Lanka Hospitality / Food & Beverage / Tourism
    Ransomware Q2 Artificial Lift Services id27643 View details Canada Energy
    Ransomware Don-Nan id27642 View details United States Manufacturing / Engineering
    Ransomware A A Al Moosa Enterprises (ARENCO Group) id27637 View details United Arab Emirates Construction / Real Estate
    Ransomware carlysle.net id27607 View details United States Services
    Ransomware Vancompare Insurance id27562 View details United Kingdom Finance / Legal / Insurance
    Ransomware iGLS id27538 View details Spain Healthcare / Medicine
    Ransomware HOPPECKE Singapore id27504 View details Singapore
    Ransomware TS Lines Philippines id27484 View details Philippines
    Ransomware Lucky Innovative Manufacturing Corporation id27454 View details Philippines
    Ransomware Notaría 89 id27453 View details Mexico
    Ransomware Royal Bahrain Hospital id27346 View details Bahrain
    Ransomware J.T. Pack of Foods id27335 View details
    Ransomware Grid Fine Finishes id27334 View details United Kingdom
    Ransomware Alcoholes Finos Dominicanos id27333 View details Dominican Republic
    Ransomware In.Sa.Cor id27332 View details United States
    Ransomware Easy Servizi id27331 View details Italy
    Ransomware Thai Solar Energy Public id27330 View details Thailand
    Ransomware United Limsun International Trading id27329 View details Philippines
    Ransomware Tyler Media id27328 View details United States
    Ransomware Río Grande (Puerto Rico) id27327 View details Puerto Rico
    Ransomware sodic.com id26619 View details Egypt Construction / Real Estate
    Ransomware Almacenes Distribuidores de la Frontera id26618 View details Mexico Energy