Ransomware Group intelligence

Weyhro

Inactive

Track Weyhro with 14 published victims and 5 known leak locations in a single intelligence view.

Victims 14 Known published victims in this dataset
First discovered 2025-03-06 Earliest victim discovery date
Last discovered 2025-08-11 Latest victim discovery date
Inactive since 257 days Days since the latest known victim
Top country United States 10 victims
Known locations 5 Leak or negotiation infrastructure tracked

Overview

Weyhro is tracked by Breach House as a ransomware group with 14 published victims.

United States is currently the most targeted country in this dataset.

5 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (5)

    Label Type Availability Links
    Leak location 1 Onion service Unknown xtxtpqpyaaek4p4525ksepyyy75gfvi47fptm2gftw7cn656rnfhzdqd.onion
    Leak location 2 Web location Unknown weyhro.hk
    Leak location 3 Onion service Unknown weyhro27ruifvuqkk3hxzcrtxv2lsalntxgkv6q2j3znkhdqudz54rqd.onion
    Leak location 4 Onion service Unknown weyhro27ruifvuqkk3hxzcrtxv2lsalntxgkv6q2j3znkhdqudz54rqd.onion
    Leak location 5 Web location Unknown weyhro.hk

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (14)

    Search, filter and paginate the victim timeline for Weyhro.

    Type Target Discovered Country Business Category Intel Link
    Ransomware Community Services of Missouri id21662 View details United States Communication / Marketing
    Ransomware Chemtron RiverBend id21661 View details United States Communication / Marketing
    Ransomware Synergy Investments id20366 View details United States Finance / Legal / Insurance
    Ransomware Terra Caribbean id20365 View details Barbados Construction / Real Estate
    Ransomware Adriatic Glass & Mirrors id20364 View details Canada Communication / Marketing
    Ransomware 101 Arch Street id19943 View details United States Other
    Ransomware Valens Bank/Pay/Exchange id18873 View details Germany Finance / Legal / Insurance
    Ransomware McMillan James Equipment Company (MJEC) id18679 View details United States Communication / Marketing
    Ransomware Montgomery Little & Soran, PC id18678 View details United States Services
    Ransomware Central Electropolishing Company, Inc. id18235 View details United States Manufacturing / Engineering
    Ransomware Resnick & Caffrey, PC id18234 View details United States Communication / Marketing
    Ransomware Avantune Corporation id18233 View details United States IT
    Ransomware MBI International, Inc. id18232 View details United States Finance / Legal / Insurance
    Ransomware Fragola S.p.A id18231 View details Italy Manufacturing / Engineering