Ransomware group
Bravox ransomware: victims and leak site activity
The Bravox ransomware group has listed 28 victims on its leak site since February 2026; its latest post is from 1 September 2026. Most affected countries: United States, Switzerland and France. Most targeted sector: Healthcare.
Total posts
28
First seen
2026-02-11
Latest post
2026-09-01
Countries hit
10
About Bravox
BravoX is a selective ransomware-as-a-service operation that surfaced publicly in January 2026 after advertising on the RAMP underground forum, targeting primarily US-based organizations in healthcare and retail while applying strict affiliate vetting requirements including proof of access or a financial deposit.
Most targeted countries
- United States 8
- Switzerland 4
- France 4
- Canada 3
- Brazil 2
- United Kingdom 2
- Italy 2
- Germany 1
- Mexico 1
- Turkey 1
Most targeted sectors
- Healthcare 5
- Professional Services 4
- Financial Services 3
- Technology 3
- Agriculture and Food Production 2
- Energy & Utilities 2
- Manufacturing 2
- Retail & E-Commerce 2