Ransomware group
Daixin ransomware: victims and leak site activity
The Daixin ransomware group has listed 21 victims on its leak site since August 2022; its latest post is from 11 September 2025. Most affected countries: United States, United Arab Emirates and Canada. Most targeted sector: Healthcare.
Total posts
21
First seen
2022-08-03
Latest post
2025-09-11
Countries hit
5
About Daixin
Daixin Team is a ransomware and data extortion group active since at least June 2022, exclusively targeting the US Healthcare and Public Health sector by encrypting EHR and diagnostic systems and exfiltrating patient data to pressure victims into paying ransoms.
Most targeted countries
- United States 14
- United Arab Emirates 1
- Canada 1
- Indonesia 1
- Malaysia 1
Most targeted sectors
- Healthcare 7
- Professional Services 3
- Financial Services 2
- Government & Defense 2
- Hospitality 2
- Retail & E-Commerce 2
- Agriculture and Food Production 1
- Energy & Utilities 1
- Manufacturing 1