Ransomware group

Ransomexx ransomware: victims and leak site activity

The Ransomexx ransomware group has listed 46 victims on its leak site since January 2022; its latest post is from 20 June 2026. Most affected countries: United States, Spain and Indonesia. Most targeted sector: Manufacturing.

Total posts 46
First seen 2022-01-28
Latest post 2026-06-20
Countries hit 20

About Ransomexx

RansomExx is a ransomware family that targeted multiple companies starting in mid-2020. It shares commonalities with Defray777.

Leak site (Tor)
http://rnsm777cdsjrsdlbs4v5qoeppu3px6sb2igmh53jzrx7ipcrbjz5b2ad.onion/

Ransomexx victims per year

14 2022
8 2023
17 2024
4 2025
3 2026

All 46 victims

Search every post in the full table.
Victim Country Sector Discovered
Go2Joy (go2joy.vn) Vietnam Hospitality
SOGO Auction Japan Professional Services
GoTip Japan Professional Services
ADDA (adda.io) India Technology
Grupo Vargas Venezuela Healthcare
Lakeshore Title Agency United States Financial Services
Makesworth Accountants United Kingdom Financial Services
Retemex Mexico Technology
Brontoo Technology Solutions India Technology
nursing.com United States Healthcare
Planet Group International United States Technology
LITEON Taiwan Technology
Wagner-Meinert Professional Services
United Carton Industries Company Saudi Arabia Manufacturing
Ruwac Industrial Vacuums United States Manufacturing
Diagnostica Stago France Healthcare
Bombardier Recreational Products Canada Manufacturing
Consorci Sanitari Integral Spain Healthcare
Badan Urusan Logistik Indonesia Transportation
Jacobs Farm / Del Cabo United States Agriculture and Food Production
DVision Architecture Italy Professional Services
Telecommunications Services of Trinidad and Tobago Trinidad and Tobago Professional Services
Ministry of Defense of Peru Peru Government & Defense
Asteco United Arab Emirates Professional Services
Kenya Airways Kenya Transportation
AlJaber Engineering Qatar Manufacturing
Admilla ELAP Professional Services
Telecommunications Services of Trinidad and Tobago (tstt.co.tt) Trinidad and Tobago Technology
DVA - DVision Architecture Italy Professional Services
Jacobs Farm United States Agriculture and Food Production
Bettuzzi And Partners Professional Services
BULOG Indonesia Agriculture and Food Production
REC Silicon Energy & Utilities
Unimed Belem Healthcare
Consorci Sanitari Integral & Geseme Spain Healthcare
Ferrari Manufacturing
Bombardier Recreational Products (BRP) - SOURCE CODES Manufacturing
Fundo Nacional de Desenvolvimento da Educação Brazil Education
Bombardier Recreational Products (BRP) - BONUS CONTENT (!!!) Manufacturing
Bombardier Recreational Products (BRP) United States Manufacturing
Sonae Retail & E-Commerce
Stago Manufacturing
Scottish Association for Mental Health Government & Defense
Viva Air Transportation
POP TV Technology
KCA Deutag Energy & Utilities