Ransomware group

Teamxxx ransomware: victims and leak site activity

The Teamxxx ransomware group has listed 12 victims on its leak site since June 2025; its latest post is from 4 August 2025. Most affected countries: United States, United Kingdom and Czechia. Most targeted sector: Healthcare.

Total posts 12
First seen 2025-06-10
Latest post 2025-08-04
Countries hit 8

About Teamxxx

TeamXXX is an emerging ransomware group that launched its leak site in June 2025, claiming victims across healthcare, agriculture, hospitality, financial services, and shipping sectors in the US, UK, Norway, Ireland, and Europe within its first months.

Leak site (Tor)
http://tp5cwh6d2b5hekcg6jlhoe6mawa7dlwiv47epvnfmzuaaur2dnaa3uid.onion

Teamxxx victims per year

12 2025

All 12 victims

Search every post in the full table.
Victim Country Sector Discovered
Scania.com Sweden Transportation
Intercommunityct.org United States Healthcare
Websterhenry.com United States Professional Services
Nationwidecare.org United Kingdom Healthcare
aetoscapitalasia.com Hong Kong Financial Services
peterpauper United States Retail & E-Commerce
interiorsgroup.ie Ireland Retail & E-Commerce
narvikhavn.no Norway Transportation
event-medical.com Czechia Healthcare
ationwidecare.org United Kingdom Healthcare
webberrestaurantgroup.com Hospitality
BelkorpAg.com Germany Agriculture and Food Production