Ransomware group
Termite ransomware: victims and leak site activity
The Termite ransomware group has listed 55 victims on its leak site since November 2024; its latest post is from 9 October 2026. Most affected countries: United States, France and United Kingdom. Most targeted sector: Healthcare.
Total posts
55
First seen
2024-11-17
Latest post
2026-10-09
Countries hit
15
About Termite
Termite is a ransomware group first identified in late 2024 using a modified version of Babuk ransomware code; its most notable attack was the November 2024 breach of supply-chain software firm Blue Yonder, claiming 680 GB of exfiltrated data and disrupting major customers including Starbucks.
- Leak site (Tor)
- http://termiteuslbumdge2zmfmfcsrvmvsfe4gvyudc5j6cdnisnhtftvokid.onion
- Profile
- ransomware.live
Most targeted countries
- United States 31
- France 4
- United Kingdom 4
- Canada 3
- Australia 2
- Germany 2
- Belgium 1
- Brazil 1
- China 1
- Cyprus 1
Most targeted sectors
- Healthcare 11
- Manufacturing 9
- Professional Services 7
- Technology 7
- Education 4
- Financial Services 3
- Retail & E-Commerce 3
- Agriculture and Food Production 2
- Energy & Utilities 2
- Government & Defense 2