Ransomware group
Termite ransomware: victims and leak site activity
The Termite ransomware group has listed 49 victims on its leak site since November 2024; its latest post is from 22 August 2026. Most affected countries: United States, France and United Kingdom. Most targeted sector: Healthcare.
Total posts
49
First seen
2024-11-17
Latest post
2026-08-22
Countries hit
14
About Termite
Termite is a ransomware group first identified in late 2024 using a modified version of Babuk ransomware code; its most notable attack was the November 2024 breach of supply-chain software firm Blue Yonder, claiming 680 GB of exfiltrated data and disrupting major customers including Starbucks.
Most targeted countries
- United States 26
- France 4
- United Kingdom 4
- Canada 3
- Australia 2
- Germany 2
- Belgium 1
- China 1
- Cyprus 1
- Ireland 1
Most targeted sectors
- Healthcare 10
- Manufacturing 8
- Technology 7
- Professional Services 6
- Education 4
- Retail & E-Commerce 3
- Agriculture and Food Production 2
- Energy & Utilities 2
- Financial Services 2
- Government & Defense 2