Ransomware group

Weyhro ransomware: victims and leak site activity

The Weyhro ransomware group has listed 14 victims on its leak site since March 2025; its latest post is from 11 August 2025. Most affected countries: United States, Barbados and Canada. Most targeted sector: Manufacturing.

Total posts 14
First seen 2025-03-06
Latest post 2025-08-11
Countries hit 5

About Weyhro

Weyhro is a data-extortion group (relying on data theft and leak threats without file encryption) that launched a Tor leak site in March 2025, focusing on manufacturing, financial services, and real estate sectors with victims in the US, Italy, and Canada.

Leak site
https://weyhro.hk

Most targeted countries

  1. United States 10
  2. Barbados 1
  3. Canada 1
  4. Germany 1
  5. Italy 1
All countries →

Most targeted sectors

  1. Manufacturing 5
  2. Professional Services 4
  3. Financial Services 2
  4. Government & Defense 1
  5. Technology 1
All sectors →

Weyhro victims per year

14 2025

All 14 victims

Search every post in the full table.
Victim Country Sector Discovered
Community Services of Missouri United States Government & Defense
Chemtron RiverBend United States Manufacturing
Synergy Investments United States Financial Services
Terra Caribbean Barbados Professional Services
Adriatic Glass & Mirrors Canada Manufacturing
101 Arch Street United States —
Valens Bank/Pay/Exchange Germany Financial Services
McMillan James Equipment Company (MJEC) United States Manufacturing
Montgomery Little & Soran, PC United States Professional Services
Central Electropolishing Company, Inc. United States Manufacturing
Resnick & Caffrey, PC United States Professional Services
Avantune Corporation United States Technology
MBI International, Inc. United States Professional Services
Fragola S.p.A Italy Manufacturing