Rhysida
Hits healthcare, education and government; linked by researchers to Vice Society activity.
Claimed victims
235
Top region
US
Top sector
Professional Services
Suspected origin
Unattributed
Latest claimed victims
Victims as claimed by the group on its leak site and tracked in our graph — claims are not independently verified, and listing here is not confirmation a breach occurred.
| Date | Organisation (claimed) | Sector | Country |
|---|---|---|---|
| 2026-10-03 | Skaff Group | Other | — |
| 2026-10-02 | Mat Bao Corporation | Technology | VN |
| 2026-10-02 | Electro Heat Sweden AB | Energy & Utilities | SE |
| 2026-09-30 | clicks digital GmbH Information | Technology | DE |
| 2026-09-30 | Law Offices of R. David Williams, P.A. | Professional Services | US |
| 2026-09-24 | NEAD Pro | Not Found | — |
| 2026-09-23 | Legis | Professional Services | — |
| 2026-09-19 | Kreishandwerkerschaft Borken | Professional Services | DE |
| 2026-09-18 | MPA Pharma | Healthcare | DE |
| 2026-09-12 | Axdia International | Professional Services | — |
Regions targeted
US 8DE 5SE 1VN 1PH 1FR 1HU 1AU 1
Sectors targeted
Professional Services 6Healthcare 5Energy & Utilities 2Technology 2Retail & E-Commerce 2Education 2
Suspected affiliates & lineage
Ransomware crews share affiliates, tooling and operators; brands fall and reappear under new names. Related to:
Track it daily
Ransomware moves every day. So does our paper.
The Probably Fine Daily is our morning threat-intelligence briefing — new victims, new groups, what actually matters, in plain English. Free.
Read today's Daily →Browse the archiveDefender-oriented threat intelligence. Nothing here assists an attack. Attribution and lineage reflect open-source reporting.