Threat actor tracker 286 incidents tracked

Rhysida — every breach we're tracking

Running log of incidents attributed to or claimed by Rhysida in public reporting, with what was exposed and what victims should do. Updated as new incidents are ingested.

Incidents tracked286

Latest activitySeptember 12, 2026

TypeRansomware / extortion

Groups like Rhysida steal data first and extort second — and the stolen records rarely stay private. Once a victim organization's data hits a leak site, the personal details inside (names, emails, phones, addresses) get scraped into the same broker-and-dump ecosystem every doxxer searches. If an organization you've used appears below, treat your data as circulating.

Tracked incidents

Showing the 60 most recent of 286 incidents we've attributed to Rhysida.

high September 12, 2026

Close the chain attack

Your email leaked. See who’s selling your address.

Nobody can unleak a breach. But the people-search sites selling your address because of it? Those come down. The free scan shows you which ones have you, in 15 seconds. Then you pick what fits.

Run my free scan

15 seconds · 13.1B+ records checked · no account, no card

W Choose your protection level COMPARE PLANS →

The full report on what your scan found, ongoing monitoring with weekly re-scans and breach alerts, or family-wide coverage — compare every plan and pick what fits.

Tracked incidents

Axdia International Listed by Rhysida Ransomware Group

General Santos Doctors Hospital Listed by Rhysida Ransomware Group

Professional Retail Services Listed by Rhysida Ransomware Group

SAD'S Interim Listed by Rhysida Ransomware Group

Rug & Home Listed by Rhysida Ransomware Group

Szechenyi Programiroda Nonprofit Kf Listed by Rhysida Ransomware Group

Valley Health Team Listed by Rhysida Ransomware Group

Berlin, Germany Listed by Rhysida Ransomware Group

CRI Electric Listed by Rhysida Ransomware Group

Battle Creek Public Schools Listed by Rhysida Ransomware Group

Fairview Dental Group Listed by Rhysida Ransomware Group

Pierce Township Listed by Rhysida Ransomware Group

SIA Medical Centre Listed by Rhysida Ransomware Group

Lawson Roofing Listed by Rhysida Ransomware Group

IDS Group Listed by Rhysida Ransomware Group

Landeshauptstadt Stuttgart Listed by Rhysida Ransomware Group

Tower View Primary School Listed by Rhysida Ransomware Group

Stelia North America Listed by Rhysida Ransomware Group

Southold Town Senior ServicesSouthold Police Department Listed by Rhysida Ransomware Group

Rohner Listed by Rhysida Ransomware Group

Cheyenne & Arapaho Tribes Listed by Rhysida Ransomware Group

Phoenix Art Museum Listed by Rhysida Ransomware Group

Leading Edge Speciali Listed by Rhysida Ransomware Group

Lakeside Union School District Listed by Rhysida Ransomware Group

Elabs Listed by Rhysida Ransomware Group

Jet-care International Listed by Rhysida Ransomware Group

Charles Leonard Steel Services Listed by Rhysida Ransomware Group

Falk, Waas, Hernandez, Cortina, Solomon & Bonner Overview Metrics Listed by Rhysida Ransomware Group

Singing River Health System Listed by Rhysida Ransomware Group

Larry Pitt & Associates Listed by Rhysida Ransomware Group

YOKOSUKA GAKUIN Listed by Rhysida Ransomware Group

***** *********** Listed by Rhysida Ransomware Group

United Keetoowah Band of Cherokee Indians in Oklahoma Listed by Rhysida Ransomware Group

Harbour Town Doctors Listed by Rhysida Ransomware Group

Woodard, Emhardt, Henry, Reeves & Wagner, LLP Listed by Rhysida Ransomware Group

Kane's Furniture Listed by Rhysida Ransomware Group

SODISE Listed by Rhysida Ransomware Group

Bo Beuckman Ford Listed by Rhysida Ransomware Group

AGS Listed by Rhysida Ransomware Group

Marlex Human Capital Listed by Rhysida Ransomware Group

Collge Superieur De Montreal Listed by Rhysida Ransomware Group

St. Joseph's Healthcare Hamilton Listed by Rhysida Ransomware Group

MACT Health Board Listed by Rhysida Ransomware Group

Wachusett School District MA Listed by Rhysida Ransomware Group

Cleveland County Sheriff's Office Listed by Rhysida Ransomware Group

Smoll & Banning, CPAs Listed by Rhysida Ransomware Group

LMHT Associates Listed by Rhysida Ransomware Group

Heart South Cardiovascular Group Listed by Rhysida Ransomware Group

KISS FM Listed by Rhysida Ransomware Group

Automated Logistics Systems Listed by Rhysida Ransomware Group

Invacare Listed by Rhysida Ransomware Group

Cytek Biosciences Listed by Cmdorganization Ransomware Group

Spindletop Center Listed by Rhysida Ransomware Group

Gemini Group Listed by Rhysida Ransomware Group

Bellflower Unified School District Listed by Rhysida Ransomware Group

Abilene Family Medical Associates Listed by Rhysida Ransomware Group

Peraso Listed by Rhysida Ransomware Group

GEIGER Listed by Rhysida Ransomware Group

Sibbalds Listed by Rhysida Ransomware Group

Tex-Tube Listed by Rhysida Ransomware Group

Your email leaked. See who’s selling your address.

* ******* Listed by Rhysida Ransomware Group