Skip to content
← All breaches
Threat actor tracker 314 incidents tracked

Rhysida — every breach we're tracking

Running log of incidents attributed to or claimed by Rhysida in public reporting, with what was exposed and what victims should do. Updated as new incidents are ingested.

Incidents tracked314
Latest activityOctober 31, 2026
TypeRansomware / extortion

Groups like Rhysida steal data first and extort second — and the stolen records rarely stay private. Once a victim organization's data hits a leak site, the personal details inside (names, emails, phones, addresses) get scraped into the same broker-and-dump ecosystem every doxxer searches. If an organization you've used appears below, treat your data as circulating.

Tracked incidents

Showing the 60 most recent of 314 incidents we've attributed to Rhysida.

high October 31, 2026

Phoenix Charter Academy Listed by Rhysida Ransomware Group

Phoenix Charter Academy Phoenix Charter Academy Network is a public charter school network in Massachusetts, USA, operating three campuses (…

high October 30, 2026

Cipsa Industrias Sa De Cv Listed by Rhysida Ransomware Group

Cipsa Industrias Sa De Cv Compania Industrial Papelera Poblana, S.A. de C.V. (CIPPSA) and Tubos y Empaques de Puebla, S.A. de C.V. (TEPSA / …

high October 30, 2026

INTI International University & Colleges Listed by Rhysida Ransomware Group

INTI International University & Colleges INTI International University & Colleges offers a diverse range of academic programs including unde…

high October 29, 2026

ClaimTek Systems Listed by Rhysida Ransomware Group

ClaimTek Systems ClaimTek Systems specializes in preparing individuals for successful entry into the medical billing and practice management…

high October 29, 2026

INTAX, Inc. Listed by Rhysida Ransomware Group

INTAX, Inc. Complete file server of INTAX, Inc. (Lexington, KY, USA) - a property-tax compliance and bill-pay firm.892,867 files, 1.27 TBCli…

high October 28, 2026

Noelker and Hull Listed by Rhysida Ransomware Group

Noelker and Hull NHA-FULL � US ARCHITECTURE FIRM (est. 1971) - HEALTHCARE / SENIOR-LIVING DESIGN - COMPLETE INTERNAL FILE-SERVER - FRESH TO …

high October 28, 2026

Broadstreet HEOR Listed by Rhysida Ransomware Group

Broadstreet HEOR Broadstreet Health Economics & Outcomes Research (Vancouver, Canada)is a consultancy running health-economics and real-worl…

high October 27, 2026

Machelen (Belgium) Listed by Rhysida Ransomware Group

Machelen (Belgium) Machelen (Belgium) - municipal and social welfare (OCMW) file servers1.3 million files, ~2.9 TB. Working copy + backup co…

high October 27, 2026

Machelen (Belgium) Listed by Rhysida Ransomware Group

Machelen (Belgium) Machelen (Belgium) - municipal and social welfare (OCMW) file servers1.3 million files, ~2.9 TB. Working copy + backup co…

high October 26, 2026

MISC Group Listed by Rhysida Ransomware Group

MISC Group Incorporated in 1968, MISC Group is a world leading provider of international energy-related maritime solutions and services.29,8…

high October 23, 2026

Sanders Law Group Listed by Rhysida Ransomware Group

Sanders Law Group DATA SALE LISTING - Sanders Law Group / Sanders Law Firm, PLLC (Uniondale, NY)Target: Sanders Law Firm, PLLC (d/b/a Sander…

high October 23, 2026

Line2Line Coatings Listed by Rhysida Ransomware Group

Line2Line Coatings 796,433 files - 641.0 GB~20 years of email: 34 mailboxes (PST/OST), 107,279 messages, 13,068 contacts - including the pre…

high October 22, 2026

DR.SCHNELL GmbH & Co. KGaA Listed by Rhysida Ransomware Group

DR.SCHNELL GmbH & Co. KGaA DR.SCHNELL GmbH & Co. KGaA � full network dump. 175,151 files / 2.52 TB.1.2+ TB of Navision/Business Central ERP …

high October 11, 2026

Charles E. Tabor AAL LLC Listed by Rhysida Ransomware Group

Charles E. Tabor AAL LLC 96,456 files / ~114.5 GBSettlement checks � 2026: $600,000 (USAA / Hailey), $587,500 (Travelers / Young), $350,000 …

high October 11, 2026

Reed & Giordano PA Listed by Rhysida Ransomware Group

Reed & Giordano PA 94,604 files / ~51.3 GBACH instructions for the firm's client trust account (IOLTA) with complete account details; client…

high October 10, 2026

Gress Clark Young & Schoepper Listed by Rhysida Ransomware Group

Gress Clark Young & Schoepper 167,804 files / ~166.4 GBBanking details - of the firm and its clients.SSNs + signatures of clients/witnesses;…

high October 09, 2026

RealManage Listed by Rhysida Ransomware Group

RealManage RealManage is a privately held, tech-enabled community association management company headquartered in Plano, Texas. Founded in 2…

high October 09, 2026

Anne Arundel County Listed by Rhysida Ransomware Group

Anne Arundel County Established in 1964, Anne Arundel County is a governmental body, consisting of numerous departments, services and sectio…

high October 09, 2026

Anne Arundel County Listed by Rhysida Ransomware Group

Anne Arundel County Established in 1964, Anne Arundel County is a governmental body, consisting of numerous departments, services and sectio…

high October 03, 2026

Skaff Group Listed by Rhysida Ransomware Group

Skaff Group SKAFF is a leader in Lebanon in the field of decorative fabrics. Files: 139,377Data volume: ~268 GB**Full HR dossiers - ~40 scan…

high October 02, 2026

Mat Bao Corporation Listed by Rhysida Ransomware Group

Mat Bao Corporation Mat Bao Corporation offers a range of services including domain registration, cloud hosting, professional email solution…

high October 02, 2026

Electro Heat Sweden AB Listed by Rhysida Ransomware Group

Electro Heat Sweden AB ElectroHeat industrial furnaces are used in manufacturing industries all over the world.Files: 1,723,527Data volume: …

high September 30, 2026

Law Offices of R. David Williams, P.A. Listed by Rhysida Ransomware Group

Law Offices of R. David Williams, P.A. Contents. A complete dossier of the firm's criminal defense practice covering ~175+ clients: felonies…

high September 30, 2026

clicks digital GmbH Information Listed by Rhysida Ransomware Group

clicks digital GmbH Information With more than 40 employees, the agency manages national and international online projects of companies from…

high September 24, 2026

NEAD Pro Listed by Rhysida Ransomware Group

NEAD Pro Nead Pro is a professional multidisciplinary firm based in Gorizia and Udine, Italy, that provides legal, tax, bankruptcy, and acco…

high September 23, 2026

Legis Listed by Rhysida Ransomware Group

Legis Legis is a well-known Latin American publisher that creates specialized legal and business information resources. Founded over 60 year…

high September 19, 2026

Kreishandwerkerschaft Borken Listed by Rhysida Ransomware Group

Kreishandwerkerschaft Borken The Kreishandwerkerschaft Borken is the official trade association and advocacy organization representing local…

high September 18, 2026

MPA Pharma Listed by Rhysida Ransomware Group

MPA Pharma MPA Pharma GmbH is an internationally active, rapidly growing company specializing in the import and trade of high-quality pharma…

high September 12, 2026

Axdia International Listed by Rhysida Ransomware Group

Axdia International Axdia International is a German electronics company that brings together a wide range of modern small electronics and el…

high September 10, 2026

Professional Retail Services Listed by Rhysida Ransomware Group

Professional Retail Services Owner�s documents: employee evaluations, salary rates, bonuses, job offers, family documentsCFO�s documents: cl…

high September 10, 2026

General Santos Doctors Hospital Listed by Rhysida Ransomware Group

General Santos Doctors Hospital 3.502.636 files, total volume ~2.44 TBPatient data (PHI) � name-tagged scans across department shares (surgi…

high September 08, 2026

SAD'S Interim Listed by Rhysida Ransomware Group

SAD'S Interim Since 2000, SAD'S INTERIM has established itself as a key player in the temporary employment sector.Bank statements (relev�s) …

high September 07, 2026

Rug & Home Listed by Rhysida Ransomware Group

Rug & Home Rug & Home is a leading destination in the USA for rugs, furniture, and home decor, offering a vast selection of unique designs a…

high September 01, 2026

Szechenyi Programiroda Nonprofit Kf Listed by Rhysida Ransomware Group

Szechenyi Programiroda Nonprofit Kf As a key player in Hungarian development policy, our Company participates in the planning and implementa…

high August 28, 2026

Valley Health Team Listed by Rhysida Ransomware Group

Valley Health Team 9,056,196 files3.28 TBLarge SQL databases containing the clinic's entire lifetime of information.Major databases:160,870 …

high August 28, 2026

Berlin, Germany Listed by Rhysida Ransomware Group

Berlin, Germany Total capacity 5.79 TBArchive scale: ~1.44 million files scanned; by category � Maps/Geo 124,823, Legal/complaints 77,939, F…

high August 22, 2026

CRI Electric Listed by Rhysida Ransomware Group

CRI Electric CRI Electric is a veteran-owned business based in San Antonio, providing professional electrical services since 1998. They cate…

high August 21, 2026

Battle Creek Public Schools Listed by Rhysida Ransomware Group

Battle Creek Public Schools Battle Creek Public Schools in Nebraska provides educational services for students from pre-kindergarten through…

high August 21, 2026

Fairview Dental Group Listed by Rhysida Ransomware Group

Fairview Dental Group Fairview Dental Group offers a range of dental services including family dentistry, cosmetic treatments, dental implan…

high August 14, 2026

Pierce Township Listed by Rhysida Ransomware Group

Pierce Township Pierce Township is a growing community in Ohio that blends rural charm with suburban living, covering 23.5 square miles and …

high August 13, 2026

SIA Medical Centre Listed by Rhysida Ransomware Group

SIA Medical Centre SIA Medical was established in 1993 and was founded by Dr Martin Sia in Melbourne's northwest. 9 clinics - Box Hill, Burw…

high June 18, 2026

Lawson Roofing Listed by Rhysida Ransomware Group

Lawson Roofing…

high May 25, 2026

IDS Group Listed by Rhysida Ransomware Group

IDS Group IDS Group is an award-winning multi-discipline design, engineering, and management consulting firm based in Southern California. …

high May 19, 2026

Landeshauptstadt Stuttgart Listed by Rhysida Ransomware Group

Landeshauptstadt Stuttgart Stuttgart is the capital city of Baden-Wurttemberg in southwestern Germany.…

high May 15, 2026

Tower View Primary School Listed by Rhysida Ransomware Group

Tower View Primary School Tower View Primary School is an educational institution that serves approximately 380 pupils across 14 classes.…

high April 27, 2026

Stelia North America Listed by Rhysida Ransomware Group

Stelia North America…

high March 02, 2026

Southold Town Senior ServicesSouthold Police Department Listed by Rhysida Ransomware Group

Southold Town Senior ServicesSouthold Police Department The Town of Southold, New York provides various government services including forms …

high February 23, 2026

Rohner Listed by Rhysida Ransomware Group

Rohner Rohner designs and builds high-quality, custom paint booths and manufactured industrial paint systems. Our quality and service, cutt…

high February 17, 2026

Cheyenne & Arapaho Tribes Listed by Rhysida Ransomware Group

Cheyenne & Arapaho Tribes The Cheyenne and Arapaho Tribes are a federally recognized united nation of two distinct peoples-the Tsistsistas (…

high February 12, 2026

Phoenix Art Museum Listed by Rhysida Ransomware Group

Phoenix Art Museum Phoenix Art Museum is an art museum that showcases art from around the U.S. in Phoenix, Arizona.…

high February 06, 2026

Leading Edge Speciali Listed by Rhysida Ransomware Group

Leading Edge Speciali…

high February 04, 2026

Lakeside Union School District Listed by Rhysida Ransomware Group

Lakeside Union School District…

high February 02, 2026

Elabs Listed by Rhysida Ransomware Group

Elabs Elabs is a pioneer in IT services in Germany, delivering innovative IT solutions that enable businesses to harness modern technology f…

high January 21, 2026

Jet-care International Listed by Rhysida Ransomware Group

Jet-care International…

high January 06, 2026

Charles Leonard Steel Services Listed by Rhysida Ransomware Group

Charles Leonard Steel Services…

high December 30, 2025

Falk, Waas, Hernandez, Cortina, Solomon & Bonner Overview Metrics Listed by Rhysida Ransomware Group

Falk, Waas, Hernandez, Cortina, Solomon & Bonner Overview Metrics…

high December 21, 2025

Singing River Health System Listed by Rhysida Ransomware Group

Singing River Health System Singing River Health System is both a mission-driven provider of health services and one of the largest employer…

high December 19, 2025

Larry Pitt & Associates Listed by Rhysida Ransomware Group

Larry Pitt & Associates…

high December 15, 2025

YOKOSUKA GAKUIN Listed by Rhysida Ransomware Group

YOKOSUKA GAKUIN…

high December 13, 2025

***** *********** Listed by Rhysida Ransomware Group

***** ***********…

Close the chain attack

Your email leaked. See who’s selling your address.

Nobody can unleak a breach. But the people-search sites selling your address because of it? Those come down. The free DoxxScan™ scan shows you which breaches exposed your email. Then you pick what fits.

Run my free scan
15 seconds · 13.1B+ records checked · no account, no card
W Choose your protection level COMPARE PLANS →
The full report on what your scan found, ongoing monitoring with weekly re-scans and breach alerts, or family-wide coverage — compare every plan and pick what fits.