← All breaches
Threat actor tracker 273 incidents tracked

Rhysida — every breach we're tracking

Running log of incidents attributed to or claimed by Rhysida in public reporting, with what was exposed and what victims should do. Updated as new incidents are ingested.

Incidents tracked273
Latest activityJune 18, 2026
TypeRansomware / extortion

Groups like Rhysida steal data first and extort second — and the stolen records rarely stay private. Once a victim organization's data hits a leak site, the personal details inside (names, emails, phones, addresses) get scraped into the same broker-and-dump ecosystem every doxxer searches. If an organization you've used appears below, treat your data as circulating.

Tracked incidents

Showing the 60 most recent of 273 incidents we've attributed to Rhysida.

high June 18, 2026

Lawson Roofing Listed by rhysida Ransomware Group

Lawson Roofing…

high May 25, 2026

IDS Group Listed by rhysida Ransomware Group

IDS Group IDS Group is an award-winning multi-discipline design, engineering, and management consulting firm based in Southern California. …

high May 19, 2026

Landeshauptstadt Stuttgart Listed by rhysida Ransomware Group

Landeshauptstadt Stuttgart Stuttgart is the capital city of Baden-Wurttemberg in southwestern Germany.…

high May 15, 2026

Tower View Primary School Listed by rhysida Ransomware Group

Tower View Primary School Tower View Primary School is an educational institution that serves approximately 380 pupils across 14 classes.…

high April 27, 2026

Stelia North America Listed by rhysida Ransomware Group

Stelia North America…

high March 02, 2026

Southold Town Senior ServicesSouthold Police Department Listed by rhysida Ransomware Group

Southold Town Senior ServicesSouthold Police Department The Town of Southold, New York provides various government services including forms …

high February 23, 2026

Rohner Listed by rhysida Ransomware Group

Rohner Rohner designs and builds high-quality, custom paint booths and manufactured industrial paint systems. Our quality and service, cutt…

high February 17, 2026

Cheyenne & Arapaho Tribes Listed by rhysida Ransomware Group

Cheyenne & Arapaho Tribes The Cheyenne and Arapaho Tribes are a federally recognized united nation of two distinct peoples-the Tsistsistas (…

high February 12, 2026

Phoenix Art Museum Listed by rhysida Ransomware Group

Phoenix Art Museum Phoenix Art Museum is an art museum that showcases art from around the U.S. in Phoenix, Arizona.…

high February 06, 2026

Leading Edge Speciali Listed by rhysida Ransomware Group

Leading Edge Speciali…

high February 04, 2026

Lakeside Union School District Listed by rhysida Ransomware Group

Lakeside Union School District…

high February 02, 2026

Elabs Listed by rhysida Ransomware Group

Elabs Elabs is a pioneer in IT services in Germany, delivering innovative IT solutions that enable businesses to harness modern technology f…

high January 21, 2026

Jet-care International Listed by rhysida Ransomware Group

Jet-care International…

high January 06, 2026

Charles Leonard Steel Services Listed by rhysida Ransomware Group

Charles Leonard Steel Services…

high December 30, 2025

Falk, Waas, Hernandez, Cortina, Solomon & Bonner Overview Metrics Listed by rhysida Ransomware Group

Falk, Waas, Hernandez, Cortina, Solomon & Bonner Overview Metrics…

high December 21, 2025

Singing River Health System Listed by rhysida Ransomware Group

Singing River Health System Singing River Health System is both a mission-driven provider of health services and one of the largest employer…

high December 19, 2025

Larry Pitt & Associates Listed by rhysida Ransomware Group

Larry Pitt & Associates…

high December 15, 2025

YOKOSUKA GAKUIN Listed by rhysida Ransomware Group

YOKOSUKA GAKUIN…

high December 13, 2025

***** *********** Listed by rhysida Ransomware Group

***** ***********…

high December 12, 2025

United Keetoowah Band of Cherokee Indians in Oklahoma Listed by rhysida Ransomware Group

United Keetoowah Band of Cherokee Indians in Oklahoma…

high December 11, 2025

Woodard, Emhardt, Henry, Reeves & Wagner, LLP Listed by rhysida Ransomware Group

Woodard, Emhardt, Henry, Reeves & Wagner, LLP…

high December 11, 2025

Harbour Town Doctors Listed by rhysida Ransomware Group

Harbour Town Doctors…

high December 07, 2025

Kane's Furniture Listed by rhysida Ransomware Group

Kane's Furniture…

high December 06, 2025

SODISE Listed by rhysida Ransomware Group

SODISE…

high December 03, 2025

Bo Beuckman Ford Listed by rhysida Ransomware Group

Bo Beuckman Ford…

high November 26, 2025

AGS Listed by rhysida Ransomware Group

AGS…

high November 25, 2025

Marlex Human Capital Listed by rhysida Ransomware Group

Marlex Human Capital…

high November 24, 2025

Collge Superieur De Montreal Listed by rhysida Ransomware Group

Collge Superieur De Montreal…

high November 22, 2025

St. Joseph's Healthcare Hamilton Listed by rhysida Ransomware Group

St. Joseph's Healthcare Hamilton…

high November 21, 2025

MACT Health Board Listed by rhysida Ransomware Group

MACT Health Board…

high November 21, 2025

Wachusett School District MA Listed by rhysida Ransomware Group

Wachusett School District MA Wachusett School District MA is a public school district. More…

high November 20, 2025

Cleveland County Sheriff's Office Listed by rhysida Ransomware Group

Cleveland County Sheriff's Office…

high November 18, 2025

Smoll & Banning, CPAs Listed by rhysida Ransomware Group

Smoll & Banning, CPAs Smoll & Banning, CPA's, LLC is an independent accounting firm located in Dodge City, Kansas.…

high November 10, 2025

Heart South Cardiovascular Group Listed by rhysida Ransomware Group

Heart South Cardiovascular Group Heart South is a leading provider of comprehensive cardiac and vascular care in Central Alabama. More…

high November 10, 2025

LMHT Associates Listed by rhysida Ransomware Group

LMHT Associates…

high November 05, 2025

KISS FM Listed by rhysida Ransomware Group

KISS FM Spanish radio station KISS FM, which broadcasts popular music and entertainment programs. The radio is available online, as well as …

high November 04, 2025

Invacare Listed by rhysida Ransomware Group

Invacare Invacare, founded in 1885 and headquartered out of Elyria, Ohio, is a manufacturer and distributor of home and long term care medic…

high November 04, 2025

Automated Logistics Systems Listed by rhysida Ransomware Group

Automated Logistics Systems…

high November 01, 2025

Cytek Biosciences Listed by cmdorganization Ransomware Group

A biotechnology firm that develops and supplies advanced, cost-effective flow cytometry instruments and related services used worldwide by r…

high October 30, 2025

Spindletop Center Listed by rhysida Ransomware Group

Spindletop Center Spindletop Center is a non-profit healthcare organization focused on providing behavioral healthcare, as well as programs …

high October 28, 2025

Gemini Group Listed by rhysida Ransomware Group

Gemini Group…

high October 28, 2025

Bellflower Unified School District Listed by rhysida Ransomware Group

Bellflower Unified School District Headquartered Bellflower, California, Bellflower Unified School District is a general education district …

high October 27, 2025

Abilene Family Medical Associates Listed by rhysida Ransomware Group

Abilene Family Medical Associates…

high October 21, 2025

Peraso Listed by rhysida Ransomware Group

Peraso…

high October 17, 2025

GEIGER Listed by rhysida Ransomware Group

GEIGER GEIGER Antriebstechnik is a leading manufacturer of innovative mechanical and electric drive solutions for sun protection products su…

high October 16, 2025

Sibbalds Listed by rhysida Ransomware Group

Sibbalds Sibbalds Chartered Accountants, based in Derby, specializes in providing a wide range of accountancy services to owner-managed busi…

high October 15, 2025

Tex-Tube Listed by rhysida Ransomware Group

Tex-Tube Tex Tube has over 75 years of experience in manufacturing steel products, specifically electric resistance welded (ERW) steel pipes…

high October 13, 2025

Furuno Electric Listed by rhysida Ransomware Group

Furuno Electric FURUNO strives to contribute to realisation of the pleasant society filled with safety and peace of mind by giving visual fo…

high October 09, 2025

Sdii Global Listed by rhysida Ransomware Group

Sdii Global Since 1989, Sdii Global has set the standard in forensic engineering and consulting, renowned for our expertise and unwavering c…

high October 04, 2025

Medstar Health Listed by rhysida Ransomware Group

Medstar Health…

high September 29, 2025

Peavey Electronics Corporation Listed by rhysida Ransomware Group

Peavey Electronics Corporation Founded by Hartley Peavey in 1965 as a one-man shop, today Peavey Electronics Corporation is one of the large…

high September 24, 2025

The Maryland Department of Transportation Listed by rhysida Ransomware Group

The Maryland Department of Transportation…

high September 20, 2025

Hematology Oncology Consultants Listed by rhysida Ransomware Group

Hematology Oncology Consultants Michigan Hematology Oncology is a private practice dedicated to providing the highest level of quality care …

high September 10, 2025

Coastal Pacific Xpress Listed by rhysida Ransomware Group

Coastal Pacific Xpress…

high September 05, 2025

Elite Trailers Listed by rhysida Ransomware Group

Elite Trailers Elite Trailer MFG, LLC. specializes in the custom manufacturing of high-quality trailers, including horse, livestock, and spe…

high August 28, 2025

Firelands Scientific Listed by rhysida Ransomware Group

Firelands Scientific…

high August 27, 2025

ZCORP Listed by rhysida Ransomware Group

ZCORP ZCORP is a technology enterprise based in Princeton, NJ, specializing in providing innovative products, services, and tools to help cl…

high August 20, 2025

Elkhart Independent School District Listed by rhysida Ransomware Group

Elkhart Independent School District Elkhart Independent School District is a public school district based in Elkhart, Texas (USA). The distr…

high August 12, 2025

Trans-Tex Listed by rhysida Ransomware Group

Trans-Tex Trans-Tex has been the leader in narrow web dye sublimation printing for over 25 years.…

high August 10, 2025

Alascom Listed by rhysida Ransomware Group

Alascom It has been operating for over 20 years as a system integrator and supplier of technical consulting services in the ICT and industri…

Close the chain attack

Your email leaked. See who’s selling your address.

Nobody can unleak a breach. But the people-search sites selling your address because of it? Those come down. The free scan shows you which ones have you, in 15 seconds. Then you pick what fits.

Run the free scan — see what leaked →
15 seconds · 15.4B+ records checked · no account, no card
W Choose your protection level COMPARE PLANS →
One-time purge, ongoing monitoring with weekly re-scans and breach alerts, or family-wide coverage — compare every plan and pick what fits.