CYBERSECURITYTRACKER
Incidents

Ransomexx

Review this actor's tracked leak-site claims, published reporting, and attributed threat evidence.

ransomware76 leak-site claims, all timeLatest observed leak-site post 2026-06-20

Portable threat brief

Ransomexx

Facts from stored data only; no AI-written text.

Opens the browser print dialog; choose Save as PDF.

Executive facts

Actor
Ransomexx
Kind
ransomware
Latest observed
2026-06-20
Leak-site claims
76
Catalogued techniques
0

Scope

Tracked sectors
Manufacturing, Telecommunications, Transportation & Logistics, Government, Technology
Claim records
2021-09-09 to 2026-06-20

Vulnerability events linked to this group

No dated vulnerability events are attached to this group's linked vulnerabilities.

Verified techniques

No verified ATT&CK mapping for this group.

Defensive actions

No defensive actions are attached to this profile.

Ransomware claim data is unverified: RansomLook (CC BY 4.0).

Most-claimed sectorsManufacturingTelecommunicationsTransportation & LogisticsGovernmentTechnology
Activity window in this site's data

This is only the dates observed by this site. It is not this actor's lifetime or evidence of dormancy outside these dates.

Claim records
First observed Latest observed
Verified ATT&CK phases represented

No verified ATT&CK mapping for this group

Origin and motivation

Origin and motivation not attributed.

No MITRE ATT&CK group mapping exists for this actor yet. Mappings here are strict: an actor links to a MITRE group only when the group's own name, aliases, or MITRE-published description match, and MITRE has not catalogued this group. Technique and defensive action data will appear automatically if a verified mapping lands.

Claims posted under this group's name or leak-site brand
76 on this site
View all on Breaches →
Leak-site claim activity

Claims per month, 2021-09 to 2026-06. Peak 22 in 2021-09.

2021-092026-06
Show monthly counts as a table
MonthClaims
2021-0922
2021-101
2021-111
2021-124
2022-011
2022-022
2022-033
2022-042
2022-050
2022-060
2022-070
2022-086
2022-091
2022-104
2022-110
2022-121
2023-010
2023-021
2023-031
2023-040
2023-050
2023-061
2023-071
2023-080
2023-090
2023-101
2023-112
2023-121
2024-010
2024-020
2024-035
2024-041
2024-050
2024-060
2024-074
2024-082
2024-091
2024-100
2024-110
2024-120
2025-010
2025-022
2025-032
2025-040
2025-050
2025-060
2025-070
2025-080
2025-090
2025-100
2025-110
2025-120
2026-010
2026-020
2026-030
2026-042
2026-050
2026-061

0 additional claims without a disclosure date

Ransomware claim data is unverified: RansomLook (CC BY 4.0).

Glossary