// UNCLASSIFIED // CLEARED FOR PUBLIC RELEASE //
FILE PUB-ENTDTG 0600Z
ColdRecon › Threat Groups › RansomHub
Threat Group Dossier

RansomHub

CLEARED FOR PUBLIC RELEASE · OPEN-SOURCE INTELLIGENCE
RansomHub — 9 attributed incidents across our corpus.
Incidents on file9
First seen2024-05-09
Last seen2025-08-12
Top sectorauction house

Techniques observed (MITRE ATT&CK)

T1486 Data Encrypted for Impact (9)

Sectors targeted

auction house (2)staffing (1)Healthcare (1)drugstore chain (1)telecommunications (1)Arts and Auction (1)Art and Auction (1)

Attributed breaches

2025-08-12
ransomware
Manpower
2024-10-11
ransomware
BayMark Health Services
2024-08-29
ransomware
Halliburton
2024-07-13
ransomware
Rite Aid Corporation
2024-06-20
ransomware
Frontier Communications
2024-06-10
ransomware
Christie's
2024-06-07
ransomware
Christie's
2024-05-30
ransomware
Christie's
2024-05-09
ransomware
Christie's

Track this in real time.

ColdRecon watches the public signal so you don't have to — a daily brief and a live detection-coverage desk. Request clearance.

Request Clearance →