We've just wrapped up the new design, along with a ton of other improvements. Check them all out in the Changelog.

Ransomware Group intelligence

Pysa

Inactive

Track Pysa with 309 published victims and 1 known leak locations in a single intelligence view.

DARK EYE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Victims 309 Known published victims in this dataset
First discovered 2020-07-01 Earliest victim discovery date
Last discovered 2022-09-20 Latest victim discovery date
Inactive since 1502 days Days since the latest known victim
Top country Canada 2 victims
Known locations 1 Leak or negotiation infrastructure tracked

Overview

Pysa is tracked by Dark Eye as a ransomware group with 309 published victims.

Canada is currently the most targeted country in this dataset.

1 known leak locations are currently associated with this group.

Leak Status Distribution

  • Leaked 0 0.0%
  • Pending 309 100.0%
  • Deleted 0 0.0%

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (1)

    Label Type Availability Links
    Leak location 1 Onion service Down checked 31m ago pysa2bitc5ldeyfak4seeruqymqs4sj5wt5qkcq7aoyg4h2acqieywad.onion

    Top Activity Sectors (17)

    1. Not identified 147
    2. Education 40
    3. Services 32
    4. Communication / Marketing 18
    5. Public Sector 11
    6. Healthcare / Pharma 10
    7. Manufacturing / Engineering 9
    8. IT 8
    9. Energy 8
    10. Finance / Legal / Insurance 6
    11. Retail / E-commerce 5
    12. Construction / Real Estate 4
    13. Transportation / Travel / Logistics 4
    14. Hospitality / Food & Beverage / Tourism 2
    15. Agriculture / Food 2
    16. NGOs / Associations 2
    17. Telecommunications 1

    Victims (309)

    Search, filter and paginate the victim timeline for Pysa. Showing 1–100 of 309.

    Type Target Discovered Country Business Category Intel Link Leak status
    Ransomware ΤΕΧΝΟΛΟΓΙΚΟ ΠΑΝΕΠΙΣΤΗΜΙΟ ΚΥΠΡΟΥ id4209 View details — Other — pending
    Ransomware CHR Solutions id2072 View details — Services — pending
    Ransomware The Skinners Kent Academy id1880 View details — Education — pending
    Ransomware Kent County Council id1879 View details — Public Sector — pending
    Ransomware Rusty Hardin & Associates id1878 View details — Other — pending
    Ransomware R.E. Pedrotti Co. id1877 View details — Other — pending
    Ransomware UEMOA id1876 View details — Other — pending
    Ransomware Skatetown id1875 View details — Other — pending
    Ransomware CHRYSO id1874 View details — Other — pending
    Ransomware itimCloud id1873 View details — IT — pending
    Ransomware Bayonet id1872 View details — Other — pending
    Ransomware Fly Arik Air id1871 View details — Other — pending
    Ransomware Las Vegas Cancer Center id1870 View details — Energy — pending
    Ransomware CarpenterProjects id1869 View details — Communication / Marketing — pending
    Ransomware Westmont Helena id1868 View details — Other — pending
    Ransomware Woodchurch High School id1867 View details — Education — pending
    Ransomware Emkay Food Sales id1866 View details — Retail / E-commerce — pending
    Ransomware Premier Energy id1865 View details — Energy — pending
    Ransomware Schmincke Künstlerfarben id1864 View details — Services — pending
    Ransomware Stratford Land id1863 View details — Other — pending
    Ransomware Dr Schneider id1862 View details — Other — pending
    Ransomware Rockbridge and Bath County id1861 View details — Public Sector — pending
    Ransomware Nordic Pharma id1860 View details — Healthcare / Pharma — pending
    Ransomware The Leschaco Group id1859 View details — Services — pending
    Ransomware Eason Horticultural Resources id1858 View details — Other — pending
    Ransomware ΤΕΧΝΟΛΟΓΙΚΟ ΠΑΝΕΠΙΣΤΗΜΙΟ ΚΥΠΡΟΥ id1857 View details — Other — pending
    Ransomware SWL id1856 View details — Other — pending
    Ransomware Lucton School id1855 View details — Education — pending
    Ransomware Hickory Veterinary Hospital id1854 View details — Healthcare / Pharma — pending
    Ransomware Westvale Primary School id1853 View details — Education — pending
    Ransomware Property Damage Restoration id1852 View details — Construction / Real Estate — pending
    Ransomware Garner Dental Group id1851 View details — Healthcare / Pharma — pending
    Ransomware MVS Mailers id1850 View details — Other — pending
    Ransomware EHS id1849 View details — Other — pending
    Ransomware Comstock Johnson Architects id1848 View details — Other — pending
    Ransomware La Bodega id1847 View details — Other — pending
    Ransomware Gulfport MS id1846 View details — Other — pending
    Ransomware Pitts Baptist Church id1845 View details — Other — pending
    Ransomware Emi Jay id1844 View details — Other — pending
    Ransomware Niemi Bil i LuleÃ¥ id1843 View details — Other — pending
    Ransomware Department of Justice and Constitutional Development id1842 View details — IT — pending
    Ransomware MPRL E&P id1841 View details — Communication / Marketing — pending
    Ransomware Capitol Beauty School id1840 View details — Education — pending
    Ransomware Bryant Industrial Services id1839 View details — Manufacturing / Engineering — pending
    Ransomware Alternatives, Inc. id1838 View details — Services — pending
    Ransomware Family Dental Health id1837 View details — Healthcare / Pharma — pending
    Ransomware Community Brands id1836 View details — Other — pending
    Ransomware Vision Source id1835 View details — Other — pending
    Ransomware AECOM id1834 View details — Other — pending
    Ransomware Jalasoft id1833 View details — Other — pending
    Ransomware Astera Software id1832 View details — IT — pending
    Ransomware Thunderbird Adventist Academy id1831 View details — Education — pending
    Ransomware Raj Transport Inc. id1830 View details — Transportation / Travel / Logistics — pending
    Ransomware Metaenergia id1829 View details — Other — pending
    Ransomware Florida Heart Associates id1828 View details — Other — pending
    Ransomware Family Dentist Newbury id1827 View details — Other — pending
    Ransomware ProActive Works id1826 View details — Communication / Marketing — pending
    Ransomware Diputación de Segovia id1825 View details — Other — pending
    Ransomware City of Bridgeport, WV id1824 View details — Public Sector — pending
    Ransomware Ferrara id1823 View details — Other — pending
    Ransomware Universitat Autònoma de Barcelona id1822 View details — Hospitality / Food & Beverage / Tourism — pending
    Ransomware Höerskool Labori Paarl id1715 View details — Other — pending
    Ransomware Cenikor id1714 View details — Other — pending
    Ransomware Suntide Commercial Realty id1713 View details — Other — pending
    Ransomware Motor Appliance Corporation id1712 View details — Services — pending
    Ransomware Townley Grammar School id1681 View details — Education — pending
    Ransomware Ruskin Community High School id1680 View details — Education — pending
    Ransomware Weiss Properties id1679 View details — Communication / Marketing — pending
    Ransomware Lesk Engineering id1649 View details — Manufacturing / Engineering — pending
    Ransomware Our Lady's Abingdon id1648 View details — Other — pending
    Ransomware Western Urethane id1647 View details — Other — pending
    Ransomware QPharma id1646 View details — Healthcare / Pharma — pending
    Ransomware Price Davis LLC id1645 View details — Communication / Marketing — pending
    Ransomware Campus Sacre Coeur Wien Gymnasium id1644 View details — Education — pending
    Ransomware CreateInfor id1643 View details — Other — pending
    Ransomware InfoSync IT Solutions id1642 View details — Services — pending
    Ransomware Hall Technologies Inc id1641 View details — IT — pending
    Ransomware Consolidated High School District 230 id1542 View details — Education — pending
    Ransomware Santélys id1541 View details — Other — pending
    Ransomware Instituto Mixto de Ayuda Social id1540 View details — Other — pending
    Ransomware Ardagh Group id1539 View details — Services — pending
    Ransomware ITS, Inc. id1538 View details — Services — pending
    Ransomware St Benet Biscop id1537 View details — Other — pending
    Ransomware Jurysync id1536 View details — Other — pending
    Ransomware Adore Fashions id1535 View details — Other — pending
    Ransomware HMCC id1534 View details — Other — pending
    Ransomware Associated Solutions id1533 View details — Services — pending
    Ransomware Ocean View Nursing & Rehabilitation id1532 View details — Healthcare / Pharma — pending
    Ransomware Betson Enterprises id1366 View details — Communication / Marketing — pending
    Ransomware One Community Health id1365 View details — Healthcare / Pharma — pending
    Ransomware Jesse Engineering Co id1364 View details — Manufacturing / Engineering — pending
    Ransomware Grupo SAN id1363 View details — Other — pending
    Ransomware Spartanburg & Pelham OB-GYN id1362 View details — Other — pending
    Ransomware Haverhill High School id1361 View details — Education — pending
    Ransomware Woodlake Unified id1360 View details — Other — pending
    Ransomware HABI id1359 View details — Other — pending
    Ransomware Drug Alcohol Testing id1351 View details — Other — pending
    Ransomware Sacschool id1104 View details — Education — pending
    Ransomware Liberty Linehaul id1103 View details — Other — pending
    Ransomware Faic id1102 View details — Other — pending