ransomhouse
Known ransomware group ACTIVE Currently active
RansomHouse is an extortion group active since 2021 that positions itself as a "data disclosure" broker, frequently claiming it does not deploy encryptors but instead monetizes stolen data. It has been associated with the White Rabbit and Mario ESXi ransomware tooling.
1
Total Claims
1
Critical
—
Records Claimed
1
Industries Hit
Active span: May 17, 2026 – May 17, 2026 · 1 organizations targeted
Currently active
Actor Threat Profile
Activity Timeline
Peak: May 2026 (1)May 2026
LessMore
May 2026Share this profile
Top Targeted Industries
Healthcare 1
Tradecraft & Infrastructure
0
Documented tools
0 / 0
MITRE tactics / techniques
3
Known leak sites