termite
Known ransomware group ACTIVE Currently active
Termite is a ransomware group first identified in late 2024 using a modified version of Babuk ransomware code; its most notable attack was the November 2024 breach of supply-chain software firm Blue Yonder, claiming 680 GB of exfiltrated data and disrupting major customers including Starbucks.
4
Total Claims
2
Critical
—
Records Claimed
4
Industries Hit
Active span: May 29, 2026 – Oct 9, 2026 · 4 organizations targeted
Currently active
Actor Threat Profile
Activity Timeline
Peak: May 2026 (1)May 2026
LessMore
Oct 2026Share this profile
Top Targeted Industries
Healthcare 1
Financial Services 1
Agriculture and Food Production 1
Education 1
Tradecraft & Infrastructure
0
Documented tools
0 / 0
MITRE tactics / techniques
1
Known leak sites
Targeted Organizations
Claims by termite
Critical
Ransomware Claim: iDentalSoft
iDentalSoft
termite
Ransomware Healthcare
Oct 9, 2026 Critical
Ransomware Claim: theLender
theLender
termite
Ransomware Financial Services
Sep 22, 2026 Low
Ransomware Claim: Cal Fresh
Cal Fresh
termite
Ransomware Agriculture and Food Production
Jun 10, 2026 Low
Ransomware Claim: UEI College
UEI College
termite
Ransomware Education
May 31, 2026