All ransomware groups
teamxxx
12 tracked victims
·first seen 2025-02-17·last activity 2025-08-03Group profile
TeamXXX is an emerging ransomware group that launched its leak site in June 2025, claiming victims across healthcare, agriculture, hospitality, financial services, and shipping sectors in the US, UK, Norway, Ireland, and Europe within its first months.
Recent victims
| Date | Website / victim | Sector | Country |
|---|---|---|---|
| 2025-08-03 |  Scania.comScania.com | Transportation/Logistics | SE |
| 2025-07-03 |  Intercommunityct.orgIntercommunityct.org | Healthcare | US |
| 2025-07-02 |  Websterhenry.comWebsterhenry.com | Business Services | US |
| 2025-04-28 |  Nationwidecare.orgNationwidecare.org | Healthcare | GB |
| 2025-06-20 |  aetoscapitalasia.comaetoscapitalasia.com | Financial Services | HK |
| 2025-02-17 |  peterpauperpeterpauper.com | Not Found | US |
| 2025-03-01 |  interiorsgroup.ieinteriorsgroup.ie | Not Found | IE |
| 2025-03-03 |  narvikhavn.nonarvikhavn.no | Transportation/Logistics | NO |
| 2025-04-22 |  event-medical.comevent-medical.com | Healthcare | CZ |
| 2025-04-28 |  ationwidecare.orgationwidecare.org | Healthcare | GB |
| 2025-06-01 |  webberrestaurantgroup.comwebberrestaurantgroup.com | Hospitality and Tourism | |
| 2025-04-29 |  BelkorpAg.combelkorpAg.com | Agriculture and Food Production | DE |