All ransomware groups
teamxxx
12 tracked victims
·first seen 2025-02-17·last activity 2025-08-03Group profile
TeamXXX is an emerging ransomware group that launched its leak site in June 2025, claiming victims across healthcare, agriculture, hospitality, financial services, and shipping sectors in the US, UK, Norway, Ireland, and Europe within its first months.
Recent victims
| Date | Website / victim | Sector | Country |
|---|---|---|---|
| 2025-08-03 |  Scania.comScania.com | Transportation | SE |
| 2025-07-03 |  Intercommunityct.orgIntercommunityct.org | Healthcare | US |
| 2025-07-02 |  Websterhenry.comWebsterhenry.com | Professional Services | US |
| 2025-04-28 |  Nationwidecare.orgNationwidecare.org | Healthcare | GB |
| 2025-06-20 |  aetoscapitalasia.comaetoscapitalasia.com | Financial Services | HK |
| 2025-02-17 |  peterpauperpeterpauper.com | Retail & E-Commerce | US |
| 2025-03-01 |  interiorsgroup.ieinteriorsgroup.ie | Retail & E-Commerce | IE |
| 2025-03-03 |  narvikhavn.nonarvikhavn.no | Transportation | NO |
| 2025-04-22 |  event-medical.comevent-medical.com | Healthcare | CZ |
| 2025-04-28 |  ationwidecare.orgationwidecare.org | Healthcare | GB |
| 2025-06-01 |  webberrestaurantgroup.comwebberrestaurantgroup.com | Hospitality | |
| 2025-04-29 |  BelkorpAg.combelkorpAg.com | Agriculture and Food Production | DE |