Threeam

☆ pin

Reports

First seen

Jun 12, 2026

Last seen

Aug 6, 2026

Motivation

Financial

Targeting

Sectors

Professional Services ×2 Agriculture ×1 Hospitality ×1 Healthcare ×1 Government ×1 Technology ×1 Education ×1

Victim regions

×1

×3

United States×3

Argentina×2

Belgium×1

Brazil×1

Australia×1

Croatia×1

Victim country, only when stated. Corpus is predominantly English-language reporting, so US/EU coverage is overweighted relative to true victim distribution.

Indicators

domain ×31ip_v4 ×8hash_sha1 ×2hash_sha256 ×2

Indicator values are available on Pro and via the API.

Recent reports

High

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Targeting

Indicators

Recent reports

Threeam ransomware group claims Club One Casino breach

Threeam publishes victim tws-tac.net on ransomware.live

Threeam ransomware gang publishes Guardian Barrier Services as victim

Threeam ransomware claims Academy for Classical Education victim

Threeam ransomware gang publishes jetmachprod.com as victim

Threeam ransomware gang publishes jastrebarsko.hr as victim

Threeam ransomware gang publishes palmero.com as victim

Threeam ransomware gang publishes insamani.com.ar as victim

Threeam ransomware gang claims BSynchro Holding as victim

Threeam publishes molinoscabodi.com.ar as ransomware victim

Threeam ransomware gang publishes ws.com.br as victim

Threeam ransomware gang claims consultic.be as new victim

Threeam ransomware gang publishes Australian Medical Council as victim

Threeam ransomware operator publishes agroexportavocados.com victim

Threeam claims new victim: hoplongtech.com

Threeam ransomware gang publishes mgrlaw.com as victim