Threeam

☆ pin

Reports

First seen

Jun 12, 2026

Last seen

Oct 9, 2026

Motivation

Financial

Targeting

Sectors

Professional Services ×4 Healthcare ×2 Technology ×2 Education ×2 Manufacturing ×2 Agriculture ×1 Hospitality ×1 Government ×1

Victim regions

×1

×6

United States×6

Argentina×3

Australia×2

Belgium×1

Brazil×1

Croatia×1

France×1

Colombia×1

Victim country, only when stated. Corpus is predominantly English-language reporting, so US/EU coverage is overweighted relative to true victim distribution.

Indicators

domain ×53ip_v4 ×20hash_sha256 ×7hash_sha1 ×2hash_md5 ×1

Indicator values are available on Pro and via the API.

Recent reports

Medium

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Targeting

Indicators

Recent reports

Threeam ransomware gang publishes Fleet Works Inc as victim

Threeam ransomware gang publishes Safe Scaffolding as victim

Threeam ransomware gang claims Coosalud EPS breach

Threeam ransomware: pistonespersan.com.ar victim published

Threeam claims Midwest Business Technology victim on ransomware.live

Threeam ransomware gang publishes Apexus as victim on ransomware.live

Threeam ransomware gang claims BHN Expertise as victim

Threeam ransomware claims St James' Anglican School in Western Australia

Threeam ransomware claims Newman Tractor as victim

Threeam ransomware gang publishes wmdn.net as new victim

Threeam ransomware gang publishes mecasem.org as victim

Threeam ransomware group claims Club One Casino breach

Threeam publishes victim tws-tac.net on ransomware.live

Threeam ransomware gang publishes Guardian Barrier Services as victim

Threeam ransomware claims Academy for Classical Education victim

Threeam ransomware gang publishes jetmachprod.com as victim

Threeam ransomware gang publishes jastrebarsko.hr as victim

Threeam ransomware gang publishes palmero.com as victim

Threeam ransomware gang publishes insamani.com.ar as victim

Threeam ransomware gang claims BSynchro Holding as victim

Threeam publishes molinoscabodi.com.ar as ransomware victim

Threeam ransomware gang publishes ws.com.br as victim

Threeam ransomware gang claims consultic.be as new victim

Threeam ransomware gang publishes Australian Medical Council as victim

Threeam ransomware operator publishes agroexportavocados.com victim

Threeam claims new victim: hoplongtech.com

Threeam ransomware gang publishes mgrlaw.com as victim