Daixin

Active
Daixin Team is a ransomware and data extortion group active since at least June 2022, exclusively targeting the US Healthcare and Public Health sector by encrypting EHR and diagnostic systems and exfiltrating patient data to pressure victims into paying ransoms.
21 Victims
Aug 2, 2022 First Discovered
Sep 11, 2025 Last Discovered
370 Days Inactive
0% Infostealer
1/2 Sites Online
Known Locations (2)
Data Leak
7ukmkdtyxdkdivtjad57klqnd3kdsmq6tp45rrsxqnu76zzv3jvitlqd.onion
232fwh5cea3ub6qguz3pynijxfzl2uj3c73nbrayipf3gq25vtq2r4qd.onion
Tools Used
Exfiltration
RClone
Victims (21)

Detailed victim list temporarily unavailable

This group has 21 victims. The victim list API is currently responding slowly for this dataset. Country, sector, and infostealer breakdowns are not available at this time. Basic stats (victim count, first/last seen) are shown above from a faster data source.