Termite

Active
Termite is a ransomware group first identified in late 2024 using a modified version of Babuk ransomware code; its most notable attack was the November 2024 breach of supply-chain software firm Blue Yonder, claiming 680 GB of exfiltrated data and disrupting major customers including Starbucks.
49 Victims
May 11, 2023 First Discovered
Aug 13, 2026 Last Discovered
34 Days Inactive
0% Infostealer
1/1 Sites Online
Known Locations (1)
Termite
termiteuslbumdge2zmfmfcsrvmvsfe4gvyudc5j6cdnisnhtftvokid.onion
Intelligence
Victims (49)

Detailed victim list temporarily unavailable

This group has 49 victims. The victim list API is currently responding slowly for this dataset. Country, sector, and infostealer breakdowns are not available at this time. Basic stats (victim count, first/last seen) are shown above from a faster data source.