Back to Threat Groups
pysa
INACTIVERecovery riskransomware group
🇫🇷FrancePYSA (also known as Mespinoza) is a ransomware group active since 2019 that has primarily targeted education, healthcare, and government sectors in Europe and North America. French authorities arrested two PYSA operators in 2021, and the group's activity significantly declined afterward. PYSA was known for its disciplined targeting of high-value organizations and its double-extortion leak site.
Victims
307
records
First Discovered
Jul 1, 2020
victim
Last Discovered
Dec 6, 2021
victim
Inactive Since
1,663
days
Countries
9
hit
Avg Discount
—
no settlements
Group Activity
Last 12 monthsJul
2025
Aug
2025
Sep
2025
Oct
2025
Nov
2025
Dec
2025
Jan
2026
Feb
2026
Mar
2026
Apr
2026
May
2026
Jun
2026
Victims (307)
CHR Solutions
pysa🇺🇸 US
Dec 6, 2021
Healthcare1.0Published
continuinghc.com
The Skinners Kent Academy
pysa
Nov 8, 2021
Education1.0Published
Kent County Council
pysa
Nov 8, 2021
Public Sector1.0Published
Rusty Hardin & Associates
pysa🇺🇸 US
Nov 8, 2021
Business Services1.0Published
R.E. Pedrotti Co.
pysa🇺🇸 US
Nov 8, 2021
Manufacturing1.0Published
UEMOA
pysa
Nov 8, 2021
1.0Published
Skatetown
pysa
Nov 8, 2021
Consumer Services1.0Published
CHRYSO
pysa
Nov 8, 2021
Manufacturing1.0Published
itimCloud
pysa
Nov 8, 2021
Technology1.0Published
Bayonet
pysa
Nov 8, 2021
1.0Published
Fly Arik Air
pysa
Nov 8, 2021
Transportation/Logistics1.0Published
Las Vegas Cancer Center
pysa
Nov 8, 2021
Healthcare1.0Published
CarpenterProjects
pysa
Nov 8, 2021
Construction1.0Published
Westmont Helena
pysa
Nov 8, 2021
1.0Published
Woodchurch High School
pysa
Nov 8, 2021
Education1.0Published
Emkay Food Sales
pysa
Nov 8, 2021
Agriculture and Food Production1.0Published
Premier Energy
pysa
Nov 8, 2021
Energy1.0Published
Schmincke Künstlerfarben
pysa
Nov 8, 2021
Manufacturing1.0Published
Stratford Land
pysa
Nov 8, 2021
Construction1.0Published
Dr Schneider
pysa
Nov 8, 2021
Healthcare1.0Published
Rockbridge and Bath County
pysa
Nov 8, 2021
Public Sector1.0Published
Nordic Pharma
pysa
Nov 8, 2021
Healthcare1.0Published
The Leschaco Group
pysa
Nov 8, 2021
Business Services1.0Published
Eason Horticultural Resources
pysa
Nov 8, 2021
Agriculture and Food Production1.0Published
ΤÎΧÎÎÎÎÎÎÎÎ Î ÎÎÎÎ ÎΣΤÎÎÎÎ ÎΥΠΡÎÎ¥
pysa
Nov 8, 2021
1.0Published
SWL
pysa
Nov 8, 2021
1.0Published
Lucton School
pysa
Nov 8, 2021
Education1.0Published
Hickory Veterinary Hospital
pysa
Nov 8, 2021
Healthcare1.0Published
Westvale Primary School
pysa
Nov 8, 2021
Education1.0Published
Property Damage Restoration
pysa
Nov 8, 2021
Business Services1.0Published
Garner Dental Group
pysa
Nov 8, 2021
Healthcare1.0Published
MVS Mailers
pysa
Nov 8, 2021
Business Services1.0Published
EHS
pysa
Nov 8, 2021
1.0Published
Comstock Johnson Architects
pysa
Nov 8, 2021
Construction1.0Published
La Bodega
pysa
Nov 8, 2021
Consumer Services1.0Published
Gulfport MS
pysa
Nov 8, 2021
Public Sector1.0Published
Pitts Baptist Church
pysa
Nov 8, 2021
1.0Published
Emi Jay
pysa
Nov 8, 2021
1.0Published
Niemi Bil i Luleå
pysa
Nov 8, 2021
Transportation/Logistics1.0Published
Department of Justice and Constitutional Development
pysa
Nov 8, 2021
Public Sector1.0Published
MPRL E&P
pysa
Nov 8, 2021
Energy1.0Published
Capitol Beauty School
pysa
Nov 8, 2021
Education1.0Published
Bryant Industrial Services
pysa
Nov 8, 2021
Manufacturing1.0Published
Alternatives, Inc.
pysa
Nov 8, 2021
Technology1.0Published
lydall.com
Family Dental Health
pysa
Nov 8, 2021
Healthcare1.0Published
Community Brands
pysa
Nov 8, 2021
Business Services1.0Published
Vision Source
pysa
Nov 8, 2021
Healthcare1.0Published
AECOM
pysa
Nov 8, 2021
Construction1.0Published
Jalasoft
pysa
Nov 8, 2021
Technology1.0Published
Astera Software
pysa
Nov 8, 2021
Technology1.0Published
Infrastructure
leak site
OFFLINE
unreachable
http://pysa2bitc5ldeyfak4seeruqymqs4sj5wt5qkcq7aoyg4h2acqieywad.onion/partners.html4647ms
29m ago