Back to Threat Groups
robinhood
INACTIVEransomware group
RobbinHood is a ransomware group first observed in April–May 2019, responsible for high-profile attacks on US cities inc
Victims
2
records
First Discovered
Dec 6, 2021
victim
Last Discovered
Feb 22, 2026
victim
Inactive Since
220
days
Countries
0
hit
Avg Discount
—
no settlements
Group Activity
Last 12 monthsNov
2025
Dec
2025
Jan
2026
1
Feb
2026
Mar
2026
Apr
2026
May
2026
Jun
2026
Jul
2026
Aug
2026
Sep
2026
Oct
2026
Victims (2)
Infrastructure
leak site
OFFLINE
unreachable
https://robinhoodleaks.tumblr.com2886ms
7h ago