RANSOMWARE VICTIM⚠ DUPLICATE CLAIM
Armis Group
www.armisgroup.com
ransomhouse📍 Portugal (PT)📅 November 20, 2025
8
same group
Attack Intelligence
Armis Group was compromised in a ransomware attack attributed to ransomhouse in November 2025. The organization, operating in an undisclosed sector in Portugal, was added to the group's data leak site as part of an extortion campaign.
ransomhouse operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.
Armis Group creates smart digital tools that make life easier for different industries. They build computer systems that help transportation companies, sports organizations, banks, government offices, and factories work better and faster.
Additional Details
Other Victims — ransomhouse (8)
[DISCLOSED]City of McMinnville OR
—
Aug 2026
[DISCLOSED]Nichirei
—
Aug 2026
Alya Construtora
BR · Manufacturing
Aug 2026
City of McMinnville OR
US · Government & Defense
Aug 2026
lya Construtora
US · Manufacturing
Aug 2026
City of Beacon
US · Government & Defense
Aug 2026
TECHVENTURES BANK S.A.
PA · Financial Services
Aug 2026
PCL Holding
CA · Professional Services
Aug 2026
Quick Facts
CountryPortugal (PT)
Attack DateNov 20, 2025
Domainwww.armisgroup.com
Intel Sourceransomware.live
StatusDUPLICATE CLAIM
Threat Group
External Links
Data sourced from Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Victim listing does not imply confirmed breach — intelligence based on group claims.