Skip to content

Search Ransomware Intelligence

Jump to a group, country, industry or search victims.

Listed on a ransomware leak site

Rheem Global

rheem.com

Rheem Global was listed on the Helix and INC Ransom and Clop leak site on Nov 7, 2025. Brandefense has recorded 3 separate claims against it. Information as of Oct 19, 2026.

Country: United StatesIndustry: Manufacturing
Updated continuously · figures as of Oct 19, 2026
Claimed by
Helix, INC Ransom, Clop
First listed
Nov 7, 2025
Claims recorded
3

3 Leak-Site Claims.

HelixConfirmed claim
Posted on the leak site
Oct 17, 2026
Collected by Brandefense
Oct 17, 2026
Data claimed
2.45 GB
Leak-site post text, written by the group
Rheem Global customer records. Yearly revenue ~$6 billion. GoFile links and passwords unlock in 12 hours.
INC RansomConfirmed claim
Posted on the leak site
Apr 20, 2026
Collected by Brandefense
Apr 20, 2026
Data claimed
Not stated
ClopConfirmed claim
Posted on the leak site
Nov 7, 2025
Collected by Brandefense
Nov 7, 2025
Data claimed
Not stated
Leak-site post text, written by the group
Rheem Manufacturing Company is a leading global manufacturer of heating, cooling, water heating, and pool/spa heating solutions. It is headquartered in Atlanta, Georgia, USA. Since it's founded in 1925, Rheem has aimed to help people improve their comforts at home and at various business establishments. This widely recognized corporation offers advanced, energy-efficient options and diversified its product lineup to meet varying consumer needs.

Get alerted the moment your company or a supplier is posted on a leak site.

Alert me
Other confirmed victims claimed by the same group
VictimClaimed byCountryIndustryData claimedPosted
American Campus
americancampus.com
HelixUSUnited StatesConstructionNot stated
Southwire
southwire.com
HelixUSUnited StatesTechnologyNot stated
Quikrete
quikrete.com
HelixUSUnited StatesRetailNot stated
Personify Health
personifyhealth.com
HelixUSUnited StatesHospitality and TourismNot stated
Bay Alarm
bayalarm.com
HelixUSUnited StatesTechnologyNot stated
Smith Douglas Homes
smithdouglas.com
HelixUSUnited StatesConstructionNot stated
Other confirmed victims in the same industry
VictimClaimed byCountryIndustryData claimedPosted
GTL Concreto e Logística LTDA
gtlconcreto.com.br
EmperadorBRBrazilManufacturing2 GB
POWERsonic Industries Inc.AuroraCACanadaManufacturingNot stated
SMIC US Company (Sunnyvale, CA, US arm of Semiconductor Manufacturing International Corpo...
smics.com
N0nCNChinaManufacturingNot stated
Pergande
pergande.de
QilinDEGermanyManufacturingNot stated
ECO USA
ecousaind.com
N0nUSUnited StatesManufacturingNot stated
Chugoku Bend
bend.co.jp
EverestJPJapanManufacturingNot stated

Get Real-Time Alerts, IOC Feeds And Takedowns.

The Brandefense platform watches every leak site for your company, vendors and executives, and acts on what it finds.

Figures as of Oct 19, 2026. Confirmed leak-site claims collected by Brandefense technologies and validated by Brandefense analysts.

Listed on a leak site means a ransomware group has claimed the company; it is not a confirmed breach. To request a correction or removal, contact Brandefense.