Threat Group Profile
termite
● Active — last 30 days
Victim claims
9
First seen
Apr 2026
Last activity
28 Jul 2026
Tracked since
Nov 2024
Group overview
Termite is a ransomware group first identified in late 2024 using a modified version of Babuk ransomware code; its most notable attack was the November 2024 breach of supply-chain software firm Blue Yonder, claiming 680 GB of exfiltrated data and disrupting major customers including Starbucks.
Preferred targets
Manufacturing · 3
Agriculture and Food Production · 2
Healthcare · 2
Education · 1
Most targeted countries
US · 6
CA · 1
AU · 1
CN · 1