Threat Group Profile
termite
Dormant / historical
Victim claims
7
First seen
Apr 2026
Last activity
08 Jun 2026
Tracked since
—
Group overview
Termite is a ransomware group first identified in late 2024 using a modified version of Babuk ransomware code; its most notable attack was the November 2024 breach of supply-chain software firm Blue Yonder, claiming 680 GB of exfiltrated data and disrupting major customers including Starbucks.
Preferred targets
Manufacturing · 3
Agriculture and Food Production · 2
Education · 1
Healthcare · 1
Most targeted countries
US · 5
CA · 1
AU · 1
