Issue
- Claimed victims
- –
- Active groups
- –
- Countries
- –
- Regions
- –
Where claimed victims by region and country
Sectors
Threat actor ledger
Data quality
Coverage looked unusually low for this window, so some postings may be missing.
Known ransomware use from CISA's KEV catalog
Vulnerabilities CISA has confirmed ransomware gangs exploit, newest first.
In your stack
Most recently added
How to read this: everything here comes from postings on ransomware and extortion leak sites, collected by the public aggregators Ransomware.live and RansomLook and summarised in the daily Breach Wire digest. A posting is a claim, not a confirmed breach. Numbers cover one UTC day; masked postings and reposts are counted in data quality but not as victims.