United States
US #1 Most TargetedRansomware victim intelligence profile · Ranked #1 globally · Updated: Sep 5, 2026
ThreatAI Analysis
Compiled from this database and the ransomware.live profiles of the groups active in United States. Figures are computed from the tracked records, not inferred.
The United States has recorded 9286 ransomware attacks globally ranking 1st with perpetrators Qilin, Akira, Play most active; Business Services, Manufacturing, Healthcare sectors hardest hit.
United States in the global picture
United States accounts for 9,411 of the ransomware disclosures tracked here, ranking #1 worldwide and making up 44% of the global total. The sectors listed most often are Business Services, Manufacturing, Healthcare.
Who is most active in United States
Qilin — 974 victims in United States. Qilin ransomware was first observed in July of 2022. Akira — 867 victims in United States. The Akira ransomware group is said to have emerged in March 2023, and there's much speculation about its ties to the former CONTI ransomware group. Play — 770 victims in United States. Initially observed in June 2022, the Play ransomware (a.k.a PlayCrypt) operates through double extortion, targeting numerous organizations in Latin America.
Where to report an incident in United States
- Cybersecurity and Infrastructure Security Agency · [email protected] · website
National computer emergency response teams for United States, as registered with ENISA and the teams themselves. Regional, sectoral and vendor response teams are excluded; verify current contact details before relying on them in an incident.
Ransomware Threat Profile: United States
United States ranks #1 globally for ransomware attacks, with 9,411 confirmed victims in this database — representing 44% of the worldwide total. The most active ransomware groups targeting United States include Qilin, Akira, Play.
The most frequently targeted industries in United States are Business Services, Manufacturing, Healthcare. The healthcare sector is particularly vulnerable because attacks on hospitals and medical providers can create life-threatening situations, increasing pressure to pay ransoms quickly.
United States's attack volume reflects broader trends in ransomware targeting: as one of the world's largest economies with extensive digital infrastructure, United States presents a high-value target environment with many large organisations, diverse industries, and significant data assets that ransomware groups seek to exploit.
Organisations in United States should consider the active threat groups documented here when assessing their cybersecurity posture, implementing detection rules, and prioritising incident response planning.
Recent Victims in United States (showing 100 of 9,411)
| # | Organization | Group | Sector | Date |
|---|---|---|---|---|
| 1 | D-MAX Engineering, Inc | Spacebears | Manufacturing | Sep 5, 2026 |
| 2 | Kovo Healthtech Corp | Pear | Healthcare | Sep 5, 2026 |
| 3 | pscindustries.com | Lockbit5 | Manufacturing | Sep 4, 2026 |
| 4 | Schwartz, Giannini, Lantsberger & Adamson (SGLA) | Spacebears | Professional Services | Sep 4, 2026 |
| 5 | Sports Endeavors | Spacebears | Retail & E-Commerce | Sep 4, 2026 |
| 6 | Wolfram Research | Direwolf | Technology | Sep 4, 2026 |
| 7 | America’s Food Basket | Wallstreet | Retail & E-Commerce | Sep 3, 2026 |
| 8 | Chicago Partners Wealth Advisors | Storm | Financial Services | Sep 3, 2026 |
| 9 | GSAC Auto Financing | Storm | Financial Services | Sep 3, 2026 |
| 10 | GSAC | Storm | — | Sep 3, 2026 |
| 11 | hvlawfirm.com | Settra | Professional Services | Sep 3, 2026 |
| 12 | Katten Muchin Rosenman | Silentransomgroup | Professional Services | Sep 3, 2026 |
| 13 | Maglin, Miskiv & Associates | Insomnia | Professional Services | Sep 3, 2026 |
| 14 | medevolve.com | Settra | Healthcare | Sep 3, 2026 |
| 15 | neolife.com | Settra | Healthcare | Sep 3, 2026 |
| 16 | SITES Medical | Storm | Healthcare | Sep 3, 2026 |
| 17 | Star Aviation, Inc | Storm | Transportation | Sep 3, 2026 |
| 18 | Superior Ag | Storm | Agriculture and Food Production | Sep 3, 2026 |
| 19 | Grayson Rural Electric Cooperative | Qilin | Energy & Utilities | Sep 2, 2026 |
| 20 | Greenberg Traurig | Silentransomgroup | Professional Services | Sep 2, 2026 |
| 21 | N*************** | Insomnia | — | Sep 2, 2026 |
| 22 | Ormond Beach Florida | Wallstreet | — | Sep 2, 2026 |
| 23 | Proliance Surgeons | Payoutsking | Healthcare | Sep 2, 2026 |
| 24 | ScrubaDub Auto Wash Centers | Akira | Retail & E-Commerce | Sep 2, 2026 |
| 25 | specialtytextile.com | Incransom | Manufacturing | Sep 2, 2026 |
| 26 | Westfield Public School District | Incransom | Education | Sep 2, 2026 |
| 27 | amptc.net | Krybit | Technology | Sep 1, 2026 |
| 28 | BYK Construction | Akira | Manufacturing | Sep 1, 2026 |
| 29 | CareerSource Palm Beach County | Thegentlemen | Professional Services | Sep 1, 2026 |
| 30 | hccd-construction.com | Krybit | Manufacturing | Sep 1, 2026 |
| 31 | Holland & Knight | Silentransomgroup | Professional Services | Sep 1, 2026 |
| 32 | Honeycomb Programs Inc | Direwolf | Other | Sep 1, 2026 |
| 33 | Lawter | Medusalocker | Manufacturing | Sep 1, 2026 |
| 34 | Nutex Health | Thegentlemen | Healthcare | Sep 1, 2026 |
| 35 | Quality Resource Pvt | Global secret group | Other | Sep 1, 2026 |
| 36 | SCHMIDT | Bravox | — | Sep 1, 2026 |
| 37 | Total Education Solutions | Wallstreet | Education | Sep 1, 2026 |
| 38 | aeiconsultants.com | Braincipher | Professional Services | Aug 31, 2026 |
| 39 | ccsperfusion.com | Braincipher | Healthcare | Aug 31, 2026 |
| 40 | Cedar County Memorial Hospital | Wallstreet | Healthcare | Aug 31, 2026 |
| 41 | diversifiedbodyandpaint.com | Settra | Manufacturing | Aug 31, 2026 |
| 42 | esopartnerscpa.com | Zawoo | Professional Services | Aug 31, 2026 |
| 43 | Figgins Family Wine Estates | Play | Agriculture and Food Production | Aug 31, 2026 |
| 44 | Gale Credit Union | Akira | Financial Services | Aug 31, 2026 |
| 45 | Hayward Holdings | Falcon | Manufacturing | Aug 31, 2026 |
| 46 | hoaattorneys.com | Lockbit5 | Professional Services | Aug 31, 2026 |
| 47 | howardlumber.com | Settra | Manufacturing | Aug 31, 2026 |
| 48 | Ishbia & Gagleard, P.C. | Aurora | Professional Services | Aug 31, 2026 |
| 49 | KRC Machine Tool Solutions | Play | Manufacturing | Aug 31, 2026 |
| 50 | Metro Tulsa Foot | Insomnia | Healthcare | Aug 31, 2026 |
| 51 | New Century Ophthalmology Group | Incransom | Healthcare | Aug 31, 2026 |
| 52 | Super Systems Inc | Interlock | Technology | Aug 31, 2026 |
| 53 | svfcu.org | Lockbit5 | Financial Services | Aug 31, 2026 |
| 54 | Truckworx | Nightspire | Transportation | Aug 31, 2026 |
| 55 | www.renorefractories.com | Incransom | Manufacturing | Aug 31, 2026 |
| 56 | zayo.com | Settra | Technology | Aug 31, 2026 |
| 57 | zonarsystems.com | Settra | Transportation | Aug 31, 2026 |
| 58 | zummocorp.com | Incransom | — | Aug 31, 2026 |
| 59 | Adkisson Group | Thegentlemen | — | Aug 30, 2026 |
| 60 | Andover | Wallstreet | Education | Aug 30, 2026 |
| 61 | DistributionNOW (DNOW Inc.) | Falcon | Manufacturing | Aug 30, 2026 |
| 62 | esopartnerscpa | Zawoo | Professional Services | Aug 30, 2026 |
| 63 | Glassdoor | Thegentlemen | Professional Services | Aug 30, 2026 |
| 64 | Globus Medical | Falcon | Healthcare | Aug 30, 2026 |
| 65 | Northwest Trophy | Thegentlemen | Retail & E-Commerce | Aug 30, 2026 |
| 66 | AUM Construction | Qilin | Manufacturing | Aug 29, 2026 |
| 67 | Bandit Industries | Qilin | Other | Aug 29, 2026 |
| 68 | BayView Real Estate | Shadowbyt3$ | Retail & E-Commerce | Aug 29, 2026 |
| 69 | LAPoco Architects | Qilin | Professional Services | Aug 29, 2026 |
| 70 | Neogen Corporation | Shinyhunters | Agriculture and Food Production | Aug 29, 2026 |
| 71 | Oilquip Inc | Incransom | Energy & Utilities | Aug 29, 2026 |
| 72 | swagelok | Iah6477 | Manufacturing | Aug 29, 2026 |
| 73 | trc-companies | Iah6477 | Professional Services | Aug 29, 2026 |
| 74 | Alumax | Akira | Manufacturing | Aug 28, 2026 |
| 75 | Bayview Real Estate WARNING | Shadowbyt3$ | Retail & E-Commerce | Aug 28, 2026 |
| 76 | corematerials.com | Chaos | Manufacturing | Aug 28, 2026 |
| 77 | H.W. Lochner | Payoutsking | Professional Services | Aug 28, 2026 |
| 78 | Jack Henry & Associates | Shinyhunters | Financial Services | Aug 28, 2026 |
| 79 | McKesson Corporation | Shinyhunters | Healthcare | Aug 28, 2026 |
| 80 | Newton County School System | Qilin | Education | Aug 28, 2026 |
| 81 | ProCare | Moneymessage | Healthcare | Aug 28, 2026 |
| 82 | BENCIVIL | Incransom | Professional Services | Aug 27, 2026 |
| 83 | Capitol Mechanics | Emperador | Transportation | Aug 27, 2026 |
| 84 | Cetylite | Akira | Manufacturing | Aug 27, 2026 |
| 85 | National Salvage | Storm | Manufacturing | Aug 27, 2026 |
| 86 | Our Hospice Of South Central Indiana | Storm | Healthcare | Aug 27, 2026 |
| 87 | Providence Investments | Qilin | Financial Services | Aug 27, 2026 |
| 88 | Ruby Seven Studios | Incransom | Technology | Aug 27, 2026 |
| 89 | Seabrook Island | Akira | Hospitality | Aug 27, 2026 |
| 90 | theheartcenterofmemphis.com | Lockbit5 | Healthcare | Aug 27, 2026 |
| 91 | W****s | Payoutsking | — | Aug 27, 2026 |
| 92 | Zion Construction | Thegentlemen | Manufacturing | Aug 27, 2026 |
| 93 | ATF | Qilin | Government & Defense | Aug 26, 2026 |
| 94 | California Truck Equipment | Qilin | Transportation | Aug 26, 2026 |
| 95 | Hamilton | Ailock | Other | Aug 26, 2026 |
| 96 | Integrex RCM | Qilin | Professional Services | Aug 26, 2026 |
| 97 | mat-holdings-inc | Iah6477 | Manufacturing | Aug 26, 2026 |
| 98 | MEMSIC | Abyss | Manufacturing | Aug 26, 2026 |
| 99 | NEXT LEVEL MEDICAL, LLC | Pear | Healthcare | Aug 26, 2026 |
| 100 | proampac | Iah6477 | Manufacturing | Aug 26, 2026 |
Frequently Asked Questions
How many ransomware attacks have occurred in United States?
United States has recorded 9,411 ransomware victim disclosures in this database, ranking #1 globally. This represents 44% of all tracked ransomware attacks worldwide.
Which ransomware groups target United States?
The ransomware groups most active in United States are Qilin, Akira, Play, Incransom. These groups collectively account for the majority of victim disclosures attributed to United States.
Which industries are most targeted by ransomware in United States?
In United States, the most frequently targeted sectors are Business Services, Manufacturing, Healthcare. These industries hold valuable data and often have critical operational requirements that make them attractive ransomware targets.
How does United States rank globally for ransomware attacks?
United States ranks #1 globally for ransomware attacks with 9,411 victim disclosures, representing 44% of the worldwide total of 21,368 tracked victims.
How can organisations in United States protect against ransomware?
Organisations in United States should implement a layered security approach including regular offline backups, network segmentation, multi-factor authentication, endpoint detection and response (EDR) tools, and employee security awareness training. Monitoring threat intelligence feeds for active groups targeting United States is also recommended.