Live ransomware attack map
Where ransomware groups are listing victims, by country, group and sector. Click a country for its breakdown.
Loading map data...
Top Ransomware Groups
Top Targeted Sectors
Monthly Attack Trend
Top 15 Ransomware Groups
Attack Heatmap (Months x Years)
Recent Victims
| Victim | Date |
|---|
About the Ransomware Attack Map
This interactive map provides real-time visualization of 23,574 global ransomware attacks across 180 countries, tracked from 246 active ransomware groups. Data is collected from ransomware group leak sites and dark web intelligence sources, updated every 6 hours.
Use the filters above to explore attacks by specific ransomware groups (such as Qilin, Akira, Thegentlemen), targeted business sectors, or geographic regions. Hover over any country to see detailed statistics including victim counts, active threat groups, and recent incidents.
The monthly trend chart and heatmap provide historical context, showing how ransomware activity has evolved over time. This data is sourced from ransomware.live API.
Frequently Asked Questions
How many ransomware attacks have been recorded?
Our dataset currently tracks 23,574 ransomware attack victims across 180 countries. This data is updated every 6 hours from dark web leak site monitoring and open-source threat intelligence feeds.
Which ransomware group is the most active?
Qilin is currently the most active ransomware group in our dataset. We track 246 active ransomware groups with unique color coding on the interactive map for easy identification.
Which country is most targeted by ransomware?
United States is the most frequently targeted country by ransomware attacks. Use the interactive map to explore attack distribution across all 180 affected countries.
How often is the ransomware map data updated?
The ransomware attack data is automatically updated every 6 hours. The data is sourced from ransomware.live API which monitors ransomware group leak sites on the dark web and aggregates victim disclosures.
What sectors are most targeted by ransomware?
Healthcare, manufacturing, education, government, and financial services are among the most targeted sectors. Use the sector filter on the map to explore attacks by industry.
Can I filter ransomware attacks by group or country?
Yes. The interactive map supports filtering by ransomware group, business sector, and time period. Click any country on the map to view detailed attack statistics, or use the dropdown filters above the map.