Ransomware victims database
23,574 organisations listed on ransomware leak sites, across 180 countries and 246 threat groups. Sourced from public leak-site disclosures via ransomware.live.
Updated
- Victims
- 23,574
- Threat groups
- 246
- Countries
- 180
- Sectors
- 21
Latest disclosures 23,574
Page 1 of 472| Organization | Group | Country | Sector | Disclosed |
|---|---|---|---|---|
|
bereskinparr.com smartbiggar.ca
Incransom CACanada
|
Incransom | CACanada | Professional Services | |
|
Gräfliches Hofbrauhaus Freising
Lamashtu DEGermany
|
Lamashtu | DEGermany | Agriculture and Food Production | |
|
Hecker Holzsystembau
Lamashtu DEGermany
|
Lamashtu | DEGermany | Manufacturing | |
|
K.r.a. ...s
Silentransomgroup
|
Silentransomgroup | — | — | |
|
Linebarger Goggan Blair & Sampson
Everest USUnited States
|
Everest | USUnited States | Professional Services | |
|
VERGI Muenster
Lamashtu DEGermany
|
Lamashtu | DEGermany | Energy & Utilities | |
|
Adobe Insurance Brokers, LLC
Pear USUnited States
|
Pear | USUnited States | Financial Services | |
|
Allmand-Smith Limited
Aurora GBUnited Kingdom
|
Aurora | GBUnited Kingdom | Manufacturing | |
|
Bruin Group LLC
Emperador USUnited States
|
Emperador | USUnited States | Other | |
|
Cascade Flooring America
Akira USUnited States
|
Akira | USUnited States | Retail & E-Commerce | |
|
clinicaromero.com
Braincipher ARArgentina
|
Braincipher | ARArgentina | Healthcare | |
|
Coastal Alabama Community College
Interlock USUnited States
|
Interlock | USUnited States | Education | |
|
Company #100
N0n
|
N0n | — | — | |
|
Company #101
N0n
|
N0n | — | — | |
|
Company #102
N0n
|
N0n | — | — | |
|
Company #103
N0n PTPortugal
|
N0n | PTPortugal | — | |
|
Company #99
N0n
|
N0n | — | — | |
|
dangvuongcac
Hyflock VNVietnam
|
Hyflock | VNVietnam | — | |
|
Flextron Circuit Assembly
Akira SGSingapore
|
Akira | SGSingapore | Manufacturing | |
|
FuG-Gruppe
Lamashtu DEGermany
|
Lamashtu | DEGermany | Other | |
|
gabonmeca.com leak incident
Hyflock GAGabon
|
Hyflock | GAGabon | Manufacturing | |
|
genesys.com
Scarlettgroup USUnited States
|
Scarlettgroup | USUnited States | Technology | |
|
GSE-M Technology Sdn. Bhd.
Bravox MYMalaysia
|
Bravox | MYMalaysia | Technology | |
|
Hanjin Information Systems & Telecommunication Co., Ltd.
N0n KRSouth Korea
|
N0n | KRSouth Korea | Technology | |
|
Heritage Senior Living
N0n USUnited States
|
N0n | USUnited States | Healthcare | |
|
Hypertherm
Helix USUnited States
|
Helix | USUnited States | Manufacturing | |
|
K.r.. ...s
Silentransomgroup
|
Silentransomgroup | — | — | |
|
Lanham Associates
Everest
|
Everest | — | Professional Services | |
|
LEGAL-RECORDS.US
Clop USUnited States
|
Clop | USUnited States | Professional Services | |
|
Lindauer Dornier
Everest DEGermany
|
Everest | DEGermany | Manufacturing | |
|
MECA-PRECIS
Lamashtu FRFrance
|
Lamashtu | FRFrance | Manufacturing | |
|
mvjllp.com
Braincipher
|
Braincipher | — | — | |
|
nbcuniversal.com
Scarlettgroup USUnited States
|
Scarlettgroup | USUnited States | Technology | |
|
novagroupgbc.com
Braincipher GBUnited Kingdom
|
Braincipher | GBUnited Kingdom | Other | |
|
oflaherty-law.com
Braincipher IEIreland
|
Braincipher | IEIreland | Professional Services | |
|
olyortho.com
Braincipher USUnited States
|
Braincipher | USUnited States | Healthcare | |
|
PLD Group
Everest
|
Everest | — | Other | |
|
police.rajasthan.gov.in
Scarlettgroup INIndia
|
Scarlettgroup | INIndia | Government & Defense | |
|
Porter Hedges LLP
Silentransomgroup USUnited States
|
Silentransomgroup | USUnited States | Professional Services | |
|
prosomnus.com
Braincipher USUnited States
|
Braincipher | USUnited States | Healthcare | |
|
sodali.com
Braincipher USUnited States
|
Braincipher | USUnited States | Professional Services | |
|
srsnodgrass.com
Braincipher USUnited States
|
Braincipher | USUnited States | Professional Services | |
|
TheHomeMag NorCal
N0n USUnited States
|
N0n | USUnited States | Retail & E-Commerce | |
|
WEPOS Chemie
Lamashtu DEGermany
|
Lamashtu | DEGermany | Manufacturing | |
|
Westrock Coffee
Helix USUnited States
|
Helix | USUnited States | Retail & E-Commerce | |
|
Xylanpicks
N0n USUnited States
|
N0n | USUnited States | — | |
|
51Ridge (Newark NJ hosting/IT)
N0n USUnited States
|
N0n | USUnited States | Technology | |
|
Asensus Surgical
Dark project USUnited States
|
Dark project | USUnited States | Healthcare | |
|
Aveva
Mimori GBUnited Kingdom
|
Mimori | GBUnited Kingdom | Manufacturing | |
|
Beach Eye Medical Group
Dark project USUnited States
|
Dark project | USUnited States | Healthcare |
About this database
This database records 23,574 ransomware victims disclosed by threat groups on their leak sites, from 2024 to 2026. It covers 180 countries and 21 industry sectors.
Ransomware groups publish victim names on Tor-hosted leak sites, typically when an organisation refuses to pay. Aggregating those disclosures gives security teams and researchers a view of who is being targeted, by whom, and how that changes over time. Records come from the ransomware.live API.
The most active groups are Qilin, Akira, Thegentlemen, Play and Incransom, together responsible for 6,985 listings — about 30% of the total. The most affected country is United States with 10,136 victims.
Frequently asked questions
How many ransomware victims are tracked in this database?
The database currently tracks 23,574 ransomware victims across 180 countries. Data is sourced from ransomware group leak sites and updated several times a day.
Which ransomware group has the most victims?
Qilin is currently the most prolific ransomware group with 2,426 tracked victims. Other highly active groups include Akira, Thegentlemen, Play, Incransom.
Which country has the most ransomware victims?
United States has the most ransomware victims with 10,136 recorded attacks, followed by Germany, Canada, United Kingdom.
What sectors are most targeted by ransomware?
The most targeted sectors are Business Services, Manufacturing, Technology, Healthcare, Financial Services. These sectors hold sensitive data and face strong pressure to restore operations quickly.
Can I filter victims by ransomware group or country?
Yes. Use the filters above the table to narrow results by ransomware group, country, sector or year. Every group and every country also has its own profile page listing all of its recorded victims.