Ransomware Threat Intelligence
Real-time ransomware threat monitoring with comprehensive victim tracking, active group analysis, and cybersecurity intelligence from authentic sources.
Victim Intelligence
Latest verified victim disclosures and statistics
15870
Total Verified Victims
0
Reported Incidents
6
Active Groups Tracked
Recent Victim Disclosures
Last 10 reported| Organization | Group | Country | Discovered | Status |
|---|---|---|---|---|
|
TBN Israel Hacked
|
handala | Unknown | 2025-06-16 | Active |
|
CNPC USA
|
rhysida | Unknown | 2025-06-16 | Active |
|
Jasper Products
|
play | Unknown | 2025-06-16 | Active |
|
NF Stroth & Associates
|
play | Unknown | 2025-06-16 | Active |
|
S&H Express
|
play | Unknown | 2025-06-15 | Active |
|
Israel’s fuel supply system Data
|
handala | Unknown | 2025-06-15 | Active |
|
Israel’s fuel supply system Hacked
|
handala | Unknown | 2025-06-14 | Active |
|
NPD Products
|
play | Unknown | 2025-06-14 | Active |
|
Y.G. New Idan Hacked
|
handala | Unknown | 2025-06-14 | Active |
|
099 ISP Hacked
|
handala | Unknown | 2025-06-14 | Active |
Global Threat Intelligence Map
Interactive visualization of ransomware activity worldwide
Threat Intelligence Analytics
Geographic and sector distribution of ransomware incidents
Top Affected Countries
| Rank | Country | % of Total |
|---|---|---|
| 1 | United States | 41.1% |
| 2 | United Kingdom | 21.4% |
| 3 | Germany | 16.1% |
| 4 | France | 14.1% |
| 5 | Spain | 4.8% |
| 6 | Italy | 1.7% |
| 7 | Netherlands | 0.8% |
Top Affected Sectors
| Rank | Industry Sector | % of Total |
|---|---|---|
| 1 | Technology | 18.6% |
| 2 | Education | 16.4% |
| 3 | Healthcare | 11.7% |
| 4 | Legal | 11.4% |
| 5 | Financial | 11.1% |
| 6 | Energy | 10.6% |
| 7 | Construction | 8.0% |
| 8 | Transportation | 5.6% |
| 9 | Manufacturing | 4.2% |
| 10 | Retail | 2.4% |
Most Active Ransomware Groups
Top threat actors by victim count
Kuiper
Kuiper is a ransomware group tracked by RansomLook. This group conducts ransomware operations and maintains a data leak site for victim extortion.
Teamxxx
Teamxxx is a ransomware group tracked by RansomLook. This group conducts ransomware operations and maintains a data leak site for victim extortion.
Deathransom
Deathransom is a ransomware group tracked by RansomLook. This group conducts ransomware operations and maintains a data leak site for victim extortion...
Mydata
Mydata is a ransomware group tracked by RansomLook. This group conducts ransomware operations and maintains a data leak site for victim extortion.
Darkbit
Darkbit is a ransomware variant with 1 sample ransom notes in our database.
Abyss-Data
Abyss-Data is a ransomware group tracked by RansomLook. This group conducts ransomware operations and maintains a data leak site for victim extortion.
Latest Cybersecurity News
Recent ransomware and cybersecurity incidents
Startup Spotlight: Twine Security Tackles the Execution Gap
The company, one of four finalists in this year's Black Hat USA Startup Spotlight competition, uses multi-agent system t...
FCC Softens Ban on Foreign-Made Routers
The Federal Communications Commission eased some restrictions and pushed back deadlines for foreign router manufacturers...
Tech Can't Stop These Threats — Your People Can
Security controls can do only so much. Here are four attacks where your employees are usually your first, and only, line...
'Dirty Frag' Exploit Poised to Blow Up on Enterprise Linux Distros
The privilege escalation vulnerability, which is similar to other Linux flaws like Copy Fail and Dirty Pipe, may already...
Hackers Use AI for Exploit Development, Attack Automation
Cyber adversaries have long used AI, but now attackers are using large language models to develop exploits and orchestra...
Cyber Espionage Group Targets Aviation Firms to Steal Map Data
The campaign quietly compromises aerospace and drone operators to exfiltrate GIS files, terrain models, and GPS data and...