Ransomware Threat Intelligence
Real-time ransomware threat monitoring with comprehensive victim tracking, active group analysis, and cybersecurity intelligence from authentic sources.
Victim Intelligence
Latest verified victim disclosures and statistics
15870
Total Verified Victims
0
Reported Incidents
6
Active Groups Tracked
Recent Victim Disclosures
Last 10 reported| Organization | Group | Country | Discovered | Status |
|---|---|---|---|---|
|
TBN Israel Hacked
|
handala | Unknown | 2025-06-16 | Active |
|
CNPC USA
|
rhysida | Unknown | 2025-06-16 | Active |
|
Jasper Products
|
play | Unknown | 2025-06-16 | Active |
|
NF Stroth & Associates
|
play | Unknown | 2025-06-16 | Active |
|
S&H Express
|
play | Unknown | 2025-06-15 | Active |
|
Israel’s fuel supply system Data
|
handala | Unknown | 2025-06-15 | Active |
|
Israel’s fuel supply system Hacked
|
handala | Unknown | 2025-06-14 | Active |
|
NPD Products
|
play | Unknown | 2025-06-14 | Active |
|
Y.G. New Idan Hacked
|
handala | Unknown | 2025-06-14 | Active |
|
099 ISP Hacked
|
handala | Unknown | 2025-06-14 | Active |
Global Threat Intelligence Map
Interactive visualization of ransomware activity worldwide
Threat Intelligence Analytics
Geographic and sector distribution of ransomware incidents
Top Affected Countries
| Rank | Country | % of Total |
|---|---|---|
| 1 | United States | 41.1% |
| 2 | United Kingdom | 21.4% |
| 3 | Germany | 16.1% |
| 4 | France | 14.1% |
| 5 | Spain | 4.8% |
| 6 | Italy | 1.7% |
| 7 | Netherlands | 0.8% |
Top Affected Sectors
| Rank | Industry Sector | % of Total |
|---|---|---|
| 1 | Technology | 18.6% |
| 2 | Education | 16.4% |
| 3 | Healthcare | 11.7% |
| 4 | Legal | 11.4% |
| 5 | Financial | 11.1% |
| 6 | Energy | 10.6% |
| 7 | Construction | 8.0% |
| 8 | Transportation | 5.6% |
| 9 | Manufacturing | 4.2% |
| 10 | Retail | 2.4% |
Most Active Ransomware Groups
Top threat actors by victim count
Kuiper
Kuiper is a ransomware group tracked by RansomLook. This group conducts ransomware operations and maintains a data leak site for victim extortion.
Teamxxx
Teamxxx is a ransomware group tracked by RansomLook. This group conducts ransomware operations and maintains a data leak site for victim extortion.
Deathransom
Deathransom is a ransomware group tracked by RansomLook. This group conducts ransomware operations and maintains a data leak site for victim extortion...
Mydata
Mydata is a ransomware group tracked by RansomLook. This group conducts ransomware operations and maintains a data leak site for victim extortion.
Darkbit
Darkbit is a ransomware variant with 1 sample ransom notes in our database.
Abyss-Data
Abyss-Data is a ransomware group tracked by RansomLook. This group conducts ransomware operations and maintains a data leak site for victim extortion.
Latest Cybersecurity News
Recent ransomware and cybersecurity incidents
Startup Spotlight: Twine Security Tackles the Execution Gap
The company, one of four finalists in this year's Black Hat USA Startup Spotlight competition, uses multi-agent system t...
AI-Assisted Supply Chain Attack Targets GitHub
PRT-scan is the second in recent months where a threat actor appears to have leveraged AI for automated targeting of a w...
Axios Attack Shows Social Complex Engineering Is Industrialized
The attack on the popular NPM package Axios is just one of many targeting maintainers and has shone a light on how threa...
Fortinet Issues Emergency Patch for FortiClient Zero-Day
The authentication bypass flaw, tracked as CVE-2026-35616, is the latest in a series of Fortinet vulnerabilities that ha...
Automated Credential Harvesting Campaign Exploits React2Shell Flaw
An emerging threat cluster tracked as UAT-10608 is exploiting vulnerable Web-exposed Next.js apps and using an automated...
Shadow AI in Healthcare Is Here to Stay
Medical professionals are not going to stop using AI tools to manage growing workloads. Organizations should prioritize ...