RANSOMWARE
Ransomware groups
216 tracked leak-site groups · 16,066 claimed victims
Ransomware extortion groups tracked from their data-leak sites, ranked by claimed-victim volume and cross-linked to the ATT&CK groups they map to.
⚠
Active groups
216 shown
2043 victims
lockbit3
1006 victims
lockbit2
963 victims
ransomhub
873 victims
play
756 victims
alphv
609 victims
bianlian
477 victims
clop
449 victims
blackbasta
411 victims
8base
375 victims
cactus
351 victims
akira
333 victims
conti
308 victims
hunters
307 victims
pysa
253 victims
incransom
244 victims
lynx
239 victims
everest
223 victims
qilin
209 victims
rhysida
207 victims
hiveleak
199 victims
medusa
192 victims
royal
176 victims
blacksuit
174 victims
vicesociety
157 victims
killsecurity
155 victims
ransomhouse
146 victims
snatch
146 victims
ragroup
142 victims
avaddon
139 victims
blackbyte
128 victims
FOG
123 victims
ragnarlocker
123 victims
noescape
114 victims
bashe
112 victims
lockbit3_fs
111 victims
monti
104 victims
cuba
103 victims
dragonforce
97 victims
stormous
87 victims
arcusmedia
80 victims
abyss
80 victims
handala
77 victims
lorenz
75 victims
ransomedvc
74 victims
karakurt
73 victims
spacebears
73 victims
eldorado
67 victims
quantum
63 victims
lv
61 victims
ransomexx
55 victims
trigona
55 victims
threeam
55 victims
darkvault
55 victims
flocker
53 victims
mallox
53 victims
losttrust
48 victims
meow
47 victims
ransomblog_noname
45 victims
cicada3301
44 victims
midas
44 victims
donutleaks
41 victims
revil
39 victims
arvinclub
39 victims
darkleakmarket
38 victims
cloak
38 victims
kairos
37 victims
knight
36 victims
nokoyawa
35 victims
spook
35 victims
nitrogen
33 victims
helldown
32 victims
marketo
32 victims
dAn0n
32 victims
braincipher
31 victims
blackmatter
30 victims
suncrypt
29 victims
payloadbin
28 victims
onyx
28 victims
ciphbit
28 victims
dispossessor
26 victims
kelvinsecurity
26 victims
embargo
25 victims
sarcoma
24 victims
metaencryptor
23 victims
lockbit3_cronos
23 victims
underground
23 victims
termite
22 victims
moneymessage
22 victims
trinity
21 victims
xinglocker
20 victims
avoslocker
20 victims
leaktheanalyst
20 victims
daixin
20 victims
werewolves
19 victims
siegedsec
16 victims
sabbath
16 victims
mosesstaff
16 victims
sparta
16 victims
redransomware
15 victims
cheers
15 victims
dunghill_leak
15 victims
apt73
14 victims
freecivilian
13 victims
groove
13 victims
mindware
12 victims
alphalocker
11 victims
cryp70n1c0d3
11 victims
icefire
10 victims
nefilim
10 victims
unsafeleak
10 victims
blackout
9 victims
rook
9 victims
darkrace
9 victims
hellcat
8 victims
cryptbb
8 victims
malekteam
8 victims
mogilevich
8 victims
qiulong
8 victims
madliberator
8 victims
nullbulge
7 victims
karma
7 victims
0mega
6 victims
babuk
6 victims
pay2key
6 victims
yanluowang
6 victims
redalert
6 victims
dataleak
6 victims
rancoz
5 victims
lockdata
5 victims
blacktor
5 victims
pandora
5 victims
projectrelic
5 victims
donex
5 victims
orca
4 victims
atomsilo
4 victims
shaoleaks
4 victims
malas
4 victims
ransomblog_noname2
4 victims
ransomcortex
4 victims
interlock
3 victims
blackshadow
3 victims
bonacigroup
3 victims
vendetta
3 victims
hellogookie
3 victims
pryx
3 victims
vanirgroup
2 victims
ragnarok
2 victims
nightsky
2 victims
cryptnet
2 victims
sensayq
1 victims
robinhood
1 victims
crosslock
1 victims
insane
1 victims
slug
0 victims
synack
0 victims
grief
0 victims
darkside
0 victims
netwalker
0 victims
doppelpaymer
0 victims
maze
0 victims
mount-locker
0 victims
aztroteam
0 victims
haron
0 victims
prometheus
0 victims
ako
0 victims
avos
0 victims
lolnek
0 victims
crylock
0 victims
ech0raix
0 victims
ep918
0 victims
exorcist
0 victims
hades
0 victims
hellokitty
0 victims
hotarus
0 victims
lockbit
0 victims
mbc
0 victims
mydecryptor
0 victims
n3tworm
0 victims
nemty
0 victims
onepercent
0 victims
prolock
0 victims
qlocker
0 victims
ranzy
0 victims
vfokx
0 victims
xinof
0 victims
RAMP
0 victims
entropy
0 victims
cooming
0 victims
aGl0bGVyCg
0 victims
unknown
0 victims
rransom
0 victims
babyduck
0 victims
dread
0 victims
againstthewest
0 victims
holyghost
0 victims
ransomcartel
0 victims
adminlocker
0 victims
sugar
0 victims
zeon
0 victims
ranion
0 victims
x001xs
0 victims
darkangels
0 victims
bluesky
0 victims
solidbit
0 victims
lilith
0 victims
diavol
0 victims
chilelocker
0 victims
dagonlocker
0 victims
nevada
0 victims
0xFFF
0 victims
darkbit01
0 victims
darkpower
0 victims
shadow
0 victims
lambda
0 victims
trisec_cyberoutlaw
0 victims
C3RB3R
◆
Recent claimed victims
60 latest
play
NF Stroth & Associates
play
Jasper Products
rhysida
CNPC USA
handala
TBN Israel Hacked
handala
Israel’s fuel supply system Data
play
S&H Express
play
Rollex
play
Project Partners
play
NPD Products
handala
099 ISP Hacked
handala
Y.G. New Idan Hacked
handala
Israel’s fuel supply system Hacked
handala
Israel’s fuel supply system Hacked
handala
Aerodreams Hacked
flocker
Ajmanre.gov.ae
incransom
alleray-labrouste
spacebears
AP Lettering
incransom
Mount Rogers Community Services
play
Homestead Gardens
play
Community Choice Credit Union
ransomhouse
EUC Sjlland
rhysida
Hudson River Housing
incransom
waiwhetu-medical-centre
incransom
Nunez Dental
incransom
MTTEXPERTISES.COM
incransom
Kittery Police Department
play
Triumph Construction
play
Ebac
flocker
A*****e.gov.ae
incransom
iscamen
flocker
Lts.com.vn
metaencryptor
https://devimco.com/
incransom
cemeteries.local
incransom
Funktel GmbH
play
Sorter Construction
play
Rochon
incransom
Sandhills Medical Foundation
kairos
Jericho Fire Department
play
FLOE Internationa
play
Capital Trade
ransomhouse
Vinda Group
blacksuit
http://www.kcac.com
incransom
valuestoreit
incransom
Universidad Técnica del Norte Ecuador
flocker
Dcsdev.org
flocker
Trustgrp.ae
incransom
sitro.com.au
incransom
mysfa.org
play
W.E. Bowers
play
Tri-Point Solutions
play
Anchor Industries
arcusmedia
STANDBYTE
arcusmedia
Acorn Sales
lockbit3
geruestba
ransomblog_noname
UnigazJordan
embargo
M&H Electric Fabricators
incransom
Jordan Drug
blacksuit
http://www.innsofaurora.com
blacksuit
http://metromont.com
ransomblog_noname
Mulia Raya