Threat Intel — Live Ransomware Tracker

All-Time Tracked

32,146 victims across 403 tracked groups

Last 30 Days

850 attacks disclosed

Data refreshed hourly — last pulled Sep 28, 2026 6:53pm UTC

By Group

Top 10 ransomware groups

thegentlemen 98

qilin 79

akira 39

krybit 34

incransom 32

settra 30

safepay 29

AuditTeam 29

Storm 26

ZaWoo 25

Show full group ranking (79)

#1 thegentlemen 98

#2 qilin 79

#3 akira 39

#4 krybit 34

#5 incransom 32

#6 settra 30

#7 safepay 29

#8 AuditTeam 29

#9 Storm 26

#10 ZaWoo 25

#11 lockbit5 23

#12 emperador 21

#13 direwolf 20

#14 SilentRansomGroup 18

#15 Panzer 18

#16 metaencryptor 17

#17 Wallstreet 17

#18 Vexy Ransomware 16

#19 play 15

#20 N0n 15

#21 medusalocker 13

#22 everest 12

#23 dragonforce 12

#24 BrainCipher 12

#25 rhysida 10

#26 nightspire 10

#27 threeam 9

#28 shinyhunters 8

#29 Booba Project 8

#30 pear 7

#31 chaos 7

#32 insomnia 7

#33 arcusmedia 6

#34 anubis 6

#35 Global Secret Group 6

#36 Eclipse 6

#37 aurora 6

#38 interlock 5

#39 EndZone 5

#40 spacebears 5

#41 Dark Project 5

#42 Doommageddon 4

#43 Barracuda 4

#44 termite 4

#45 Spirals 4

#46 unsafe 4

#47 Orova 4

#48 ransomhouse 4

#49 ShadowByt3$ 4

#50 BlackLocks 3

#51 kairos 3

#52 DYSPHOR1A 3

#53 Black X 3

#54 Falcon 3

#55 payoutsking 2

#56 ImNotAVillain 2

#57 titan 2

#58 bravox 2

#59 securotrop 2

#60 blacknevas 2

#61 genesis 2

#62 global 2

#63 fulcrumsec 2

#64 clop 2

#65 kazu 2

#66 gunra 2

#67 payload 1

#68 m3rx 1

#69 secp0 1

#70 moneymessage 1

#71 cry0 1

#72 Gammax 1

#73 killsec 1

#74 iah6477 1

#75 beast 1

#76 embargo 1

#77 tridentlocker 1

#78 majinahanashi 1

#79 crypto24 1

Distribution

Group share of attacks

850attacks

thegentlemen11.5%

qilin9.3%

akira4.6%

krybit4%

incransom3.8%

settra3.5%

safepay3.4%

AuditTeam3.4%

Other56.5%

By Sector

Top 10 sectors

Manufacturing 149

Technology 102

Professional Services 100

Not Found 91

Healthcare 79

Other 77

Retail & E-Commerce 52

Financial Services 40

Transportation 33

Education 32

Recent Activity

Most recently disclosed attacks in this range

Organization Sector / Country Group Discovered

safescaffolding.net Manufacturing · GB threeam Sep 28, 2026 6:53pm UTC

coosalud.com Healthcare · CO threeam Sep 28, 2026 6:52pm UTC

pistonespersan.com.ar Manufacturing · AR threeam Sep 28, 2026 6:52pm UTC

midwestbit.com Technology · US threeam Sep 28, 2026 6:51pm UTC

apexus.com Technology · US threeam Sep 28, 2026 6:50pm UTC

bhn-expertise.com Professional Services · DE threeam Sep 28, 2026 6:50pm UTC

stjames.wa.edu.au Education · AU threeam Sep 28, 2026 6:49pm UTC

Goodrich Logistics Transportation · Doommageddon Sep 28, 2026 6:46pm UTC

Chem Process Systems Pvt. Ltd. Manufacturing · IN Doommageddon Sep 28, 2026 6:46pm UTC

Starr Whitehouse Landscape Architects Professional Services · US play Sep 28, 2026 6:33pm UTC

This data reflects publicly disclosed ransomware activity. Cyber Insights presents it purely for public awareness — to make the scale and pace of ransomware activity tangible, not to sell any product or service.

Data source: Ransomware.live

Ransomware & Cyberattack Threat Intel

Top 10 ransomware groups

Group share of attacks

Top 10 sectors

Most recently disclosed attacks in this range