Threat map

Ransomware worldwide

Ransomware victims publicly claimed on extortion leak sites, mapped by country over the last 90 days.

layer:
last 90 days
recent victims
100
active groups
26
most-hit country
🇺🇸 US
Latest victims
  • 🇺🇸Benchmark Industrial Supplyplay · Business ServicesJun 26
  • 🇺🇸callhorton.comincransom · Business ServicesJun 26
  • 🇺🇸johndufourlaw.comincransom · Business ServicesJun 26
  • 🇺🇸theswansonlawgroup.comincransom · Business ServicesJun 26
  • 🇦🇺NSW Rural Fire Servicenova · Public SectorJun 26
  • 🇨🇷Clínica La Sabanapayload · HealthcareJun 26
  • 🇹🇷Software Argepayload · TechnologyJun 26
  • 🇨🇭Mosaic Partnerspayload · Business ServicesJun 26
  • 🇩🇪ingerman.comchaos · Business ServicesJun 26
  • 🇨🇱HokuaAiLock · Not FoundJun 26
  • 🇮🇳vslmarinenova · Transportation/LogisticsJun 26
  • 🇮🇳Kohinoor Millscmdorganization · ManufacturingJun 26
  • 🇺🇸Precise Formsakira · Business ServicesJun 26
  • 🇩🇴politur.gob.dokrybit · Public SectorJun 25
  • 🇨🇦Clearview Eye Centreinterlock · HealthcareJun 25
  • 🇺🇸roofdepot.comchaos · ConstructionJun 25
Most-hit countries
🇺🇸 United States of America25
🇩🇪 Germany5
🇮🇳 India5
🇨🇦 Canada5
🇨🇭 Switzerland3
🇵🇪 Peru3
🇧🇷 Brazil3
🇦🇺 Australia2
Most active groups
nova 16qilin 9Icarus 9incransom 8akira 8payload 7cmdorganization 7stormous 5

source: ransomware.live — victims claimed on leak sites. Country = victim HQ. · updated 6/27/2026