Ransomware victims in country

Geolocation accuracy disclaimer
Only countries with 50 or more victims in the Ransomware.live database are listed here.
Victim locations are resolved using a combination of public business registry APIs, OpenStreetMap/Nominatim, and AI-assisted lookup via Claude (Anthropic). While we strive for accuracy, geolocation data may be incomplete or imprecise — coordinates typically represent a company's registered headquarters, which may differ from the actual site affected by the attack. The progress bar reflects the share of victims successfully located, not the confidence level of each individual result.