Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us

Ransomware Statistics

Total victims
33302
all time
Total groups
412
active
Countries hit
190
overall

Sector Activity since Jan 1, 2026

Manufacturing 1479
Manufacturing
  • Jan141
  • Feb154
  • Mar170
  • Apr150
  • May131
  • Jun113
  • Jul152
  • Aug182
  • Sep148
  • Oct138
  • Nov0
  • Dec0
Jan Oct
Professional Services 1387
Professional Services
  • Jan97
  • Feb130
  • Mar126
  • Apr189
  • May190
  • Jun140
  • Jul175
  • Aug136
  • Sep99
  • Oct105
  • Nov0
  • Dec0
Jan Oct
Technology 1102
Technology
  • Jan117
  • Feb124
  • Mar127
  • Apr98
  • May87
  • Jun75
  • Jul126
  • Aug155
  • Sep94
  • Oct99
  • Nov0
  • Dec0
Jan Oct
Healthcare 779
Healthcare
  • Jan49
  • Feb72
  • Mar64
  • Apr79
  • May70
  • Jun55
  • Jul85
  • Aug116
  • Sep82
  • Oct107
  • Nov0
  • Dec0
Jan Oct
Retail & E-Commerce 634
Retail & E-Commerce
  • Jan60
  • Feb54
  • Mar62
  • Apr87
  • May62
  • Jun63
  • Jul70
  • Aug73
  • Sep55
  • Oct48
  • Nov0
  • Dec0
Jan Oct
Financial Services 447
Financial Services
  • Jan42
  • Feb55
  • Mar54
  • Apr42
  • May36
  • Jun29
  • Jul50
  • Aug66
  • Sep39
  • Oct34
  • Nov0
  • Dec0
Jan Oct
Transportation 369
Transportation
  • Jan23
  • Feb38
  • Mar29
  • Apr37
  • May35
  • Jun26
  • Jul37
  • Aug44
  • Sep30
  • Oct70
  • Nov0
  • Dec0
Jan Oct
Agriculture And Food Production 327
Agriculture And Food Production
  • Jan24
  • Feb27
  • Mar38
  • Apr35
  • May40
  • Jun38
  • Jul37
  • Aug38
  • Sep25
  • Oct25
  • Nov0
  • Dec0
Jan Oct
Government & Defense 298
Government & Defense
  • Jan30
  • Feb30
  • Mar41
  • Apr32
  • May25
  • Jun27
  • Jul37
  • Aug26
  • Sep27
  • Oct23
  • Nov0
  • Dec0
Jan Oct
Education 290
Education
  • Jan27
  • Feb23
  • Mar31
  • Apr23
  • May29
  • Jun25
  • Jul24
  • Aug26
  • Sep33
  • Oct49
  • Nov0
  • Dec0
Jan Oct
Energy & Utilities 260
Energy & Utilities
  • Jan28
  • Feb19
  • Mar29
  • Apr30
  • May10
  • Jun18
  • Jul35
  • Aug32
  • Sep24
  • Oct35
  • Nov0
  • Dec0
Jan Oct
Hospitality 229
Hospitality
  • Jan21
  • Feb24
  • Mar23
  • Apr20
  • May23
  • Jun21
  • Jul27
  • Aug28
  • Sep20
  • Oct22
  • Nov0
  • Dec0
Jan Oct

Top 10 Groups all time

Top 10 Sectors all time

Victims per Month (2023–2026)

Victims per Quarter (2023–2026)

Cumulative Victims per Month (2023–2026)

Active Ransomware Groups per Year (2023–2026)

Top 15 Countries all time

Victims by Day of Week all time

Sector Distribution per Year in % all time

Group Claim Flows

Link thickness reflects how often one group's claim on a victim was followed by another's. Based on 1,046 victims claimed by 2 or more groups — showing only the top 20 most common paths for readability.

Graph concept by Valéry Rieß-Marchive


New Ransomware Groups in 2026 82 groups

Whitearmor 11 Oct 23 Mimori 2 Oct 20 THE SEVEN DEADLY SINS 8 Oct 16 0x00 1 Oct 15 HYFLOCK 11 Oct 13 Majinahanashi 27 Oct 10 Scarlettgroup 6 Oct 08 UmBra 10 Oct 06 BYOD 9 Oct 05 VYPR 7 Oct 05 ImNotAVillain 2 Sep 24 N0n 164 Sep 18 EndZone 6 Sep 18 Spirals 5 Sep 18 BlackLocks 3 Sep 05 Vexy Ransomware 23 Sep 03 Falcon 6 Aug 30 ZaWoo 25 Aug 30 DYSPHOR1A 11 Aug 20 iah6477 16 Aug 20 Eclipse 20 Aug 16 xpl0itrs 8 Aug 15 BlueWhale 2 Aug 14 Ethics 3 Aug 12 emperador 54 Aug 12 majinahanashi 2 Aug 12 Sovcali 1 Aug 09 L Group 28 Aug 07 Helix 17 Aug 07 Storm 89 Aug 07 Barracuda 14 Aug 06 Panzer 45 Aug 05 orion 14 Aug 05 Dark Project 36 Aug 05 Orova 56 Aug 04 Gammax 7 Jul 30 kyber 1 Jul 30 ExfilSquad 15 Jul 26 Global Secret Group 52 Jul 26 D1R 3 Jul 13 CRPxO 37 Jul 09 Booba Project 47 Jul 06 Doommageddon 18 Jul 06 cry0 5 Jul 06 Blackfield 2 Jun 29 Redact 8 Jun 28 settra 94 Jun 28 Wallstreet 45 Jun 26 Deadlock 109 Jun 15 Triple X 4 Jun 13 ULose 8 Jun 09 Black X 14 Jun 02 0day Syndicate 5 May 28 titan 26 May 18 LeakBazaar 9 May 10 Icarus 12 May 05 PrinzEugen 5 May 04 blackwater 12 May 02 cmdorganization 43 May 02 fulcrumsec 29 May 01 mnt6 3 Apr 30 m3rx 45 Apr 29 aurora 53 Apr 29 lamashtu 54 Apr 13 TiMc 3 Apr 09 AuditTeam 60 Apr 08 krybit 168 Apr 03 netrunner 10 Apr 03 ALP-001 17 Mar 21 exitium 5 Mar 17 Loki 1 Mar 12 AiLock 51 Mar 03 ShadowByt3$ 21 Feb 25 kittykatkrew 2 Feb 23 cipherforce 6 Feb 23 payload 82 Feb 17 reynolds 1 Feb 11 bravox 34 Feb 11 insomnia 53 Feb 07 The Green Blood Group 2 Feb 04 vect 25 Jan 06 sicarii 1 Jan 05

Takedown Requests 2026 onwards

Status Breakdown

Requests by Month


Infostealer Intelligence via HudsonRock

12,133
Exposed Domains
435,702
Compromised Employees
40,788,956
Compromised Users
387,726
Third-Party Credentials

Top Stealer Families

Most Exposed Domains by employees