Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us

Ransomware Statistics — 2022

Total victims
2837
in 2022
Active groups
64
in 2022
Countries hit
66
in 2022

Sector Activity Jan 1 – Dec 31, 2022

Manufacturing 538
Manufacturing
  • Jan33
  • Feb42
  • Mar61
  • Apr60
  • May38
  • Jun30
  • Jul32
  • Aug27
  • Sep33
  • Oct41
  • Nov60
  • Dec81
Jan Dec
Professional Services 408
Professional Services
  • Jan25
  • Feb25
  • Mar48
  • Apr44
  • May32
  • Jun19
  • Jul32
  • Aug21
  • Sep33
  • Oct17
  • Nov41
  • Dec71
Jan Dec
Technology 247
Technology
  • Jan11
  • Feb21
  • Mar19
  • Apr19
  • May22
  • Jun13
  • Jul16
  • Aug20
  • Sep16
  • Oct15
  • Nov22
  • Dec53
Jan Dec
Retail & E-Commerce 236
Retail & E-Commerce
  • Jan17
  • Feb27
  • Mar17
  • Apr24
  • May21
  • Jun12
  • Jul17
  • Aug18
  • Sep17
  • Oct14
  • Nov20
  • Dec32
Jan Dec
Healthcare 187
Healthcare
  • Jan11
  • Feb9
  • Mar16
  • Apr16
  • May14
  • Jun10
  • Jul11
  • Aug11
  • Sep15
  • Oct23
  • Nov19
  • Dec32
Jan Dec
Education 154
Education
  • Jan22
  • Feb10
  • Mar7
  • Apr10
  • May10
  • Jun6
  • Jul4
  • Aug11
  • Sep10
  • Oct10
  • Nov14
  • Dec40
Jan Dec
Financial Services 139
Financial Services
  • Jan12
  • Feb7
  • Mar14
  • Apr14
  • May9
  • Jun3
  • Jul11
  • Aug13
  • Sep10
  • Oct7
  • Nov14
  • Dec25
Jan Dec
Government & Defense 132
Government & Defense
  • Jan9
  • Feb2
  • Mar18
  • Apr20
  • May10
  • Jun8
  • Jul5
  • Aug8
  • Sep13
  • Oct5
  • Nov10
  • Dec24
Jan Dec
Agriculture and Food Production 110
Agriculture and Food Production
  • Jan4
  • Feb6
  • Mar13
  • Apr14
  • May12
  • Jun5
  • Jul8
  • Aug3
  • Sep10
  • Oct9
  • Nov9
  • Dec17
Jan Dec
Transportation 98
Transportation
  • Jan6
  • Feb9
  • Mar9
  • Apr7
  • May13
  • Jun8
  • Jul8
  • Aug1
  • Sep6
  • Oct5
  • Nov6
  • Dec20
Jan Dec
Energy & Utilities 85
Energy & Utilities
  • Jan5
  • Feb3
  • Mar10
  • Apr6
  • May8
  • Jun3
  • Jul6
  • Aug6
  • Sep7
  • Oct6
  • Nov9
  • Dec16
Jan Dec
Hospitality 69
Hospitality
  • Jan4
  • Feb7
  • Mar6
  • Apr7
  • May3
  • Jun2
  • Jul1
  • Aug4
  • Sep10
  • Oct1
  • Nov5
  • Dec19
Jan Dec

Daily Victim Heatmap — 2022

Top 10 Groups

Top 10 Sectors

Victims per Month (2022)

Cumulative Victims (2022)

Top 20 Countries

Victims by Day of Week (2022)

Sector distribution per month in % (2022)

Group Claim Flows

Link thickness reflects how often one group's claim on a victim was followed by another's. Based on 10 victims discovered in 2022 and claimed by 2 or more groups — showing only the top 20 most common paths for readability.

Graph concept by Valéry Rieß-Marchive

New Ransomware Groups in 2022

35
Added Name Victims in 2022 Victims Overall Last Victim
2022-01-01 Leaktheanalyst 20 20 2022-03-29
2022-01-04 Nightsky 2 2 2022-01-04
2022-03-01 Bitlocker 2 2 2022-05-02
2022-03-17 Pandora 5 5 2022-03-30
2022-03-22 Stormous 18 188 2026-06-28
2022-04-01 Kelvinsecurity 26 26 2022-05-24
2022-04-26 Blackbasta 156 523 2025-01-11
2022-04-29 Onyx 28 28 2022-11-21
2022-05-05 Mindware 13 13 2022-05-05
2022-05-29 Cheers 15 15 2022-09-14
2022-06-29 Lockbit3 393 2016 2025-12-05
2022-07-02 Yanluowang 6 6 2022-08-10
2022-07-14 Bianlian 90 552 2025-03-31
2022-07-14 Redalert 6 6 2022-09-22
2022-07-14 0mega 2 7 2024-01-25
2022-07-18 Roadsweep 1 1 2022-07-18
2022-08-03 Daixin 7 21 2025-09-11
2022-08-20 Icefire 11 11 2022-08-20
2022-08-24 Donutleaks 8 42 2024-07-24
2022-09-13 Sparta 14 14 2022-09-22
2022-10-08 Qilin 1 2260 2026-09-04
2022-10-12 Blogxx 1 1 2022-10-12
2022-11-01 Shaoleaks 4 4 2022-11-01
2022-11-04 Royal 88 211 2023-07-19
2022-11-04 Mallox 5 49 2024-07-15
2022-11-11 Projectrelic 5 5 2022-12-18
2022-11-15 Memedusalockerdusa 1 1 2022-11-15
2022-11-15 Medusalocker 20 90 2026-09-02
2022-11-26 Play 36 1308 2026-08-31
2022-12-02 Dataleak 6 6 2022-12-02
2022-12-07 Monti 2 110 2025-05-08
2022-12-09 Nokoyawa 1 36 2023-08-04
2022-12-11 Karakurt 43 74 2023-09-22
2022-12-21 Unsafe 8 22 2026-08-28
2022-12-31 Freecivilian 14 14 2022-12-31