Ransomware Radar

Ransomware group activity, victim claims & targeting intelligence

Live feed

Global activity overview

Victim claims published by ransomware groups on dark web leak sites, aggregated and refreshed twice daily. Track which groups are active, who they target and where.

3,536 Victim claims tracked

891 Last 30 days

65 Active groups

126 Countries targeted

Victim claims · last 12 weeks 2,219

31 May 16 Aug

Showing 1–3 of 3 victim claims Updated twice daily

Deadlock 25 Jul 2026

KeNHA

kenha.co.ke

The Kenya National Highways Authority (KeNHA) agency responsible for the construction, management, and maintenance of national highways (classes S, A, and B) in Kenya.

🇰🇪 Kenya Government & Defense

krybit 01 May 2026

bomuhospital.org

Bomu Hospital is a social enterprise dedicated to providing access to quality healthcare for all individuals, regardless...

🇰🇪 Kenya Healthcare

apt73 27 Apr 2026

ifmis.go.ke

Integrated Financial Management Information System (IFMIS) is a government system in Kenya that i...

🇰🇪 Kenya Public Sector

Most Active Groups

30 days

1 thegentlemen 136 2 qilin 130 3 clop 89 4 incransom 40 5 Global Secret Group 36 6 CRPxO 31 7 safepay 30 8 krybit 24

Targeted Sectors

30 days

Manufacturing 138

Technology 117

Professional Services 93

Healthcare 82

Other 76

Financial Services 57

Retail & E-Commerce 50

Agriculture and Food Production 32

About This Radar

Source

Victim claims are published by ransomware groups on dark web leak sites and may be unverified. Data is aggregated from ransomware.live and refreshed twice daily by ShellCodeX.