Ransomware Radar

Ransomware group activity, victim claims & targeting intelligence

Live feed

Global activity overview

Victim claims published by ransomware groups on dark web leak sites, aggregated and refreshed twice daily. Track which groups are active, who they target and where.

3,536 Victim claims tracked

891 Last 30 days

65 Active groups

126 Countries targeted

Victim claims · last 12 weeks 2,219

31 May 16 Aug

Showing 1–4 of 4 victim claims Updated twice daily

qilin 18 Jun 2026

Skupina Don Don - GRUPO BIMBO

www.dondon.si

🇸🇮 Slovenia Agriculture and Food Production

qilin 04 Jun 2026

SKUPINA Don Don

www.dondon.si

🇸🇮 Slovenia

coinbasecartel 11 May 2026

Jozef Stefan Institute (IJS)

ijs.si

[AI generated] Jozef Stefan Institute (IJS) is Slovenia's leading research institution, headquartered in Ljubljana. It operates across multiple scientific disciplines inc...

🇸🇮 Slovenia Education

incransom 03 Apr 2026

Infonet Media d.o.o.

infonet.fm

Infonet Media d.o.o. (infonet.fm) is a media company based in Slovenia that operates one of the largest radio networks in the country. It brings together several popular...

🇸🇮 Slovenia Technology

Most Active Groups

30 days

1 thegentlemen 136 2 qilin 130 3 clop 89 4 incransom 40 5 Global Secret Group 36 6 CRPxO 31 7 safepay 30 8 krybit 24

Targeted Sectors

30 days

Manufacturing 138

Technology 117

Professional Services 93

Healthcare 82

Other 76

Financial Services 57

Retail & E-Commerce 50

Agriculture and Food Production 32

About This Radar

Source

Victim claims are published by ransomware groups on dark web leak sites and may be unverified. Data is aggregated from ransomware.live and refreshed twice daily by ShellCodeX.