LiveBreach Intelligence: data breaches, leaks & ransomware, tracked as they surfaceOngoing protection: GalaxyWarden →

Recent BreachesData breach tracker

Newsletter Free scan

Recent Breaches › Attack methods › Ransomware

Attack method

Ransomware

Ransomware attacks encrypt a victim’s systems and steal data, demanding payment to decrypt and to prevent the stolen data from being published.

32591tracked breaches

Groups using this method

LockBit 3415 Qilin 2367 Akira 1631 Clop 1368 Play 1327 The Gentlemen 1027 INC Ransom 995 RansomHub 833 ALPHV 727 DragonForce 668 SafePay 603 Black Basta 522 Medusa 515 BianLian 507 8Base 448 Everest 420 Lynx 415 NightSpire 369 Conti 351 Dispossessor 344 PYSA 308 Hunters 305 Rhysida 301 KillSec 285

+334 more groups

Sinobi 274 Cactus 247 RansomHouse 217 Coinbase Cartel 213 Royal 211 Hive 208 Stormous 190 Fog 189 Vice Society 188 Devman 183 BlackSuit 183 Nova 180 Babuk2 178 World Leaks 175 ShinyHunters 172 Handala 172 FunkSec 170 Cloak 166 Krybit 164 SilentRansomGroup 163 Space Bears 157 APT73 156 BlackByte 147 Avaddon 146 Meow 144 Malas 144 Snatch 142 Direwolf 141 Sarcoma 141 Interlock 139 Ragnar Locker 128 Pear 126 NoEscape 124 Genesis 122 RA World 120 Anubis 117 Arcus Media 117 Payoutsking 117 Storm 113 Monti 110 Toufan 110 ElDorado 109 Settra 108 Deadlock 106 Kairos 103 Cuba 103 Medusalocker 102 Threeam 101 Chaos 98 BrainCipher 91 Abyss 91 Revil 89 Ransomexx 84 Warlock 78 Lorenz 78 Payload 76 Cicada3301 75 N0n 74 Beast 74 Karakurt 74 Avoslocker 70 Ransomed 68 Quantum 68 Blacklock 64 Lv 63 Metaencryptor 61 Termite 61 Orova 60 Insomnia 58 Flocker 58 AuditTeam 56 Global Secret Group 55 Darkvault 55 Gunra 54 Losttrust 53 Maze 51 AiLock 50 Tengu 49 Trigona 49 Leakeddata 48 Lamashtu 48 Blacknevas 48 Nitrogen 48 Mallox 48 Aurora 47 Crypto24 47 Knight 47 Dark Project 46 M3rx 45 Midas 44 Cmdorganization 43 Donutleaks 42 Panzer 41 Securotrop 41 Embargo 41 Crpx0 41 Blackshrantac 41 J 41 Majinahanashi 39 Emperador 39 Dragonransomware 39 Darkleakmarket 39 Global 38 Moneymessage 37 CRPxO 37 Ciphbit 36 Helldown 36 Nokoyawa 36 Arvinclub 35 Spook 35 Obscura 33 dAn0n 33 Booba Project 32 Suncrypt 32 Marketo 32 Blackmatter 32 Zawoo 31 Bravox 30 Alphalocker 30 Frag 30 Payloadbin 29 Wallstreet 28 Fulcrumsec 28 L Group 28 Onyx 28 Titan 27 Unsafe 26 Kazu 26 Werewolves 26 Kelvinsecurity 26 Netwalker 26 Lapsus$ 25 Vect 25 Kraken 25 Underground 25 Morpheus 24 ShadowByt3$ 23 Doppelpaymer 23 Radar 22 Ryuk 22 Daixin 21 Xinglocker 21 Black X 20 Vexy Ransomware 20 Hellcat 20 Leaktheanalyst 20 Vexy 19 Booba Team 19 Cephalus 19 Siegedsec 19 Ralord 19 Brotherhood 18 D4rk4rmy 18 Trinity 18 Mountlocker 18 Eclipse 17 Tridentlocker 17 ALP-001 17 Sabbath 17 ExfilSquad 16 Datacarry 16 Dunghill 16 Apos 16 Madliberator 16 Redransomware 16 Mosesstaff 16 Doommageddon 15 Azroteam 15 Cheers 15 Nefilim 15 VYPR 14 Benzona 14 Weyhro 14 Kawa4096 14 Freecivilian 14 Sparta 14 Barracuda 13 Section9 13 Argonauts 13 Mindware 13 Netrunner 12 3am 12 Blackout 12 IMNCrew 12 Teamxxx 12 Imnotavillian 11 Blackwater 11 Icarus 11 Icefire 11 Cryp70n1c0d3 11 DYSPHOR1A 10 Crazyhunter 10 Darkrace 10 Darkpower 10 Darkside 10 Umbra 9 Byod 9 LeakBazaar 9 Rook 9 Groove 9 EndZone 8 Gammax 8 Iah6477 8 Iah647 8 Helix 8 Xpl0itrs 8 Skira 8 Radiant 8 VanHelsing 8 Qiulong 8 Mogilevich 8 Cryptbb 8 Babuk 8 RunSomeWares 7 Global Cybernetic Collective 7 Bert 7 Chort 7 Malekteam 7 0mega 7 Cyclops 7 Karma 7 Pay2key 7 ULose 6 The Crew 6 Ms13089 6 Cipherforce 6 Arkana 6 Silent 6 Rancoz 6 Dataleak 6 Redalert 6 Yanluowang 6 Egregor 6 Redact 5 Exitium 5 Cry0 5 Spirals 5 Nasirsecurity 5 PrinzEugen 5 0day Syndicate 5 Secpo 5 Orca 5 Atomsilo 5 Minteye 5 Kryptos 5 Bqtlock 5 GDLockerSec 5 ValenciaLeaks 5 Donex 5 Raznatovic 5 Projectrelic 5 Pandora 5 Lockdata 5 Shiba 4 Linkc 4 Desolator 4 Satanlockv2 4 Ransomcortex 4 Shaoleaks 4 Blacktor 4 Falcon 3 Ethics 3 Orion 3 Triple X 3 D1R 3 Mnt6 3 TiMc 3 Yurei 3 Rebornvc 3 Bluebox 3 Vanirgroup 3 Hellogookie 3 Trisec 3 Noname 3 Vendetta 3 Ragnarok 3 Blackshadow 3 Bonacigroup 3 Grief 3 Snake 3 Coldlock 3 BlackLocks 2 ImNotAVillain 2 Secp0 2 Sovcali 2 Leaknet 2 BlueWhale 2 Blackfield 2 Kittykatkrew 2 Osiris 2 Lunalock 2 Sensayq 2 Cryptnet 2 Bitlocker 2 Nightsky 2 Wastedlocker 2 Sekhmet 2 Prolock 2 Scarlettgroup 1 Meowciety403 1 Abyss-data 1 Securotop 1 Kyber 1 Sicarii 1 Reynolds 1 Walocker 1 Gunra Ransomware 1 Playboy 1 Zerotolerance 1 Insane 1 Ranstreet 1 Crosslock 1 Slug 1 Memedusalockerdusa 1 Blogxx 1 Roadsweep 1 La Piovra 1 Robinhood 1 Macaw 1 Deathkitty 1 Zeppelin 1 Networm 1 Maui 1 Astroteam 1 Synack 1 Phoenixcryptolocker 1 Ronggolawe 1 Cring 1 Hades 1 Netflim 1 Agelocker 1 Thanos 1 Dharma 1 Mamba 1

Breaches using Ransomware

December 31, 2025HIGH

Universidad Nacional Autónoma de México Listed by RansomHub Ransomware Group

RansomHub Ransomware

December 31, 2025HIGH

Hunneman Listed by Interlock Ransomware Group

Interlock Ransomware

December 31, 2025HIGH

Luminex Software Listed by Qilin Ransomware Group

Qilin Ransomware

December 31, 2025HIGH

BNZ Materials Listed by Qilin Ransomware Group

Qilin Ransomware

December 31, 2025HIGH

TaLachaim Listed by Qilin Ransomware Group

Qilin Ransomware

December 31, 2025HIGH

Options Listed by Lynx Ransomware Group

Lynx Ransomware

December 31, 2025HIGH

3GH Informatica Integral Listed by INC Ransom Ransomware Group

INC Ransom Ransomware

December 31, 2025HIGH

Z-Tronix Listed by Qilin Ransomware Group

Qilin Ransomware

December 31, 2025HIGH

Quasar Listed by Qilin Ransomware Group

Qilin Ransomware

December 30, 2025HIGH

ManageMyHealth - New Zealand Listed by Kazu Ransomware Group

Kazu Ransomware

December 30, 2025HIGH

collinscomputing.com Listed by lockbit5 Ransomware Group

LockBit Ransomware

December 30, 2025HIGH

OSI Systems, Inc. Listed by INC Ransom Ransomware Group

INC Ransom Ransomware

December 30, 2025HIGH

Stewart Engenharia Listed by The Gentlemen Ransomware Group

The Gentlemen Ransomware

December 30, 2025HIGH

esopdirect.com Listed by lockbit5 Ransomware Group

LockBit Ransomware

December 30, 2025HIGH

Yource Bulgaria & Greece Listed by Crypto24 Ransomware Group

Crypto24 Ransomware

December 30, 2025HIGH

Fitzpatrickhotels.com Listed by Cloak Ransomware Group

Cloak Ransomware

December 30, 2025HIGH

drogales.com.br Listed by lockbit5 Ransomware Group

LockBit Ransomware

December 30, 2025HIGH

Auforum AG Listed by Qilin Ransomware Group

Qilin Ransomware

December 30, 2025HIGH

eroselevators.com Listed by lockbit5 Ransomware Group

LockBit Ransomware

December 30, 2025HIGH

Falk, Waas, Hernandez, Cortina, Solomon & Bonner Overview Metrics Listed by Rhysida Ransomware Group

Rhysida Ransomware

December 29, 2025HIGH

INHA University Listed by Gunra Ransomware Group

Gunra Ransomware

December 29, 2025HIGH

Saudi Icon Listed by Kazu Ransomware Group

Kazu Ransomware

December 29, 2025HIGH

labayenylaborde.com Listed by lockbit5 Ransomware Group

LockBit Ransomware

December 29, 2025HIGH

klax.de Listed by lockbit5 Ransomware Group

LockBit Ransomware

December 29, 2025HIGH

ipu.co.il Listed by SafePay Ransomware Group

SafePay Ransomware

December 29, 2025HIGH

estrumar.es Listed by SafePay Ransomware Group

SafePay Ransomware

December 29, 2025HIGH

samkee.com Listed by lockbit5 Ransomware Group

LockBit Ransomware

December 29, 2025HIGH

NK Technologies Listed by DragonForce Ransomware Group

DragonForce Ransomware

December 29, 2025HIGH

Genoa Lakes Listed by Play Ransomware Group

Play Ransomware

December 29, 2025HIGH

Burnex Listed by DragonForce Ransomware Group

DragonForce Ransomware

December 29, 2025HIGH

SEACSUB S.p.a. Listed by Qilin Ransomware Group

Qilin Ransomware

December 29, 2025HIGH

Sintac Recycling Listed by Qilin Ransomware Group

Qilin Ransomware

December 29, 2025HIGH

APC Home Health Service Listed by Nova Ransomware Group

Nova Ransomware

December 29, 2025HIGH

Grupo Hafesa Listed by Qilin Ransomware Group

Qilin Ransomware

December 29, 2025HIGH

precisionaluminum.ca Listed by SafePay Ransomware Group

SafePay Ransomware

December 29, 2025HIGH

C&r Electric Listed by Play Ransomware Group

Play Ransomware

December 29, 2025HIGH

setex-textil.de Listed by SafePay Ransomware Group

SafePay Ransomware

December 29, 2025HIGH

Cape Fear Country Club Listed by INC Ransom Ransomware Group

INC Ransom Ransomware

December 29, 2025HIGH

davidrosenbakerysupply.com Listed by SafePay Ransomware Group

SafePay Ransomware

December 29, 2025HIGH

knightgroup.co.uk Listed by SafePay Ransomware Group

SafePay Ransomware

December 29, 2025HIGH

usdaw.org.uk Listed by SafePay Ransomware Group

SafePay Ransomware

December 29, 2025HIGH

Lakeside Title Company Listed by Play Ransomware Group

Play Ransomware

December 29, 2025HIGH

investigacionesmedicas.com Listed by SafePay Ransomware Group

SafePay Ransomware

December 29, 2025HIGH

sproutnet.com Listed by SafePay Ransomware Group

SafePay Ransomware

December 29, 2025HIGH

Willowdale Steeplechase Listed by Qilin Ransomware Group

Qilin Ransomware

December 28, 2025HIGH

Questica Listed by Qilin Ransomware Group

Qilin Ransomware

December 28, 2025HIGH

WiZiX Technology Group Listed by Play Ransomware Group

Play Ransomware

December 28, 2025HIGH

klingele Listed by INC Ransom Ransomware Group

INC Ransom Ransomware

December 28, 2025HIGH

Atalian Listed by Qilin Ransomware Group

Qilin Ransomware

December 28, 2025HIGH

omrania Listed by INC Ransom Ransomware Group

INC Ransom Ransomware

December 28, 2025HIGH

selp Listed by INC Ransom Ransomware Group

INC Ransom Ransomware

December 28, 2025HIGH

Seac Listed by Qilin Ransomware Group

Qilin Ransomware

December 28, 2025HIGH

sharinc.org Listed by Devman Ransomware Group

Devman Ransomware

December 28, 2025HIGH

surfishtrade.com Listed by lockbit5 Ransomware Group

LockBit Ransomware

December 28, 2025HIGH

Bibi Gate: The Gatekeeper’s Fall | Tzachi Braverman Listed by Handala Ransomware Group

Handala Ransomware

December 28, 2025HIGH

Braverman Files Unleashed: Every Secret Now Exposed Listed by Handala Ransomware Group

Handala Ransomware

December 27, 2025HIGH

Netanyahu’s Cabinet Awaits Handala’s Next Move Listed by Handala Ransomware Group

Handala Ransomware

December 27, 2025HIGH

studioelad.it Listed by SafePay Ransomware Group

SafePay Ransomware

December 27, 2025HIGH

oppornity***.org Listed by Devman Ransomware Group

Devman Ransomware

December 27, 2025HIGH

Neurological Associates Listed by DragonForce Ransomware Group

DragonForce Ransomware

December 27, 2025HIGH

VALLEREDONDO Listed by Morpheus Ransomware Group

Morpheus Ransomware

December 27, 2025HIGH

Jennings SD Listed by Devman Ransomware Group

Devman Ransomware

December 27, 2025HIGH

debralmorrison.com Listed by SafePay Ransomware Group

SafePay Ransomware

December 27, 2025HIGH

vanvenrooy.com Listed by SafePay Ransomware Group

SafePay Ransomware

December 27, 2025HIGH

Centro Médico Palafox Listed by DragonForce Ransomware Group

DragonForce Ransomware

December 27, 2025HIGH

Caramel Listed by DragonForce Ransomware Group

DragonForce Ransomware

December 27, 2025HIGH

larosadelmonte.com Listed by SafePay Ransomware Group

SafePay Ransomware

December 27, 2025HIGH

Dom Development Listed by Qilin Ransomware Group

Qilin Ransomware

December 27, 2025HIGH

BMW Guatemala Listed by DragonForce Ransomware Group

DragonForce Ransomware

December 27, 2025HIGH

wadzeck-stiftung.de Listed by SafePay Ransomware Group

SafePay Ransomware

December 27, 2025HIGH

heatcel.co.uk Listed by SafePay Ransomware Group

SafePay Ransomware

December 27, 2025HIGH

ryc.org Listed by SafePay Ransomware Group

SafePay Ransomware

December 27, 2025HIGH

Typhoo Tea Listed by Qilin Ransomware Group

Qilin Ransomware

December 27, 2025HIGH

Barnes & Jones Listed by DragonForce Ransomware Group

DragonForce Ransomware

December 26, 2025HIGH

MP Filtri Listed by Play Ransomware Group

Play Ransomware

Showing 8,551–8,625 of 32,591

‹ Prev 1…113 114 115 116 117…435 Next ›

Per page25 50 75 100

Check your exposure

See if your email turned up in any breach we track — free.

Check if you’re exposed →

Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.