Recent Breaches › Attack methods › Ransomware

Attack method

Ransomware

Ransomware attacks encrypt a victim’s systems and steal data, demanding payment to decrypt and to prevent the stolen data from being published.

30849tracked breaches

Groups using this method

LockBit 3347 Qilin 2209 Akira 1556 clop 1343 Play 1302 INC Ransom 952 The Gentlemen 920 ransomhub 841 alphv 727 DragonForce 649 SafePay 554 blackbasta 522 medusa 515 bianlian 507 8base 448 lynx 416 everest 399 conti 351 lockbit5 350 dispossessor 344 nightspire 323 pysa 308 hunters 305 killsec 284

+323 more groups

rhysida 278 sinobi 274 cactus 247 royal 211 hive 208 ransomhouse 206 coinbasecartel 192 stormous 190 fog 189 vicesociety 188 devman 183 blacksuit 183 Nova 180 babuk2 178 worldleaks 175 handala 172 funksec 171 cloak 166 apt73 158 ShinyHunters 154 spacebears 152 blackbyte 147 avaddon 146 meow 144 malas 144 snatch 142 sarcoma 141 The Gentlemen 133 ragnarlocker 128 SilentRansomGroup 127 noescape 124 interlock 121 raworld 120 krybit 119 toufan 117 pear 115 direwolf 115 ElDorado 112 genesis 111 monti 110 payoutsking 109 arcusmedia 108 anubis 108 cuba 103 Deadlock 97 kairos 95 threeam 90 abyss 90 revil 89 ransomexx 84 medusalocker 83 chaos 79 warlock 78 lorenz 78 cicada3301 75 payload 74 karakurt 74 beast 71 avoslocker 70 BrainCipher 68 ransomed 68 quantum 68 blacklock 64 lv 63 flocker 58 settra 57 darkvault 55 losttrust 53 gunra 52 maze 51 termite 49 tengu 49 trigona 49 AiLock 48 nitrogen 48 mallox 48 knight 47 insomnia 46 Orova 46 crypto24 46 midas 44 Global Secret Group 43 cmdorganization 43 donutleaks 42 Crpx0 41 blackshrantac 41 J 41 blacknevas 40 embargo 40 metaencryptor 39 securotrop 39 dragonransomware 39 darkleakmarket 39 m3rx 37 CRPxO 37 ciphbit 36 helldown 36 nokoyawa 36 arvinclub 35 spook 35 Storm 34 moneymessage 34 lamashtu 34 obscura 33 dAn0n 33 Dark Project 32 global 32 suncrypt 32 marketo 32 blackmatter 32 aurora 31 alphalocker 30 frag 30 Coinbase Cartel 29 payloadbin 29 L Group 28 onyx 28 Majinahanashi 27 bravox 26 underground 26 werewolves 26 kelvinsecurity 26 netwalker 26 titan 25 lapsus$ 25 fulcrumsec 25 vect 25 kraken 25 morpheus 23 doppelpaymer 23 radar 22 ryuk 22 unsafe 21 daixin 21 xinglocker 21 hellcat 20 leaktheanalyst 20 Leakeddata 19 cephalus 19 siegedsec 19 ralord 19 brotherhood 18 d4rk4rmy 18 trinity 18 mountlocker 18 ALP-001 17 sabbath 17 Panzer 16 Booba Project 16 AuditTeam 16 ExfilSquad 16 tridentlocker 16 datacarry 16 dunghill 16 apos 16 madliberator 16 redransomware 16 mosesstaff 16 azroteam 15 cheers 15 nefilim 15 blackwater 14 benzona 14 weyhro 14 kawa4096 14 freecivilian 14 sparta 14 Section9 13 argonauts 13 mindware 13 blackout 12 shadowbyt3$ 12 IMNCrew 12 teamxxx 12 kazu 11 Icarus 11 icefire 11 cryp70n1c0d3 11 crazyhunter 10 darkrace 10 darkpower 10 darkside 10 Black X 9 LeakBazaar 9 rook 9 groove 9 Helix 8 xpl0itrs 8 skira 8 radiant 8 VanHelsing 8 qiulong 8 mogilevich 8 cryptbb 8 babuk 8 Emperador 7 Barracuda 7 Wallstreet 7 Doommageddon 7 bert 7 chort 7 malekteam 7 0mega 7 cyclops 7 karma 7 pay2key 7 The Crew 6 DYSPHOR1A 6 netrunner 6 cipherforce 6 RunSomeWares 6 arkana 6 silent 6 rancoz 6 dataleak 6 redalert 6 yanluowang 6 egregor 6 Space Bears 5 ms13089 5 Gammax 5 PrinzEugen 5 ULose 5 0day Syndicate 5 secpo 5 orca 5 atomsilo 5 minteye 5 kryptos 5 bqtlock 5 GDLockerSec 5 ValenciaLeaks 5 donex 5 raznatovic 5 projectrelic 5 pandora 5 lockdata 5 Booba Team 4 exitium 4 linkc 4 desolator 4 satanlockv2 4 ransomcortex 4 shaoleaks 4 blacktor 4 Iah647 3 iah6477 3 Ethics 3 orion 3 Triple X 3 D1R 3 mnt6 3 TiMc 3 yurei 3 rebornvc 3 bluebox 3 vanirgroup 3 hellogookie 3 trisec 3 noname 3 vendetta 3 ragnarok 3 blackshadow 3 bonacigroup 3 grief 3 snake 3 coldlock 3 Arcus Media 2 nasirsecurity 2 Eclipse 2 Sovcali 2 Leaknet 2 3am 2 BlueWhale 2 cry0 2 Blackfield 2 Redact 2 kittykatkrew 2 osiris 2 lunalock 2 sensayq 2 cryptnet 2 bitlocker 2 nightsky 2 wastedlocker 2 sekhmet 2 prolock 2 Cyberleek 1 Audit Team 1 Securotop 1 Ms13-089 1 Kyber 1 sicarii 1 reynolds 1 walocker 1 secp0 1 playboy 1 zerotolerance 1 insane 1 ranstreet 1 crosslock 1 slug 1 memedusalockerdusa 1 blogxx 1 roadsweep 1 la_piovra 1 robinhood 1 macaw 1 deathkitty 1 zeppelin 1 networm 1 maui 1 astroteam 1 phoenixcryptolocker 1 synack 1 ronggolawe 1 cring 1 hades 1 netflim 1 agelocker 1 thanos 1 dharma 1 mamba 1

Breaches using Ransomware

January 27, 2026HIGH

zHealthEHR — Practice Management Software for Chiropractic & Wellness Clinics Listed by kazu Ransomware Group

kazu Ransomware

January 26, 2026HIGH

Aegis Project Controls Listed by dragonforce Ransomware Group

DragonForce Ransomware

January 26, 2026HIGH

Mills Products Listed by qilin Ransomware Group

Qilin Ransomware

January 26, 2026HIGH

Rocky Mountain Associated Physicians Listed by pear Ransomware Group

pear Ransomware

January 26, 2026HIGH

freidarothman.com Listed by safepay Ransomware Group

SafePay Ransomware

January 26, 2026HIGH

cnltai.com Listed by devman Ransomware Group

devman Ransomware

January 26, 2026HIGH

Unisoft Communications Listed by akira Ransomware Group

Akira Ransomware

January 26, 2026HIGH

Goodmanagement Listed by genesis Ransomware Group

genesis Ransomware

January 26, 2026HIGH

Atlantic National Trust Listed by pear Ransomware Group

pear Ransomware

January 26, 2026HIGH

consultaegis.com Listed by devman Ransomware Group

devman Ransomware

January 26, 2026HIGH

***vandenberg.com Listed by devman Ransomware Group

devman Ransomware

January 25, 2026HIGH

BIDAIAK BANOA S.L. Listed by nightspire Ransomware Group

nightspire Ransomware

January 25, 2026HIGH

KCDWORLDWIDE.COM Listed by clop Ransomware Group

clop Ransomware

January 25, 2026HIGH

EXCELAS1.COM Listed by clop Ransomware Group

clop Ransomware

January 25, 2026HIGH

The Successful Match Listed by nightspire Ransomware Group

nightspire Ransomware

January 25, 2026HIGH

Centrotherm International Listed by qilin Ransomware Group

Qilin Ransomware

January 25, 2026HIGH

CENTAURPRODUCTS.COM Listed by clop Ransomware Group

clop Ransomware

January 25, 2026HIGH

GENESYSSPINE.COM Listed by clop Ransomware Group

clop Ransomware

January 25, 2026HIGH

Enviro-Hub Holdings Listed by insomnia Ransomware Group

insomnia Ransomware

January 25, 2026HIGH

HILTON.COM Listed by clop Ransomware Group

clop Ransomware

January 25, 2026HIGH

ONYXEQUITIES.COM Listed by clop Ransomware Group

clop Ransomware

January 25, 2026HIGH

BR-ALSETH.NO Listed by clop Ransomware Group

clop Ransomware

January 25, 2026HIGH

WEATHER.COM Listed by clop Ransomware Group

clop Ransomware

January 25, 2026HIGH

MCMATHLAW.COM Listed by clop Ransomware Group

clop Ransomware

Showing 6,201–6,250 of 30,849

‹ Prev 1…123 124 125 126 127…617 Next ›

Per page25 50 75 100

Check your exposure

See if your email turned up in any breach we track — free.

Check if you’re exposed →

Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.

Ransomware

Groups using this method

Breaches using Ransomware

Connor Co Listed by nitrogen Ransomware Group

newkirklaw.com Listed by incransom Ransomware Group

nbccministries.org Listed by incransom Ransomware Group

Gallagher Transport International Listed by sinobi Ransomware Group

Morison Insurance Brokers Listed by sinobi Ransomware Group

skyegtours.com Listed by tengu Ransomware Group

Callagy Law Firm Listed by incransom Ransomware Group

QualiChem Metalworking Listed by nitrogen Ransomware Group

lenotech.com.ph Listed by tengu Ransomware Group

COMPAGNIE FONCIÈRE PARISIENNE Listed by tengu Ransomware Group

Active Green + Ross Listed by sinobi Ransomware Group

Ashcraft Listed by sinobi Ransomware Group

FIAMPACK Listed by sinobi Ransomware Group

FRUIT-BONTÉ Agroalimentaire Listed by tengu Ransomware Group

Deatak Listed by play Ransomware Group

Two River Group Holdings LLC Listed by SilentRansomGroup Ransomware Group

sitoy.com Listed by abyss Ransomware Group

Disuelas JC SAS Listed by tengu Ransomware Group

Prince & Schmidt LLP Listed by nightspire Ransomware Group

Tele Plus Listed by play Ransomware Group

Global Parts & Maintenance Listed by genesis Ransomware Group

premmotors.com Listed by tengu Ransomware Group

Jakarta Nanyang School Listed by tengu Ransomware Group

namico.go.ke Listed by tengu Ransomware Group

Uniflex Technology Inc Listed by incransom Ransomware Group

The Trevino Group, Inc Listed by incransom Ransomware Group

zHealthEHR — Practice Management Software for Chiropractic & Wellness Clinics Listed by kazu Ransomware Group

Aegis Project Controls Listed by dragonforce Ransomware Group

Mills Products Listed by qilin Ransomware Group

Rocky Mountain Associated Physicians Listed by pear Ransomware Group

freidarothman.com Listed by safepay Ransomware Group

c*n**lta**i*.com Listed by devman Ransomware Group

Unisoft Communications Listed by akira Ransomware Group

Goodmanagement Listed by genesis Ransomware Group

Atlantic National Trust Listed by pear Ransomware Group

consultaegis.com Listed by devman Ransomware Group

***vandenberg.com Listed by devman Ransomware Group

BIDAIAK BANOA S.L. Listed by nightspire Ransomware Group

KCDWORLDWIDE.COM Listed by clop Ransomware Group

EXCELAS1.COM Listed by clop Ransomware Group

The Successful Match Listed by nightspire Ransomware Group

Centrotherm International Listed by qilin Ransomware Group

CENTAURPRODUCTS.COM Listed by clop Ransomware Group

GENESYSSPINE.COM Listed by clop Ransomware Group

Enviro-Hub Holdings Listed by insomnia Ransomware Group

HILTON.COM Listed by clop Ransomware Group

ONYXEQUITIES.COM Listed by clop Ransomware Group

BR-ALSETH.NO Listed by clop Ransomware Group

WEATHER.COM Listed by clop Ransomware Group

MCMATHLAW.COM Listed by clop Ransomware Group

cnltai.com Listed by devman Ransomware Group