LiveBreach Intelligence: data breaches, leaks & ransomware, tracked as they surfaceOngoing protection: GalaxyWarden →

Recent BreachesData breach tracker

Newsletter Free scan

Recent Breaches › Attack methods › Ransomware

Attack method

Ransomware

Ransomware attacks encrypt a victim’s systems and steal data, demanding payment to decrypt and to prevent the stolen data from being published.

30855tracked breaches

Groups using this method

LockBit 3347 Qilin 2210 Akira 1558 clop 1343 Play 1302 INC Ransom 952 The Gentlemen 920 ransomhub 841 alphv 727 DragonForce 649 SafePay 554 blackbasta 522 medusa 515 bianlian 507 8base 448 lynx 416 everest 399 conti 351 lockbit5 350 dispossessor 344 nightspire 323 pysa 308 hunters 305 killsec 284

+323 more groups

rhysida 278 sinobi 274 cactus 247 royal 211 hive 208 ransomhouse 206 coinbasecartel 192 stormous 190 fog 189 vicesociety 188 devman 183 blacksuit 183 Nova 180 babuk2 178 worldleaks 175 handala 172 funksec 171 cloak 166 apt73 158 ShinyHunters 154 spacebears 152 blackbyte 147 avaddon 146 meow 144 malas 144 snatch 142 sarcoma 141 The Gentlemen 133 ragnarlocker 128 SilentRansomGroup 127 noescape 124 interlock 121 raworld 120 krybit 119 toufan 117 pear 115 direwolf 115 ElDorado 112 genesis 111 monti 110 Payoutsking 109 arcusmedia 108 anubis 108 cuba 103 Deadlock 99 kairos 95 threeam 90 abyss 90 revil 89 ransomexx 84 medusalocker 83 chaos 79 warlock 78 lorenz 78 cicada3301 75 payload 74 karakurt 74 Beast 72 avoslocker 70 BrainCipher 68 ransomed 68 quantum 68 blacklock 64 lv 63 flocker 58 settra 57 darkvault 55 losttrust 53 gunra 52 maze 51 termite 49 tengu 49 trigona 49 AiLock 48 nitrogen 48 mallox 48 knight 47 insomnia 46 Orova 46 crypto24 46 midas 44 Global Secret Group 43 cmdorganization 43 donutleaks 42 Crpx0 41 blackshrantac 41 J 41 blacknevas 40 embargo 40 Metaencryptor 39 securotrop 39 dragonransomware 39 darkleakmarket 39 m3rx 37 CRPxO 37 ciphbit 36 helldown 36 nokoyawa 36 arvinclub 35 spook 35 Storm 34 moneymessage 34 lamashtu 34 obscura 33 dAn0n 33 Dark Project 32 global 32 suncrypt 32 marketo 32 blackmatter 32 aurora 31 alphalocker 30 frag 30 Coinbase Cartel 29 payloadbin 29 L Group 28 onyx 28 Majinahanashi 27 bravox 26 underground 26 werewolves 26 kelvinsecurity 26 netwalker 26 titan 25 lapsus$ 25 fulcrumsec 25 vect 25 kraken 25 morpheus 23 doppelpaymer 23 radar 22 ryuk 22 unsafe 21 daixin 21 xinglocker 21 hellcat 20 leaktheanalyst 20 Leakeddata 19 cephalus 19 siegedsec 19 ralord 19 brotherhood 18 d4rk4rmy 18 trinity 18 mountlocker 18 ALP-001 17 sabbath 17 Booba Project 16 Panzer 16 AuditTeam 16 ExfilSquad 16 tridentlocker 16 datacarry 16 dunghill 16 apos 16 madliberator 16 redransomware 16 mosesstaff 16 azroteam 15 cheers 15 nefilim 15 blackwater 14 benzona 14 weyhro 14 kawa4096 14 freecivilian 14 sparta 14 Section9 13 argonauts 13 mindware 13 blackout 12 ShadowByt3$ 12 IMNCrew 12 teamxxx 12 kazu 11 Icarus 11 icefire 11 cryp70n1c0d3 11 crazyhunter 10 darkrace 10 darkpower 10 darkside 10 Black X 9 LeakBazaar 9 rook 9 groove 9 Helix 8 xpl0itrs 8 skira 8 radiant 8 VanHelsing 8 qiulong 8 mogilevich 8 cryptbb 8 babuk 8 Barracuda 7 Emperador 7 Wallstreet 7 Doommageddon 7 bert 7 chort 7 malekteam 7 0mega 7 cyclops 7 karma 7 pay2key 7 The Crew 6 DYSPHOR1A 6 netrunner 6 cipherforce 6 RunSomeWares 6 arkana 6 silent 6 rancoz 6 dataleak 6 redalert 6 yanluowang 6 egregor 6 Space Bears 5 ms13089 5 Gammax 5 PrinzEugen 5 ULose 5 0day Syndicate 5 secpo 5 orca 5 atomsilo 5 minteye 5 kryptos 5 bqtlock 5 GDLockerSec 5 ValenciaLeaks 5 donex 5 raznatovic 5 projectrelic 5 pandora 5 lockdata 5 Booba Team 4 exitium 4 linkc 4 desolator 4 satanlockv2 4 ransomcortex 4 shaoleaks 4 blacktor 4 Iah647 3 iah6477 3 Ethics 3 orion 3 Triple X 3 D1R 3 mnt6 3 TiMc 3 yurei 3 rebornvc 3 bluebox 3 vanirgroup 3 hellogookie 3 trisec 3 noname 3 vendetta 3 ragnarok 3 blackshadow 3 bonacigroup 3 grief 3 snake 3 coldlock 3 Arcus Media 2 nasirsecurity 2 Eclipse 2 Sovcali 2 Leaknet 2 3am 2 BlueWhale 2 cry0 2 Blackfield 2 Redact 2 kittykatkrew 2 osiris 2 lunalock 2 sensayq 2 cryptnet 2 bitlocker 2 nightsky 2 wastedlocker 2 sekhmet 2 prolock 2 Cyberleek 1 Audit Team 1 Securotop 1 Ms13-089 1 Kyber 1 sicarii 1 reynolds 1 walocker 1 secp0 1 playboy 1 zerotolerance 1 insane 1 ranstreet 1 crosslock 1 slug 1 memedusalockerdusa 1 blogxx 1 roadsweep 1 la_piovra 1 robinhood 1 macaw 1 deathkitty 1 zeppelin 1 networm 1 maui 1 astroteam 1 phoenixcryptolocker 1 synack 1 ronggolawe 1 cring 1 hades 1 netflim 1 agelocker 1 thanos 1 dharma 1 mamba 1

Breaches using Ransomware

January 15, 2025HIGH

boginmunns.com Listed by qilin Ransomware Group

Qilin Ransomware

January 15, 2025HIGH

wieso-cert Listed by qilin Ransomware Group

Qilin Ransomware

January 15, 2025HIGH

Daniel Island Club Listed by play Ransomware Group

Play Ransomware

January 14, 2025HIGH

ttucorp.com Listed by cactus Ransomware Group

cactus Ransomware

January 14, 2025HIGH

kinseysinc.com Listed by cactus Ransomware Group

cactus Ransomware

January 14, 2025HIGH

Riverina Medical Listed by incransom Ransomware Group

INC Ransom Ransomware

January 14, 2025HIGH

Solaris Pharma Listed by everest Ransomware Group

everest Ransomware

January 14, 2025HIGH

Kinseth Hospitality Companies Listed by lynx Ransomware Group

lynx Ransomware

January 14, 2025HIGH

Intelservice.com Listed by ransomhub Ransomware Group

ransomhub Ransomware

January 14, 2025HIGH

Sharm Reef Hotel Listed by spacebears Ransomware Group

spacebears Ransomware

January 14, 2025HIGH

bluai.ai Listed by funksec Ransomware Group

funksec Ransomware

January 14, 2025HIGH

Buttery (butterycompany.com) Listed by fog Ransomware Group

January 14, 2025HIGH

Wynnewood High School Listed by 8base Ransomware Group

8base Ransomware

January 14, 2025HIGH

branchgroup.com Listed by cactus Ransomware Group

cactus Ransomware

January 14, 2025HIGH

Moraviakov s.r.o. Listed by 8base Ransomware Group

8base Ransomware

January 14, 2025HIGH

Gebäudereinigungsakademie Listed by 8base Ransomware Group

8base Ransomware

January 14, 2025HIGH

DURAYDUNCAN.COM Listed by clop Ransomware Group

clop Ransomware

January 14, 2025HIGH

Indus Towers Listed by medusa Ransomware Group

medusa Ransomware

January 14, 2025HIGH

AVI Southeast Listed by medusa Ransomware Group

medusa Ransomware

January 14, 2025HIGH

Boart & Wire Listed by sarcoma Ransomware Group

sarcoma Ransomware

January 14, 2025HIGH

The Chicano Federation Listed by rhysida Ransomware Group

rhysida Ransomware

January 14, 2025HIGH

solge.es Listed by safepay Ransomware Group

SafePay Ransomware

January 14, 2025HIGH

brunetti.com Listed by safepay Ransomware Group

SafePay Ransomware

January 14, 2025HIGH

nutripack.eu Listed by safepay Ransomware Group

SafePay Ransomware

January 14, 2025HIGH

Black , Bashor & Porsch Listed by SilentRansomGroup Ransomware Group

SilentRansomGroup Ransomware

January 14, 2025HIGH

Shea Barclay Group Listed by SilentRansomGroup Ransomware Group

SilentRansomGroup Ransomware

January 14, 2025HIGH

udb.net Listed by ransomhub Ransomware Group

ransomhub Ransomware

January 14, 2025HIGH

QualiTech (qualitech.com) Listed by lynx Ransomware Group

lynx Ransomware

January 14, 2025HIGH

bigotti.ro Listed by safepay Ransomware Group

SafePay Ransomware

January 14, 2025HIGH

Plymouth Foam Listed by play Ransomware Group

Play Ransomware

January 14, 2025HIGH

Bring Solution Listed by 8base Ransomware Group

8base Ransomware

January 14, 2025HIGH

KWS Listed by play Ransomware Group

Play Ransomware

January 14, 2025HIGH

SciTech Services, Inc. Listed by fog Ransomware Group

January 14, 2025HIGH

Klehr Harrison Harvey Branzburg Listed by SilentRansomGroup Ransomware Group

SilentRansomGroup Ransomware

January 14, 2025HIGH

Douglas County, GA (DDCWSA.COM) Listed by lynx Ransomware Group

lynx Ransomware

January 14, 2025HIGH

Erie Management Group, LLC Listed by qilin Ransomware Group

Qilin Ransomware

January 13, 2025HIGH

Castle Rock ConstructionCompany Listed by akira Ransomware Group

Akira Ransomware

January 13, 2025HIGH

Castle Rock Construction Company Listed by akira Ransomware Group

Akira Ransomware

January 13, 2025HIGH

linxe.com Listed by funksec Ransomware Group

funksec Ransomware

January 13, 2025HIGH

mi.edu Listed by ransomhub Ransomware Group

ransomhub Ransomware

January 13, 2025HIGH

Browdy (bl.local) Listed by lynx Ransomware Group

lynx Ransomware

January 13, 2025HIGH

Welcomehallmission.com Listed by everest Ransomware Group

everest Ransomware

January 13, 2025HIGH

PT PINS Indonesia Listed by dragonforce Ransomware Group

DragonForce Ransomware

January 13, 2025HIGH

Nash Brothers Construction Listed by bianlian Ransomware Group

bianlian Ransomware

January 13, 2025HIGH

ROCK SOLID Stabilization & Reclamation Listed by play Ransomware Group

Play Ransomware

January 13, 2025HIGH

zapopan.gob.mx Listed by funksec Ransomware Group

funksecbabuk2 Ransomware

January 13, 2025HIGH

telering.de Listed by lockbit3 Ransomware Group

LockBit Ransomware

January 13, 2025HIGH

kuzstu-nf.ru Listed by funksec Ransomware Group

funksec Ransomware

January 13, 2025HIGH

mymobileforms app Listed by funksec Ransomware Group

funksec Ransomware

January 13, 2025HIGH

Aurora Public Schools (aurorak12.org) Listed by fog Ransomware Group

January 12, 2025HIGH

Thilges & Bernhardt, Attorneys at Law Listed by qilin Ransomware Group

Qilin Ransomware

January 12, 2025HIGH

wissenhive.com Listed by funksec Ransomware Group

funksec Ransomware

January 12, 2025HIGH

Galvatech Listed by qilin Ransomware Group

Qilin Ransomware

January 12, 2025HIGH

millerwoodtradepub.com Listed by incransom Ransomware Group

INC Ransom Ransomware

January 12, 2025HIGH

Étude Bordet Listed by datacarry Ransomware Group

datacarry Ransomware

January 12, 2025HIGH

Wannemacher Enterprises Inc Listed by qilin Ransomware Group

Qilin Ransomware

January 11, 2025HIGH

pleasantsconstruction.com Listed by qilin Ransomware Group

Qilin Ransomware

January 11, 2025HIGH

seocommarrakech.com Listed by funksec Ransomware Group

funksec Ransomware

January 11, 2025HIGH

COROB Listed by hunters Ransomware Group

hunters Ransomware

January 11, 2025HIGH

EKOMERCIO.COM Listed by clop Ransomware Group

clop Ransomware

January 11, 2025HIGH

www.townofbourne.com Listed by ransomhub Ransomware Group

ransomhub Ransomware

January 11, 2025HIGH

T. Hasegawa USA Listed by hunters Ransomware Group

hunters Ransomware

January 11, 2025HIGH

Barber Specialties Listed by hunters Ransomware Group

hunters Ransomware

January 11, 2025HIGH

Costex Listed by hunters Ransomware Group

hunters Ransomware

January 11, 2025HIGH

Patriarche Office of Architecture Listed by hunters Ransomware Group

hunters Ransomware

January 11, 2025HIGH

oyolasvegas.com Listed by lockbit3 Ransomware Group

LockBit Ransomware

January 11, 2025HIGH

TEDOM Listed by hunters Ransomware Group

hunters Ransomware

January 11, 2025HIGH

Unisource Information Services Listed by hunters Ransomware Group

hunters Ransomware

January 11, 2025HIGH

RocSearch Listed by hunters Ransomware Group

hunters Ransomware

January 10, 2025HIGH

xtremmedia.com Listed by ransomhub Ransomware Group

ransomhub Ransomware

January 10, 2025HIGH

Qualinet Listed by rhysida Ransomware Group

rhysida Ransomware

January 10, 2025HIGH

Evidn Listed by everest Ransomware Group

everest Ransomware

January 10, 2025HIGH

Capesesp Listed by akira Ransomware Group

Akira Ransomware

January 10, 2025HIGH

Thomas J. Henry Law Listed by akira Ransomware Group

Akira Ransomware

January 10, 2025HIGH

www.wisesocon.com Listed by ransomhub Ransomware Group

ransomhub Ransomware

January 10, 2025HIGH

amerplumb.com Listed by ransomhub Ransomware Group

ransomhub Ransomware

January 10, 2025HIGH

Sheyenne Tooling & Manufacturing Listed by sarcoma Ransomware Group

sarcoma Ransomware

January 10, 2025HIGH

Metalmatrix Clamps Listed by akira Ransomware Group

Akira Ransomware

January 10, 2025HIGH

EVAS Group Listed by blacklock Ransomware Group

blacklockElDorado Ransomware

January 10, 2025HIGH

californiaclingpeaches.com Listed by incransom Ransomware Group

INC Ransom Ransomware

January 10, 2025HIGH

Menway Listed by akira Ransomware Group

Akira Ransomware

January 10, 2025HIGH

WorldNet Telecommunications LLC Listed by akira Ransomware Group

Akira Ransomware

January 9, 2025HIGH

platinumcollision.com Listed by safepay Ransomware Group

SafePay Ransomware

January 9, 2025HIGH

Rent-2-Own Listed by medusa Ransomware Group

medusa Ransomware

January 9, 2025HIGH

pnp.co.za Listed by apt73 Ransomware Group

apt73 Ransomware

January 9, 2025HIGH

Old NationalEvents Plaza Listed by akira Ransomware Group

Akira Ransomware

January 9, 2025HIGH

biagibros.com Listed by cactus Ransomware Group

cactusclop Ransomware

January 9, 2025HIGH

Fukoku Co. Ltd. Listed by spacebears Ransomware Group

spacebears Ransomware

January 9, 2025HIGH

mindev.gov.gr Listed by funksec Ransomware Group

funksec Ransomware

January 9, 2025HIGH

depewgillen.com Listed by incransom Ransomware Group

INC Ransom Ransomware

January 9, 2025HIGH

gags.gov.eg Listed by funksec Ransomware Group

funksec Ransomware

January 9, 2025HIGH

castlehillha.co.uk Listed by ransomhub Ransomware Group

ransomhub Ransomware

January 9, 2025HIGH

drive-lines.com Listed by ransomhub Ransomware Group

ransomhub Ransomware

January 9, 2025HIGH

communisis.com & paragon.world Listed by lynx Ransomware Group

lynx Ransomware

January 9, 2025HIGH

ddelta.com.mx Listed by safepay Ransomware Group

SafePay Ransomware

January 9, 2025HIGH

ctntelco.com Listed by kraken Ransomware Group

kraken Ransomware

January 9, 2025HIGH

carc.gov.jo Listed by funksec Ransomware Group

funksecbabuk2 Ransomware

January 9, 2025HIGH

alansarioman.com Listed by embargo Ransomware Group

embargo Ransomware

January 9, 2025HIGH

Permoda Listed by akira Ransomware Group

Akira Ransomware

January 8, 2025HIGH

JKC Australia LNG Listed by qilin Ransomware Group

Qilin Ransomware

Showing 14,401–14,500 of 30,855

‹ Prev 1…143 144 145 146 147…309 Next ›

Per page25 50 75 100

Check your exposure

See if your email turned up in any breach we track — free.

Check if you’re exposed →

Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.