Recent Breaches › Attack methods › Ransomware

Attack method

Ransomware

Ransomware attacks encrypt a victim’s systems and steal data, demanding payment to decrypt and to prevent the stolen data from being published.

32291tracked breaches

Groups using this method

LockBit 3411 Qilin 2346 Akira 1623 Clop 1368 Play 1322 The Gentlemen 983 INC Ransom 983 RansomHub 833 ALPHV 727 DragonForce 663 SafePay 600 Black Basta 522 Medusa 515 BianLian 507 8Base 448 Everest 417 Lynx 415 Conti 351 Dispossessor 344 NightSpire 342 PYSA 308 Hunters 305 Rhysida 295 KillSec 285

+332 more groups

Sinobi 274 Cactus 247 RansomHouse 217 Coinbase Cartel 213 Royal 211 Hive 208 Stormous 190 Fog 189 Vice Society 188 Devman 183 BlackSuit 183 Nova 180 Babuk2 178 World Leaks 175 ShinyHunters 172 Handala 172 FunkSec 170 Cloak 166 Krybit 164 SilentRansomGroup 158 Space Bears 157 APT73 156 BlackByte 147 Avaddon 146 Meow 144 Malas 144 Snatch 142 Direwolf 141 Sarcoma 141 Interlock 131 Ragnar Locker 128 Pear 126 NoEscape 124 Genesis 122 RA World 120 Payoutsking 116 Anubis 115 Arcus Media 114 Storm 110 Monti 110 Toufan 110 ElDorado 109 Settra 106 Kairos 103 Cuba 103 Medusalocker 102 Deadlock 102 Threeam 100 Chaos 96 Abyss 91 Brain Cipher 89 Revil 89 Ransomexx 84 Warlock 78 Lorenz 78 Payload 75 Cicada3301 75 Beast 74 Karakurt 74 Avoslocker 70 Ransomed 68 Quantum 68 Blacklock 64 Lv 63 Metaencryptor 59 Insomnia 58 Flocker 58 Termite 57 AuditTeam 56 Orova 56 Global Secret Group 55 Darkvault 55 Gunra 54 Losttrust 53 Maze 51 AiLock 50 Tengu 49 Trigona 49 Lamashtu 48 Blacknevas 48 Nitrogen 48 Mallox 48 Crypto24 47 Knight 47 Aurora 45 M3rx 45 Leakeddata 44 Midas 44 Dark Project 43 Cmdorganization 43 Donutleaks 42 Securotrop 41 Embargo 41 Crpx0 41 Blackshrantac 41 J 41 Dragonransomware 39 Darkleakmarket 39 Global 38 Emperador 37 Moneymessage 37 CRPxO 37 Panzer 36 Ciphbit 36 Helldown 36 Nokoyawa 36 Arvinclub 35 Spook 35 Obscura 33 dAn0n 33 Booba Project 32 Majinahanashi 32 Suncrypt 32 Marketo 32 Blackmatter 32 ZaWoo 31 Alphalocker 30 Frag 30 Payloadbin 29 Wallstreet 28 Bravox 28 Fulcrumsec 28 L Group 28 Onyx 28 Titan 27 Unsafe 26 Kazu 26 Werewolves 26 Kelvinsecurity 26 Netwalker 26 Lapsus$ 25 Vect 25 Kraken 25 Underground 25 Morpheus 24 ShadowByt3$ 23 Doppelpaymer 23 Radar 22 Ryuk 22 N0n 21 Daixin 21 Xinglocker 21 Hellcat 20 Leaktheanalyst 20 Booba Team 19 Vexy Ransomware 19 Cephalus 19 Siegedsec 19 Ralord 19 Vexy 18 Brotherhood 18 D4rk4rmy 18 Trinity 18 Mountlocker 18 Tridentlocker 17 ALP-001 17 Sabbath 17 Black X 16 ExfilSquad 16 Datacarry 16 Dunghill 16 Apos 16 Madliberator 16 Redransomware 16 Mosesstaff 16 Doommageddon 15 Azroteam 15 Cheers 15 Nefilim 15 Benzona 14 Weyhro 14 Kawa4096 14 Freecivilian 14 Sparta 14 Section9 13 Argonauts 13 Mindware 13 3am 12 Eclipse 12 Barracuda 12 Blackout 12 IMNCrew 12 Teamxxx 12 Netrunner 11 Imnotavillian 11 Blackwater 11 Icarus 11 Icefire 11 Cryp70n1c0d3 11 DYSPHOR1A 10 Crazyhunter 10 Darkrace 10 Darkpower 10 Darkside 10 LeakBazaar 9 Rook 9 Groove 9 Gammax 8 Iah647 8 Iah6477 8 Helix 8 Xpl0itrs 8 Skira 8 Radiant 8 VanHelsing 8 Qiulong 8 Mogilevich 8 Cryptbb 8 Babuk 8 Endzone 7 Byod 7 VYPR 7 Global Cybernetic Collective 7 Bert 7 Chort 7 Malekteam 7 0mega 7 Cyclops 7 Karma 7 Pay2key 7 Ulose 6 The Crew 6 Ms13089 6 Cipherforce 6 RunSomeWares 6 Arkana 6 Silent 6 Rancoz 6 Dataleak 6 Redalert 6 Yanluowang 6 Egregor 6 Spirals 5 Nasirsecurity 5 PrinzEugen 5 0day Syndicate 5 Secpo 5 Orca 5 Atomsilo 5 Minteye 5 Kryptos 5 Bqtlock 5 GDLockerSec 5 ValenciaLeaks 5 Donex 5 Raznatovic 5 Projectrelic 5 Pandora 5 Lockdata 5 Cry0 4 Exitium 4 Linkc 4 Desolator 4 Satanlockv2 4 Ransomcortex 4 Shaoleaks 4 Blacktor 4 Redact 3 Falcon 3 Ethics 3 Orion 3 Triple X 3 D1R 3 Mnt6 3 TiMc 3 Yurei 3 Rebornvc 3 Bluebox 3 Vanirgroup 3 Hellogookie 3 Trisec 3 Noname 3 Vendetta 3 Ragnarok 3 Blackshadow 3 Bonacigroup 3 Grief 3 Snake 3 Coldlock 3 Shiba 2 Blacklocks 2 ImNotAVillain 2 Secp0 2 Sovcali 2 Leaknet 2 BlueWhale 2 Blackfield 2 Kittykatkrew 2 Osiris 2 Lunalock 2 Sensayq 2 Cryptnet 2 Bitlocker 2 Nightsky 2 Wastedlocker 2 Sekhmet 2 Prolock 2 Meowciety403 1 Abyss-data 1 Securotop 1 Kyber 1 Sicarii 1 Reynolds 1 Walocker 1 Gunra Ransomware 1 Playboy 1 Zerotolerance 1 Insane 1 Ranstreet 1 Crosslock 1 Slug 1 Memedusalockerdusa 1 Blogxx 1 Roadsweep 1 La Piovra 1 Robinhood 1 Macaw 1 Deathkitty 1 Zeppelin 1 Networm 1 Maui 1 Astroteam 1 Synack 1 Phoenixcryptolocker 1 Ronggolawe 1 Cring 1 Hades 1 Netflim 1 Agelocker 1 Thanos 1 Dharma 1 Mamba 1

Breaches using Ransomware

September 29, 2026HIGH

Shanghai Tunnel Engineering Co Ltd Listed by Global Cybernetic Collective Ransomware Group

Global Cybernetic Collective Ransomware

September 28, 2026HIGH

auromex.com Listed by SafePay Ransomware Group

SafePay Ransomware

September 28, 2026HIGH

safescaffolding.net Listed by 3am Ransomware Group

3am Ransomware

September 28, 2026HIGH

pistonespersan.com.ar Listed by 3am Ransomware Group

3am Ransomware

September 28, 2026HIGH

Atcomm Listed by Global Cybernetic Collective Ransomware Group

Global Cybernetic Collective Ransomware

September 28, 2026HIGH

Agra Industries Listed by Storm Ransomware Group

Storm Ransomware

September 28, 2026HIGH

Geebee Garments Listed by Akira Ransomware Group

Akira Ransomware

September 28, 2026HIGH

Sutton Public Schools Listed by Global Cybernetic Collective Ransomware Group

Global Cybernetic Collective Ransomware

September 28, 2026HIGH

IT Foods Industries Listed by Shiba Ransomware Group

Shiba Ransomware

September 28, 2026HIGH

Ressources Si Listed by Panzer Ransomware Group

Panzer Ransomware

Showing 251–300 of 32,291

‹ Prev 1…4 5 6 7 8…646 Next ›

Per page25 50 75 100

Check your exposure

See if your email turned up in any breach we track — free.

Check if you’re exposed →

Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.

Ransomware

Groups using this method

Breaches using Ransomware

spg.co.kr Listed by LockBit Ransomware Group

Tekko Enterprises, Inc Listed by Interlock Ransomware Group

Precision Facades Ltd Listed by N0n Ransomware Group

Agospap Listed by The Gentlemen Ransomware Group

Europrim Listed by The Gentlemen Ransomware Group

Northern NJ Eye Institute Listed by The Gentlemen Ransomware Group

iccsi.com Listed by M3rx Ransomware Group

Datacomm Services Listed by The Gentlemen Ransomware Group

VUS Listed by The Gentlemen Ransomware Group

northeastrehab.com Listed by Brain Cipher Ransomware Group

mulholland.com Listed by Brain Cipher Ransomware Group

newyjh.com Listed by Ulose Ransomware Group

Unique Repair Services Listed by Kairos Ransomware Group

Crowder Industries, Inc Listed by Gammax Ransomware Group

trailerbridge.com Listed by Brain Cipher Ransomware Group

maxwell-group.com Listed by Brain Cipher Ransomware Group

Groupe Proxitel Listed by Vexy Ransomware Ransomware Group

intense.pl Listed by M3rx Ransomware Group

Webb Electric Company of Florida Listed by The Gentlemen Ransomware Group

Paid Victim 32373FFB7AF7E725 Listed by AuditTeam Ransomware Group

Auto Holler Listed by The Gentlemen Ransomware Group

latitudesubro.com Listed by Brain Cipher Ransomware Group

Tommy Garner Air Conditioning Heating Listed by The Gentlemen Ransomware Group

Poca Valley Bank Listed by Storm Ransomware Group

bcx.co.za Listed by INC Ransom Ransomware Group

Drinks Wines Spirits Listed by The Gentlemen Ransomware Group

Groupe Proxitel Listed by Vexy Ransomware Group

Solaria Listed by The Gentlemen Ransomware Group

LegalWise Listed by The Gentlemen Ransomware Group

noonsugar.com Listed by M3rx Ransomware Group

somasolucoes.com Listed by M3rx Ransomware Group

QUALITY SPORT Topsport Italia Listed by The Gentlemen Ransomware Group

Gibson Area Hospital & Health Services Listed by Wallstreet Ransomware Group

Don Hierro Listed by The Gentlemen Ransomware Group

Josee Bendaaa-Guerrero Asociados Listed by The Gentlemen Ransomware Group

Defencebit Listed by The Gentlemen Ransomware Group

Samwumed Listed by The Gentlemen Ransomware Group

Auren Listed by The Gentlemen Ransomware Group

Telrad Networks Listed by The Gentlemen Ransomware Group

advantech.com Listed by Chaos Ransomware Group

Shanghai Tunnel Engineering Co Ltd Listed by Global Cybernetic Collective Ransomware Group

auromex.com Listed by SafePay Ransomware Group

safescaffolding.net Listed by 3am Ransomware Group

pistonespersan.com.ar Listed by 3am Ransomware Group

Atcomm Listed by Global Cybernetic Collective Ransomware Group

Agra Industries Listed by Storm Ransomware Group

Geebee Garments Listed by Akira Ransomware Group

Sutton Public Schools Listed by Global Cybernetic Collective Ransomware Group

IT Foods Industries Listed by Shiba Ransomware Group

Ressources Si Listed by Panzer Ransomware Group