Live Feed· updated every 5 minutes
Ransomware Victim Tracker
Active postings from public ransomware gang leak sites. For defensive intelligence and awareness only.
100
Recent Victims
28
Active Groups
30
US Victims
15
Sectors Hit
100 victims · page 1/4
| Threat Group | Victim | Country | Discovered | |
|---|---|---|---|---|
| AuditTeam | I-***YS | 🇷🇺 RU | Jun 14, 2026 | Details |
| krybit | frey.com | 🇨🇭 CH | Jun 14, 2026 | Details |
| nova | Bandung | 🇮🇩 ID | Jun 14, 2026 | Details |
| dragonforce | Ink | 🇬🇧 GB | Jun 14, 2026 | Details |
| securotrop | Charisma Media 🇺🇸 US COMPANY | 🇺🇸 US | Jun 13, 2026 | Details |
| shinyhunters | coe.int | 🇫🇷 FR | Jun 13, 2026 | Details |
| lapsus$ | INGKA GROUP | 🇸🇪 SE | Jun 13, 2026 | Details |
| lapsus$ | GITHUB INTERNAL 🇺🇸 US COMPANY | 🇺🇸 US | Jun 13, 2026 | Details |
| krybit | www.mbt-energy.com | 🇩🇪 DE | Jun 13, 2026 | Details |
| payload | myipo.gov.my | 🇲🇾 MY | Jun 12, 2026 | Details |
| threeam | jetmachprod.com | — | Jun 12, 2026 | Details |
| threeam | jastrebarsko.hr | 🇭🇷 HR | Jun 12, 2026 | Details |
| threeam | palmero.com | — | Jun 12, 2026 | Details |
| threeam | insamani.com.ar | 🇦🇷 AR | Jun 12, 2026 | Details |
| threeam | bsynchro.com | 🇩🇪 DE | Jun 12, 2026 | Details |
| threeam | molinoscabodi.com.ar | 🇦🇷 AR | Jun 12, 2026 | Details |
| threeam | ws.com.br | 🇧🇷 BR | Jun 12, 2026 | Details |
| threeam | consultic.be | 🇧🇪 BE | Jun 12, 2026 | Details |
| threeam | amc.org.au | 🇦🇺 AU | Jun 12, 2026 | Details |
| threeam | agroexportavocados.com | 🇲🇽 MX | Jun 12, 2026 | Details |
| threeam | hoplongtech.com | 🇻🇳 VN | Jun 12, 2026 | Details |
| threeam | mgrlaw.com 🇺🇸 US COMPANY | 🇺🇸 US | Jun 12, 2026 | Details |
| coinbasecartel | Demand.io 🇺🇸 US COMPANY | 🇺🇸 US | Jun 12, 2026 | Details |
| coinbasecartel | Cambridge Mobile Telematics 🇺🇸 US COMPANY | 🇺🇸 US | Jun 12, 2026 | Details |
| shadowbyt3$ | Nintendo Company (Nintendo.com) | 🇯🇵 JP | Jun 12, 2026 | Details |
Data aggregated from multiple threat intelligence sources. For defensive awareness only. If your organization appears here, contact Security Arsenal immediately.
Is Your Organization Being Targeted?
Security Arsenal monitors ransomware leak sites and dark web forums for your domains and company names — 24/7. Get alerted before you become the next victim on this list.