Live Feed· updated every 5 minutes
Ransomware Victim Tracker
Active postings from public ransomware gang leak sites. For defensive intelligence and awareness only.
100
Recent Victims
28
Active Groups
31
US Victims
14
Sectors Hit
100 victims · page 1/4
| Threat Group | Victim | Country | Discovered | |
|---|---|---|---|---|
| lynx | www.wolfconstruction.net 🇺🇸 US COMPANY | 🇺🇸 US | Jun 18, 2026 | Details |
| shinyhunters | Amazon owned OneMedical.com 🇺🇸 US COMPANY | 🇺🇸 US | Jun 17, 2026 | Details |
| shinyhunters | NAIC.org 🇺🇸 US COMPANY | 🇺🇸 US | Jun 17, 2026 | Details |
| incransom | Horizon Family Medical Group 🇺🇸 US COMPANY | 🇺🇸 US | Jun 18, 2026 | Details |
| incransom | neuwoges.de | 🇩🇪 DE | Jun 17, 2026 | Details |
| safepay | seinordovest.it | 🇮🇹 IT | Jun 17, 2026 | Details |
| safepay | harcourts.net | 🇦🇺 AU | Jun 17, 2026 | Details |
| safepay | zaunsysteme.de | 🇩🇪 DE | Jun 17, 2026 | Details |
| safepay | brscappuccio.it | 🇮🇹 IT | Jun 17, 2026 | Details |
| safepay | gut-heckenhof.de | 🇩🇪 DE | Jun 17, 2026 | Details |
| play | Greg Crosslin 🇺🇸 US COMPANY | 🇺🇸 US | Jun 17, 2026 | Details |
| lamashtu | Great Foods | 🇪🇬 EG | Jun 17, 2026 | Details |
| play | Integrated Technologies | — | Jun 17, 2026 | Details |
| play | eurOptimum | 🇩🇪 DE | Jun 17, 2026 | Details |
| krybit | www.courdescomptes.sn | 🇸🇳 SN | Jun 17, 2026 | Details |
| krybit | ersa.com.py | 🇵🇾 PY | Jun 17, 2026 | Details |
| SilentRansomGroup | He..t S..it. | — | Jun 17, 2026 | Details |
| akira | Smith Filter | — | Jun 17, 2026 | Details |
| SilentRansomGroup | He..t S..t. | — | Jun 16, 2026 | Details |
| fulcrumsec | Novo Nordisk | 🇩🇰 DK | Jun 16, 2026 | Details |
| qilin | Golfview Developmental Center 🇺🇸 US COMPANY | 🇺🇸 US | Jun 16, 2026 | Details |
| cloak | ra-*******e | — | Jun 16, 2026 | Details |
| cloak | d**********e | — | Jun 16, 2026 | Details |
| cloak | W******S*******D | — | Jun 16, 2026 | Details |
| shinyhunters | Ralph Lauren 🇺🇸 US COMPANY | 🇺🇸 US | Jun 16, 2026 | Details |
Data aggregated from multiple threat intelligence sources. For defensive awareness only. If your organization appears here, contact Security Arsenal immediately.
Is Your Organization Being Targeted?
Security Arsenal monitors ransomware leak sites and dark web forums for your domains and company names — 24/7. Get alerted before you become the next victim on this list.