Live Feed· updated every 5 minutes
Ransomware Victim Tracker
Active postings from public ransomware gang leak sites. For defensive intelligence and awareness only.
100
Recent Victims
25
Active Groups
48
US Victims
15
Sectors Hit
100 victims · page 2/4
| Threat Group | Victim | Country | Discovered | |
|---|---|---|---|---|
| qilin | LSM Lee | 🇨🇦 CA | May 2, 2026 | Details |
| qilin | Star Precision | 🇬🇧 GB | May 2, 2026 | Details |
| qilin | North Star Signs 🇺🇸 US COMPANY | 🇺🇸 US | May 2, 2026 | Details |
| incransom | https://www.wilkemgroup.com/ | 🇧🇸 BS | May 3, 2026 | Details |
| pear | Beyond Measure & Associates, Inc. 🇺🇸 US COMPANY | 🇺🇸 US | May 2, 2026 | Details |
| cmdorganization | JG Stewart Construction | 🇨🇦 CA | May 2, 2026 | Details |
| cmdorganization | Zampell | 🇮🇹 IT | May 2, 2026 | Details |
| blackwater | Tuopu | 🇨🇳 CN | May 2, 2026 | Details |
| AiLock | Site Design Group 🇺🇸 US COMPANY | 🇺🇸 US | May 2, 2026 | Details |
| everest | Symcor | 🇨🇦 CA | May 1, 2026 | Details |
| everest | TSYS 🇺🇸 US COMPANY | 🇺🇸 US | May 1, 2026 | Details |
| everest | Epiq Global 🇺🇸 US COMPANY | 🇺🇸 US | May 1, 2026 | Details |
| qilin | Standard-Examiner 🇺🇸 US COMPANY | 🇺🇸 US | May 2, 2026 | Details |
| safepay | energyaction.com.au | 🇦🇺 AU | May 1, 2026 | Details |
| safepay | hpk.hamburg | 🇩🇪 DE | May 1, 2026 | Details |
| clop | INJURYLAWYERS.COM 🇺🇸 US COMPANY | 🇺🇸 US | May 1, 2026 | Details |
| clop | INTEGRALIFE.COM 🇺🇸 US COMPANY | 🇺🇸 US | May 1, 2026 | Details |
| krybit | bomuhospital.org | 🇰🇪 KE | May 1, 2026 | Details |
| fulcrumsec | Avnet 🇺🇸 US COMPANY | 🇺🇸 US | May 1, 2026 | Details |
| fulcrumsec | Lena Health 🇺🇸 US COMPANY | 🇺🇸 US | May 1, 2026 | Details |
| fulcrumsec | Woundtech 🇺🇸 US COMPANY | 🇺🇸 US | May 1, 2026 | Details |
| fulcrumsec | LexisNexis 🇺🇸 US COMPANY | 🇺🇸 US | May 1, 2026 | Details |
| fulcrumsec | MCO 🇺🇸 US COMPANY | 🇺🇸 US | May 1, 2026 | Details |
| fulcrumsec | ReFocus AI 🇺🇸 US COMPANY | 🇺🇸 US | May 1, 2026 | Details |
| fulcrumsec | Hatica 🇺🇸 US COMPANY | 🇺🇸 US | May 1, 2026 | Details |
Data aggregated from multiple threat intelligence sources. For defensive awareness only. If your organization appears here, contact Security Arsenal immediately.
Is Your Organization Being Targeted?
Security Arsenal monitors ransomware leak sites and dark web forums for your domains and company names — 24/7. Get alerted before you become the next victim on this list.