TRIADA
Live leak-site tracker

Ransomware Activity

Victims as claimed on gang extortion sites, refreshed every two minutes. A claim means data was already stolen. Where shown, a gang's country is an assessed link from public law-enforcement and industry reporting, not telemetry.

Claims in window
100
Active gangs
23
Most active
qilin
Top sector
Manufacturing
1 victimPortugal

  • GPIC Projectos Con Instalacoes Lda

    2d ago
    n0nPortugalManufacturing

    engineering design and installations · Portugal | The full project archive of an engineering design office, spanning 2000 through 2026, including tender submissions, client proposals and technical drawings; Project folders for named clients including hospital installations for a private hospital group; Scanned office documents with activity through October 2026; A company bank account document with the full IBAN and tax number; Staff curricula with photos and personal details | [NOT PAID - EXPOSED]