Live leak-site tracker
Ransomware Activity
Victims as claimed on gang extortion sites, refreshed every two minutes. A claim means data was already stolen. Where shown, a gang's country is an assessed link from public law-enforcement and industry reporting, not telemetry.
Claims in window
100
Active gangs
29
Most active
qilin
Top sector
Manufacturing
Arthritis Center of Riverside
2d agorheumatology medical practice · Riverside, California, United States | Scanned laboratory requisitions of named patients with dates of birth, home addresses and Medicare subscriber details, April through October 2026; Accounts receivable aging with patient names, account numbers, insurers and balances; Patient billing files and records correspondence of the practice | [NOT PAID - EXPOSED]