TRIADA
Live leak-site tracker

Ransomware Activity

Victims as claimed on gang extortion sites, refreshed every two minutes. A claim means data was already stolen. Where shown, a gang's country is an assessed link from public law-enforcement and industry reporting, not telemetry.

Claims in window
100
Active gangs
29
Most active
qilin
Top sector
Manufacturing
1 victimemperador Government & Defense Clear all

  • A-RMS

    20h ago
    emperadorGovernment & Defense

    We encrypted your servers and stole some of your source code, along with some sensitive information. If you do not pay the ransom, we will contact and attack your employees, clients, and partners to destroy your business. [Sector: Technology]