TRIADA
Live leak-site tracker

Ransomware Activity

Victims as claimed on gang extortion sites, refreshed every two minutes. A claim means data was already stolen. Where shown, a gang's country is an assessed link from public law-enforcement and industry reporting, not telemetry.

Claims in window
100
Active gangs
23
Most active
qilin
Top sector
Manufacturing
2 victimsn0n Technology Clear all

  • Technoleads Services Inc.

    1d ago
    n0nTechnology

    media production (audio description and accessibility media) · Montreal, Quebec, Canada | Current 2026 client production files from your work in progress library, including active projects modified in October 2026; A job candidate resume with full personal contact details from your human resources records; Your archive of finished productions from 2016 through 2021, including a 2.1 GB demonstration archive; Internal technical documentation of your media production platform | [NOT PAID - EXPOSED]

  • Adirondack Networks, Inc.

    2d ago
    n0nUnited StatesTechnology

    network and IT services · New York, United States | The live accounting database of the company, more than 627 megabytes, active through 20 October 2026; A second company accounting database of Elevate Networks, Inc., more than 331 megabytes, active through 20 October 2026; Transaction logs and scheduled accounting backups | [NOT PAID - EXPOSED]