Ransomware Intelligence

Live Ransomware Attack Intelligence Dashboard

Real-time worldwide threat monitoring

Total Ransomware Victims

10,053

+8.2%

confirmed ransomware victims

Active Ransomware Groups

215

+20.1%

tracked ransomware operators

Countries Affected

148

+2.1%

nations with reported attacks

Live Threat Intelligence

Last 7 days126 victims · 29 countries

Live Attack Feed

Real-time
1 Critical
CLAIMED
MEDIUM
3 days ago
CLAIMED
MEDIUM
4 days ago
CLAIMED
MEDIUM
4 days ago
Weilhotelweilhotel.com
Malaysia
gunra
Hospitality
CLAIMED
MEDIUM
4 days ago
CLAIMED
MEDIUM
4 days ago
CLAIMED
MEDIUM
4 days ago
AHENK labahenklab.com.tr
Turkey
Deadlock
Technology
CLAIMED
MEDIUM
4 days ago
Hochocltd.com
United Kingdom
qilin
Transportation
CLAIMED
MEDIUM
4 days ago
CLAIMED
MEDIUM
4 days ago
Speed Groupspeedgroupe.com
France
blacknevas
Transportation
CLAIMED
MEDIUM
4 days ago
CLAIMED
MEDIUM
4 days ago
CLAIMED
MEDIUM
4 days ago
Buck Knivesbuckknives.com
United States
thegentlemen
Manufacturing
CLAIMED
MEDIUM
4 days ago
thecranewaregroup.comthecranewaregroup.com
United Kingdom
chaos
Technology
CLAIMED
MEDIUM
5 days ago
View all victims

Attack Statistics & Trends

Attack Volume — Last 12 Months

Sep 2025Nov 2025Jan 2026Mar 2026May 2026Jul 202603006009001,200

Top Threat Actors & Targets

SOCRadar Ransomware Intelligence is a free real-time threat monitoring platform that tracks active ransomware groups and their attack campaigns worldwide. The dashboard aggregates victim disclosures from ransomware leak sites, dark web forums, and SOCRadar's proprietary monitoring infrastructure to produce a continuously updated global attack map segmented by region, industry sector, country, and ransomware family. Security teams, threat hunters, and SOC analysts use it to understand which ransomware groups are active in their geography or sector, assess current threat levels before executive briefings, and generate domain-specific threat reports to check whether their organization has been mentioned in ransomware actor channels. Data refreshes every five seconds from live sources. No account required.