Live Ransomware Attack Intelligence Dashboard

Ransomware Intelligence tracks all major ransomware-as-a-service (RaaS) operations and independent groups currently active on the threat landscape, including LockBit, ALPHV/BlackCat, Cl0p, Black Basta, Play, Akira, and many others. When new groups emerge or rebrand, they are added to tracking within days of their first observed leak site activity. Each group profile includes victim count, preferred sectors, double extortion tactics, and technical indicators.

Use the domain search feature on the Ransomware Intelligence landing page. Enter your company's domain and the tool will scan confirmed ransomware leak site postings across all tracked groups. If your organization appears, you will see the threat group name, posting date, and what data categories were claimed as exfiltrated. This is a critical early warning signal — ransomware groups often list victims before they respond, giving organizations a narrow window to assess exposure.

Based on SOCRadar's tracking data, ransomware groups disproportionately target healthcare, manufacturing, education, legal services, and financial institutions. Healthcare is targeted both for the sensitivity of patient data (higher ransom compliance) and for operational disruption leverage. Manufacturing is targeted because OT/IT convergence creates exploitable attack surfaces with high downtime costs. The Ransomware Intelligence dashboard shows live industry breakdowns so you can assess your sector's current risk level.

Double extortion is a ransomware tactic where attackers both encrypt files AND exfiltrate data, threatening to publish it unless the ransom is paid. Even organizations with good backups face reputational and regulatory consequences from data exposure. Ransomware Intelligence helps by providing early warning: monitoring leak sites for mentions of your domain or organization name before a breach becomes public, giving your security team time to investigate, contain, and prepare a response before sensitive data is published.