Public threat intelligence
Ransomware victim claims, tracked over time
A record of organizations named on ransomware group leak sites, gathered from publicly available group and listing information.
Threat actor claims, not confirmation. Listings are claims published by threat actors. Seeing an organization here does not confirm that a data breach occurred or that data was stolen.
Observed organizations
Victim claims
| Organization | Group | Reported date | Country | Sector | Last observed | Listing state |
|---|
Reported dates, countries, and sectors are shown as they appear on the listing when provided. “Last observed” is when this project last saw the entry. The crawler checks up to the first 25 listing pages for active groups; entries not found in those pages remain unknown. Historical sightings are retained. Optional details are claims shown by the threat actor, not independently verified. Metadata only; no leaked files are stored or linked.