Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Due to abuse of the free use of Ransomware.live, we have updated our Terms & Conditions. Please review them before continuing to use the Data.
Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us

Ransomware Statistics

Total victims
30865
all time
Total groups
388
active
Countries hit
185
overall

Sector Activity since Jan 1, 2026

Professional Services 1117
Professional Services
  • Jan97
  • Feb128
  • Mar126
  • Apr189
  • May190
  • Jun140
  • Jul175
  • Aug72
  • Sep0
  • Oct0
  • Nov0
  • Dec0
Jan Aug
Manufacturing 1104
Manufacturing
  • Jan139
  • Feb148
  • Mar168
  • Apr150
  • May131
  • Jun113
  • Jul152
  • Aug103
  • Sep0
  • Oct0
  • Nov0
  • Dec0
Jan Aug
Technology 841
Technology
  • Jan116
  • Feb126
  • Mar127
  • Apr98
  • May87
  • Jun75
  • Jul126
  • Aug86
  • Sep0
  • Oct0
  • Nov0
  • Dec0
Jan Aug
Healthcare 532
Healthcare
  • Jan49
  • Feb69
  • Mar64
  • Apr79
  • May70
  • Jun55
  • Jul85
  • Aug61
  • Sep0
  • Oct0
  • Nov0
  • Dec0
Jan Aug
Retail & E-Commerce 505
Retail & E-Commerce
  • Jan59
  • Feb55
  • Mar61
  • Apr87
  • May62
  • Jun63
  • Jul70
  • Aug48
  • Sep0
  • Oct0
  • Nov0
  • Dec0
Jan Aug
Financial Services 337
Financial Services
  • Jan42
  • Feb54
  • Mar54
  • Apr42
  • May36
  • Jun29
  • Jul50
  • Aug30
  • Sep0
  • Oct0
  • Nov0
  • Dec0
Jan Aug
Agriculture And Food Production 258
Agriculture And Food Production
  • Jan24
  • Feb26
  • Mar36
  • Apr35
  • May40
  • Jun39
  • Jul37
  • Aug21
  • Sep0
  • Oct0
  • Nov0
  • Dec0
Jan Aug
Transportation 244
Transportation
  • Jan23
  • Feb38
  • Mar29
  • Apr37
  • May35
  • Jun26
  • Jul37
  • Aug19
  • Sep0
  • Oct0
  • Nov0
  • Dec0
Jan Aug
Government & Defense 235
Government & Defense
  • Jan30
  • Feb28
  • Mar41
  • Apr32
  • May25
  • Jun27
  • Jul37
  • Aug15
  • Sep0
  • Oct0
  • Nov0
  • Dec0
Jan Aug
Education 197
Education
  • Jan27
  • Feb24
  • Mar31
  • Apr23
  • May29
  • Jun25
  • Jul24
  • Aug14
  • Sep0
  • Oct0
  • Nov0
  • Dec0
Jan Aug
Energy & Utilities 188
Energy & Utilities
  • Jan28
  • Feb20
  • Mar30
  • Apr30
  • May10
  • Jun18
  • Jul35
  • Aug17
  • Sep0
  • Oct0
  • Nov0
  • Dec0
Jan Aug
Hospitality 176
Hospitality
  • Jan21
  • Feb26
  • Mar23
  • Apr20
  • May23
  • Jun21
  • Jul27
  • Aug15
  • Sep0
  • Oct0
  • Nov0
  • Dec0
Jan Aug

Top 10 Groups all time

Top 10 Sectors all time

Victims per Month (2023–2026)

Victims per Quarter (2023–2026)

Cumulative Victims per Month (2023–2026)

Active Ransomware Groups per Year (2023–2026)

Top 15 Countries all time

Victims by Day of Week all time

Sector Distribution per Year in % all time

Group Claim Flows

Link thickness reflects how often one group's claim on a victim was followed by another's. Based on 1,003 victims claimed by 2 or more groups — showing only the top 20 most common paths for readability.

Graph concept by Valéry Rieß-Marchive



Takedown Requests 2026 onwards

Status Breakdown

Requests by Month


Infostealer Intelligence via HudsonRock

11,156
Exposed Domains
409,915
Compromised Employees
38,203,802
Compromised Users
346,714
Third-Party Credentials

Top Stealer Families

Most Exposed Domains by employees