Ransomware Victims Tracker: Who Got Hit, By Which Group
Pricing
$4.00 / 1,000 claim rows
Organisations named on ransomware leak sites, with the group claiming each one, the country, the sector and when the claim appeared. Every row is labelled as an attacker claim rather than a confirmed breach. Keyless, no account.
victims = one row per claimed victim. groups = profiles of the ransomware groups themselves. summary = claim counts by group, country or sector so you can see who is most active.
Two letter country code such as US, GB, DE. Leave empty for all countries.
Sector name as the source spells it, for example Healthcare, Manufacturing, Technology, Financial Services. Leave empty for all sectors.
Filter to one group by name, for example lockbit or safepay. Partial names match.
With month, pulls the claims posted in that calendar month instead of the most recent ones.
1 to 12. Used together with year.
How recent a claim has to be to be returned. Records the source publishes without a date are kept rather than silently dropped.
