« All threats

Ransomware in United States

In the last 12 months, 1,207 organisations in United States have been claimed by ransomware groups, 242 of them in the last 30 days. The figures come from the groups' own leak sites and are not verified unless stated; many victims pay and never appear.

Victims, last 12 months1,207
Last 30 days242
Confirmed by press1

Explore with filters →🔔 Get alerts for United States

Victims per month

  1. Nov 250
  2. Dec 250
  3. Jan 260
  4. Feb 260
  5. Mar 260
  6. Apr 2672
  7. May 26206
  8. Jun 26184
  9. Jul 26203
  10. Aug 26300
  11. Sep 26241
  12. Oct 261

Most active groups (12 months)

  1. The Gentlemen163
  2. Akira125
  3. Qilin72
  4. Storm59
  5. Dragonforce53
  6. ShinyHunters48
  7. Crpx035
  8. INC Ransom30
  9. Pear29
  10. Global Secret Group28

Most affected sectors

  1. Healthcare177
  2. Manufacturing141
  3. Construction111
  4. Technology97
  5. Legal84
  6. Finance & insurance80
  7. Professional services80
  8. Retail79
  9. Government45
  10. Education44

Recent victims

OrganisationGroupSectorClaimedStatus
ConsilioLockbit5Legal10/1/2026◌ Claimed (unverified)
Zelham, Inc.The GentlemenConstruction9/30/2026◌ Claimed (unverified)
Houston Thyroid & Endocrine SpecialistsN0nHealthcare9/30/2026◌ Claimed (unverified)
Blaise C. Bender, PCInterlockLegal9/30/2026◌ Claimed (unverified)
Buford-Thompson Company, LTDAuroraConstruction9/30/2026◌ Claimed (unverified)
Aware IncThe GentlemenTechnology9/30/2026◌ Claimed (unverified)
West County Health CentersStormHealthcare9/30/2026◌ Claimed (unverified)
Gardeners' GuildStormProfessional services9/30/2026◌ Claimed (unverified)
North Hills Facility ServicesStormProfessional services9/30/2026◌ Claimed (unverified)
Olnick RentalsStormReal estate9/30/2026◌ Claimed (unverified)
Century Management ServicesStormReal estate9/30/2026◌ Claimed (unverified)
Silvercup StudiosStormMedia & entertainment9/30/2026◌ Claimed (unverified)
Unique Repair ServicesKairosOther9/29/2026◌ Claimed (unverified)
Gibson Area Hospital & Health ServicesWallstreetHealthcare9/29/2026◌ Claimed (unverified)
Tekko Enterprises, IncInterlockConstruction9/29/2026◌ Claimed (unverified)
Crowder Industries, IncGammaxNon-profit9/29/2026◌ Claimed (unverified)
TrailerbridgeBrain CipherTransport & logistics9/29/2026◌ Claimed (unverified)
McCord ClaimsBrain CipherProfessional services9/29/2026◌ Claimed (unverified)
Tommy Garner Air Conditioning & HeatingThe GentlemenConstruction9/29/2026◌ Claimed (unverified)
Northern New Jersey Eye InstituteThe GentlemenHealthcare9/29/2026◌ Claimed (unverified)
Williamson Dacar AssociatesThe GentlemenConstruction9/29/2026◌ Claimed (unverified)
DBU ConstructionThe GentlemenConstruction9/29/2026◌ Claimed (unverified)
Custom Rx ShoppeThe GentlemenHealthcare9/29/2026◌ Claimed (unverified)
Datacomm ServicesThe GentlemenConstruction9/29/2026◌ Claimed (unverified)
Webb Electric Company of FloridaThe GentlemenConstruction9/29/2026◌ Claimed (unverified)
Carolina AsthmaChaosHealthcare9/29/2026◌ Claimed (unverified)
CPA CBM3rxProfessional services9/29/2026◌ Claimed (unverified)
Otero Geeza LawM3rxLegal9/29/2026◌ Claimed (unverified)
Interconnect Computer Cabling Services, Inc.M3rxTelecommunications9/29/2026◌ Claimed (unverified)
OnTracEmperadorTransport & logistics9/29/2026◌ Claimed (unverified)

Claims are published by the criminal groups themselves and are unverified until the organisation or the press confirms them. Names of natural persons (sole traders, individual professionals) are anonymised under the GDPR. We never link to leak sites or stolen data. To request the removal or anonymisation of an entry, contact the site administrator.

Sources: RansomLook (CC BY 4.0), MITRE ATT&CK®, MISP Galaxy, Google News.