« All threats

Ransomware group

Leakeddata

Victims in the last 90 days47

Most affected countries

  1. United States21

Most affected sectors

  1. Other26
  2. Legal21

Recent victims

OrganisationCountrySectorClaimedStatus
🔒 Entidad desconocida—Other9/28/2026◌ Claimed (unverified)
🔒 Entidad no identificada—Other9/25/2026◌ Claimed (unverified)
Clark HillUnited StatesLegal9/22/2026◌ Claimed (unverified)
🔒 Entidad no identificada—Other9/22/2026◌ Claimed (unverified)
Cozen O'ConnorUnited StatesLegal9/22/2026◌ Claimed (unverified)
🔒 Entidad desconocida—Other9/22/2026◌ Claimed (unverified)
🔒 Entidad desconocida—Other9/22/2026◌ Claimed (unverified)
Hogan Lovells CadwaladerUnited StatesLegal9/21/2026✔ Confirmed
🔒 Entidad no identificada—Other9/17/2026◌ Claimed (unverified)
🔒 Entidad no identificada—Other9/3/2026◌ Claimed (unverified)
🔒 Entidad no identificada—Other9/3/2026◌ Claimed (unverified)
🔒 Entidad no identificada—Other9/3/2026◌ Claimed (unverified)
Katten Muchin RosenmanUnited StatesLegal9/3/2026◌ Claimed (unverified)
Greenberg TraurigUnited StatesLegal9/2/2026◌ Claimed (unverified)
🔒 Entidad con nombre no identificable—Other9/2/2026◌ Claimed (unverified)
🔒 Entidad con nombre no identificable—Other9/2/2026◌ Claimed (unverified)
Holland & KnightUnited StatesLegal9/1/2026◌ Claimed (unverified)
🔒 Entidad no identificada—Other9/1/2026◌ Claimed (unverified)
🔒 Entidad desconocida—Other8/27/2026◌ Claimed (unverified)
🔒 Organización sin identificar—Other8/26/2026◌ Claimed (unverified)
🔒 Organización sin identificar—Other8/26/2026◌ Claimed (unverified)
🔒 Organización sin identificar—Other8/26/2026◌ Claimed (unverified)
🔒 Organización sin identificar—Other8/26/2026◌ Claimed (unverified)
🔒 Organización sin identificar—Other8/26/2026◌ Claimed (unverified)
🔒 Organización sin identificar—Other8/26/2026◌ Claimed (unverified)

Claims are published by the criminal groups themselves and are unverified until the organisation or the press confirms them. Names of natural persons (sole traders, individual professionals) are anonymised under the GDPR. We never link to leak sites or stolen data. To request the removal or anonymisation of an entry, contact the site administrator.

Sources: RansomLook (CC BY 4.0), MITRE ATT&CK®, MISP Galaxy, Google News.