Ransomware in the Non-profit sector
In the last 12 months, 98 organisations in Non-profit have been claimed by ransomware groups, 11 of them in the last 30 days. The figures come from the groups' own leak sites and are not verified unless stated; many victims pay and never appear.
Victims, last 12 months98
Last 30 days11
Confirmed by press0
Explore with filters →🔔 Get alerts for Non-profit
Victims per month
- Nov 250
- Dec 250
- Jan 260
- Feb 260
- Mar 260
- Apr 2616
- May 2616
- Jun 2613
- Jul 2621
- Aug 2620
- Sep 2612
- Oct 260
Most active groups (12 months)
Most affected countries
Recent victims
| Organisation | Group | Country | Claimed | Status |
|---|---|---|---|---|
| Crowder Industries, Inc | Gammax | United States | 9/29/2026 | ◌ Claimed (unverified) |
| AGOSPAP | The Gentlemen | France | 9/29/2026 | ◌ Claimed (unverified) |
| Groupe APROSEP | The Gentlemen | French Guiana | 9/29/2026 | ◌ Claimed (unverified) |
| United Federation of Teachers | N0n | United States | 9/18/2026 | ◌ Claimed (unverified) |
| Diakoniewerk Apolda | Krybit | Germany | 9/17/2026 | ◌ Claimed (unverified) |
| Thorndale Foundation | Qilin | — | 9/16/2026 | ◌ Claimed (unverified) |
| Chicago History Museum | INC Ransom | United States | 9/16/2026 | ◌ Claimed (unverified) |
| California School Employees Association | Ransomhouse | United States | 9/15/2026 | ◌ Claimed (unverified) |
| California School Employees Association | Ransomhouse | United States | 9/10/2026 | ◌ Claimed (unverified) |
| New Covenant Believers' Church | Wallstreet | United States | 9/10/2026 | ◌ Claimed (unverified) |
| Recovery Cafe | Safepay | United States | 9/8/2026 | ◌ Claimed (unverified) |
| Union for International Cancer Control | Krybit | — | 9/1/2026 | ◌ Claimed (unverified) |
| CareerSource Palm Beach County | The Gentlemen | United States | 8/31/2026 | ◌ Claimed (unverified) |
| Stoneybrook West Master Association, Inc | Orova | United States | 8/30/2026 | ◌ Claimed (unverified) |
| Stonecrest POA | Orova | United States | 8/30/2026 | ◌ Claimed (unverified) |
| First Baptist Church of Belleview | Orova | United States | 8/30/2026 | ◌ Claimed (unverified) |
| Heidelberger Werkstätten der Lebenshilfe Heidelberg | Zawoo | Germany | 8/29/2026 | ◌ Claimed (unverified) |
| LifeBank Microfinance Foundation | Coinbase Cartel | — | 8/22/2026 | ◌ Claimed (unverified) |
| AMCA | Blackwater | Argentina | 8/15/2026 | ◌ Claimed (unverified) |
| 🔒 Organización asociativa | Qilin | — | 8/14/2026 | ◌ Claimed (unverified) |
| Community Connections | The Gentlemen | United States | 8/14/2026 | ◌ Claimed (unverified) |
| ACLI | The Gentlemen | Italy | 8/14/2026 | ◌ Claimed (unverified) |
| United Association Local Union 345 | Qilin | — | 8/12/2026 | ◌ Claimed (unverified) |
| Dignity Phoenix | Crpx0 | United States | 8/12/2026 | ◌ Claimed (unverified) |
| NTU Alumni Club | The Gentlemen | Singapore | 8/9/2026 | ◌ Claimed (unverified) |
| Canopy Support Services | The Gentlemen | Canada | 8/9/2026 | ◌ Claimed (unverified) |
| Impact Centre Chrétien | Qilin | — | 8/8/2026 | ◌ Claimed (unverified) |
| CEN and Cenelec | Coinbase Cartel | European Union | 8/8/2026 | ◌ Claimed (unverified) |
| Rose Kennedy Greenway | L Group | United States | 8/6/2026 | ◌ Claimed (unverified) |
| Stade Francais | Qilin | France | 8/5/2026 | ◌ Claimed (unverified) |
Claims are published by the criminal groups themselves and are unverified until the organisation or the press confirms them. Names of natural persons (sole traders, individual professionals) are anonymised under the GDPR. We never link to leak sites or stolen data. To request the removal or anonymisation of an entry, contact the site administrator.
Sources: RansomLook (CC BY 4.0), MITRE ATT&CK®, MISP Galaxy, Google News.