Active threats

Organisations claimed as victims on ransomware groups' leak sites, classified by country and sector, and cross-checked with press coverage.

Claimed victims21
In Spain15
Confirmed by press0

Most active groups

  1. The Gentlemen4
  2. Lockbit52
  3. Emperador2
  4. Black Nevas2
  5. Akira1
  6. Lamashtu1
  7. Aurora1
  8. Killsec31
  9. Space Bears1
  10. Booba Team1

Most affected countries

  1. United States242
  2. Canada28
  3. Germany27
  4. France25
  5. Italy21
  6. Brazil20
  7. Australia15
  8. Spain15
  9. Japan14
  10. India13

Most affected sectors

  1. Other4
  2. Retail3
  3. Healthcare2
  4. Professional services2
  5. Finance & insurance2
  6. Legal2
  7. Technology1
  8. Government1
  9. Hospitality & tourism1
  10. Manufacturing1

Recent victims

OrganisationGroupCountrySectorClaimedStatus
🔒 Distribuidor de equipamiento sanitario (IT)LamashtuItalyOther9/30/2026◌ Claimed (unverified)
Topsport Italia / Quality Sport ItaliaThe GentlemenItalyRetail9/29/2026◌ Claimed (unverified)
🔒 Organización (IT)Killsec3ItalyOther9/27/2026◌ Claimed (unverified)
NEAD ProRhysidaItalyLegal9/24/2026◌ Claimed (unverified)
CO.R.I.S.Lockbit5ItalyOther9/24/2026◌ Claimed (unverified)
COSEF - Consorzio di Sviluppo Economico del FriuliBooba TeamItalyProfessional services9/23/2026◌ Claimed (unverified)
DI.C.S.EL. S.R.L.AkiraItalyTechnology9/22/2026◌ Claimed (unverified)
360 Consulenza S.r.l.NightspireItalyProfessional services9/21/2026◌ Claimed (unverified)
🔒 Despacho de notarios (IT)EmperadorItalyLegal9/20/2026◌ Claimed (unverified)
STP Fashion LabVexyItalyRetail9/17/2026◌ Claimed (unverified)
RDA MOTORS S.P.A.EmperadorItalyAutomotive9/16/2026◌ Claimed (unverified)
Comune di Robecco sul NaviglioLockbit5ItalyGovernment9/14/2026◌ Claimed (unverified)
🔒 Agente de seguros independiente (IT)The GentlemenItalyFinance & insurance9/14/2026◌ Claimed (unverified)
ACA PescaraThe GentlemenItalyReal estate9/14/2026◌ Claimed (unverified)
PROMOSFERA S.r.l.Black NevasItalyOther9/9/2026◌ Claimed (unverified)
ASCOM S.p.A.Black NevasItalyManufacturing9/9/2026◌ Claimed (unverified)
AssiprimeSafepayItalyFinance & insurance9/8/2026◌ Claimed (unverified)
Abaco ViaggiThe GentlemenItalyHospitality & tourism9/7/2026◌ Claimed (unverified)
EDIF S.p.A.AuroraItalyRetail9/4/2026◌ Claimed (unverified)
Studio Oculistico CiraciSpace BearsItalyHealthcare9/3/2026◌ Claimed (unverified)
Policlínico TriestinoINC RansomItalyHealthcare9/2/2026◌ Claimed (unverified)

Claims are published by the criminal groups themselves and are unverified until the organisation or the press confirms them. Names of natural persons (sole traders, individual professionals) are anonymised under the GDPR. We never link to leak sites or stolen data. To request the removal or anonymisation of an entry, contact the site administrator.

Sources: RansomLook (CC BY 4.0), MITRE ATT&CK®, MISP Galaxy, GDELT.