Active threats

Organisations claimed as victims on ransomware groups' leak sites, classified by country and sector, and cross-checked with press coverage.

Claimed victims101
In United States28
Confirmed by press1

Most active groups

  1. Storm14
  2. The Gentlemen14
  3. Akira9
  4. Qilin8
  5. Safepay8
  6. Chaos4
  7. INC Ransom4
  8. Black Nevas4
  9. Wallstreet3
  10. Lockbit53

Most affected countries

  1. United States28
  2. Canada8
  3. Japan4
  4. Spain4
  5. Germany4
  6. South Korea3
  7. France3
  8. Sweden3
  9. United Kingdom3
  10. Brazil2

Most affected sectors

  1. Other151
  2. Manufacturing101
  3. Technology87
  4. Healthcare85
  5. Professional services79
  6. Retail51
  7. Finance & insurance50
  8. Construction46
  9. Legal37
  10. Transport & logistics34

Recent victims

OrganisationGroupCountrySectorClaimedStatus
MarkisolThe GentlemenSwedenManufacturing9/21/2026◌ Claimed (unverified)
Allied Supply Co.Global Secret GroupUnited StatesManufacturing9/21/2026◌ Claimed (unverified)
Metalware CorporationThe GentlemenCanadaManufacturing9/21/2026◌ Claimed (unverified)
Manroc Developments Inc.StormCanadaManufacturing9/21/2026◌ Claimed (unverified)
Newman Tractor3amUnited StatesManufacturing9/21/2026◌ Claimed (unverified)
Vista Plastic SolutionsPlay—Manufacturing9/18/2026◌ Claimed (unverified)
Anderson IndustriesAkira—Manufacturing9/18/2026◌ Claimed (unverified)
Grupo JusteQilin—Manufacturing9/18/2026◌ Claimed (unverified)
American Casting CompanyStormUnited StatesManufacturing9/18/2026◌ Claimed (unverified)
Appliance FactoryINC Ransom—Manufacturing9/17/2026◌ Claimed (unverified)
Roshd SanatWallstreetIranManufacturing9/16/2026◌ Claimed (unverified)
Trulite Glass & Aluminum SolutionsINC RansomUnited StatesManufacturing9/16/2026◌ Claimed (unverified)
Electrolux GroupEmperadorSwedenManufacturing9/16/2026◌ Claimed (unverified)
Neumerkel GmbHSafepayGermanyManufacturing9/15/2026◌ Claimed (unverified)
🔒 Pequeña empresa manufacturera (DE)SafepayGermanyManufacturing9/15/2026◌ Claimed (unverified)
Stöcklin KüchenSafepaySwitzerlandManufacturing9/15/2026◌ Claimed (unverified)
Pilot Precision ProductsAkira—Manufacturing9/15/2026◌ Claimed (unverified)
VeritivIah647—Manufacturing9/15/2026◌ Claimed (unverified)
Foremost MfgQilin—Manufacturing9/14/2026◌ Claimed (unverified)
TMI Técnicas Mecánicas IlerdensesThe GentlemenSpainManufacturing9/14/2026◌ Claimed (unverified)
Technical AsiaThe GentlemenThailandManufacturing9/14/2026◌ Claimed (unverified)
TENTAC Co., LtdThe GentlemenJapanManufacturing9/14/2026◌ Claimed (unverified)
Alchin Long GroupThe GentlemenAustraliaManufacturing9/14/2026◌ Claimed (unverified)
Balkan PolymersThe GentlemenSerbiaManufacturing9/14/2026◌ Claimed (unverified)
Aurora TechnologiesThe GentlemenUnited StatesManufacturing9/14/2026◌ Claimed (unverified)
GlasflossChaosUnited StatesManufacturing9/14/2026◌ Claimed (unverified)
SteelhausChaosUnited StatesManufacturing9/14/2026◌ Claimed (unverified)
Cerámicas KantuPanzerPeruManufacturing9/14/2026◌ Claimed (unverified)
Kimberly-ClarkShinyHuntersUnited StatesManufacturing9/13/2026◌ Claimed (unverified)
Metalware Corporation Inc.KrybitCanadaManufacturing9/12/2026◌ Claimed (unverified)

Claims are published by the criminal groups themselves and are unverified until the organisation or the press confirms them. Names of natural persons (sole traders, individual professionals) are anonymised under the GDPR. We never link to leak sites or stolen data. To request the removal or anonymisation of an entry, contact the site administrator.

Sources: RansomLook (CC BY 4.0), MITRE ATT&CK®, MISP Galaxy, Google News.