Ransomware Tracker
Global Ransomware Dashboard
Livesynced 16m agoRequest assessment
Live ransomware intelligence
Global Ransomware Dashboard
2026-10-04 → 2026-10-13Tracking 54 groups7,130 victim records
Total Events
946
▲ 258.3% vs prior period
Active Groups
16
▼ 27.3% vs prior period
Data Leaks Posted
899
▲ 342.9% vs prior period
24h Change
+258.3%
▲ 258.3% vs prior window
Geographic Threat Heatmap
4,541Total attacks+258.3%
Loading map…
Most active groups (10d)All groups
| qilin | 30 | 34.1% |
| safepay | 13 | 14.8% |
| interlock | 9 | 10.2% |
| akira | 8 | 9.1% |
| incransom | 7 | 8.0% |
| play | 7 | 8.0% |
| silentransomgroup | 6 | 6.8% |
| rhysida | 5 | 5.7% |
| direwolf | 2 | 2.3% |
| ransomhouse | 1 | 1.1% |
Daily Event Flow — Last 10 Days
+258.3%
9Avg / day
Most attacked countries (10d)All countries
| UNKNOWN | 56 | 63.6% |
| United States | 13 | 14.8% |
| Germany | 5 | 5.7% |
| Switzerland | 2 | 2.3% |
| Chile | 2 | 2.3% |
| Argentina | 1 | 1.1% |
| Australia | 1 | 1.1% |
| Canada | 1 | 1.1% |
| Czech Republic | 1 | 1.1% |
| Spain | 1 | 1.1% |
| Ireland | 1 | 1.1% |
| Israel | 1 | 1.1% |
Country Trends
Attack volume per country
Unknown
721▲ 426%
Sector Trends
Attack volume per sector
Recent Ransomware AttacksAll victims
| Date | Group | Victim | Country | Sector |
|---|---|---|---|---|
| 13 Oct 2026 | play | The Innovation Group | United States | Non-Profit |
| 13 Oct 2026 | interlock | Greentech Environmental | Unknown | Legal Services |
| 13 Oct 2026 | play | Saddlers Court MFG | United States | Non-Profit |
| 13 Oct 2026 | interlock | Nu-Quest Distribution Inc | Unknown | Legal Services |
| 13 Oct 2026 | direwolf | Interseguro | Peru | Financial Services |
| 13 Oct 2026 | interlock | Concord Eye Center | Unknown | Healthcare |
Most Attacked Sectors (10d)All sectors
| Other | 25 | 28.4% |
| Non-Profit | 12 | 13.6% |
| Technology | 9 | 10.2% |
| Healthcare | 7 | 8.0% |
| Manufacturing | 7 | 8.0% |
| Education | 6 | 6.8% |
| Construction | 5 | 5.7% |
| Financial Services | 5 | 5.7% |
| Legal Services | 5 | 5.7% |
| Transportation | 2 | 2.3% |
| Agriculture | 1 | 1.1% |
| Energy & Utilities | 1 | 1.1% |
Cyber Threat Intelligence Updates
Curated intelligence updates are not available yet.
Key figures
This public tracker currently lists 7,130 claimed victim records, 16 groups active in the last 30 days, across 33 countries.
Last updated . Data is claimed-victim intelligence, not legal attribution. Cite invaders.ie/services/ransomware-tracker. Aggregate snapshot: JSON dataset.
About this trackerWhat this page is, how often it updates, how to cite
- What does the Invaders Ransomware Tracker show?
- It is a public intelligence surface that lists claimed ransomware victims, tracked groups, countries, and industries from Invaders threat data. It is not an authenticated product dashboard.
- How often is the ransomware tracker updated?
- The tracker refreshes from the live Strapi dataset. Each page shows a last-updated timestamp when a snapshot is available.
- How should I cite the Invaders Ransomware Tracker?
- Cite Invaders Cybersecurity and the canonical URL https://invaders.ie/services/ransomware-tracker. Aggregate KPI snapshots are published at https://invaders.ie/api/ransomware/v2/dataset.
- What is the difference between groups and victims pages?
- Groups pages summarize threat actors and their claimed volume. Victims pages list individual claimed attacks and can be browsed by country, industry, year, and month.