Search 17,907 ransomware victims across 200 threat actor groups and 102 countries.
Built from Binary Response's continuous dark web monitoring of ransomware group leak sites.
Data sourced from Tor-hosted leak pages, threat intelligence APIs, and open-source disclosure feeds since 2021.
17,907
Victims Tracked
200
Threat Actors
102
Countries
778
Last 30 Days
Recently Added Victims
The latest victims added to the tracker. Updated every 2 hours.
Loading recent victims...
Full list available in the searchable table below.
Recently Added Victims (Last 7 Days)
Showing 20 most recent victims added to the database in the last week.
This feed updates every 2 hours as new ransomware attacks are discovered on dark web leak sites.
Binary Response monitors 90+ ransomware group leak sites on Tor and the clearnet. When a threat actor publishes a new victim claim,
our automated pipeline captures the disclosure and adds it to this tracker. Data covers claims from 2021 to the present day.
Victim names appear as published by threat actors. Binary Response does not verify all claims. Some records may reflect
exaggerated or unconfirmed disclosures. Treat this data as threat intelligence, not confirmed incident reports.
For incident response support, contact our team.