Live Data — Updated Continuously

Ransomware Statistics

Independent victim tracking from Binary Response's dark web monitoring platform. Data sourced from threat actor leak sites, ransomware intelligence feeds, and incident disclosures since 2021.

📡 Group Tracker 📞 IR Retainer Enquiry
—
Victims Tracked
All time, 2021–present
—
Threat Actor Groups
Active & historic
—
Last 30 Days
New disclosures
2021
Data From
Earliest tracked incident

📈 Victims by Year

Loading…

🔴 Most Active Threat Actor Groups (All Time)

Loading…

⏱ Recent Disclosures

Latest victims published to ransomware group leak sites. Organisation names sourced directly from threat actor disclosures.

Loading…
⚠ Methodology Note: Data is aggregated from publicly accessible ransomware group leak sites (cleartext and Tor), threat intelligence APIs, and open-source disclosure feeds. Victim names appear as published by threat actors — Binary Response does not independently verify all claims. Some records may reflect exaggerated or unconfirmed claims. Data should be treated as threat intelligence, not confirmed incident reports.

🔗 Citing These Statistics

This data is free to use for research, journalism, and educational purposes under CC BY 4.0. When referencing these statistics, please credit Binary Response with a link:

Source: Binary Response Ransomware Statistics — https://binary-response.com/threat-intel/ransomware-statistics.html

For bespoke ransomware intelligence, sector-specific trend reports, or IR retainer services, contact our team.

📄 Related Intelligence

tracker

Group Status Tracker

Live uptime monitoring for 90+ ransomware group leak sites.
analysis

Ransomware Landscape Q1 2026

Threat actor shifts, emerging groups, and sector targeting trends.
service

Ransomware Negotiations

Expert negotiation support if you're facing an active ransomware incident.

Loading data…