Connecting the dots in the cyber battlefield…
Ransomware Attack Tracker helps security teams and organizations monitor live ransomware incidents worldwide. With real-time updates, our tracker provides insight into which threat groups are active, who they are targeting, and how attacks are evolving. By analyzing trends, victims, and global infection patterns, this tool gives you the intelligence you need to stay one step ahead of ransomware threats and protect your critical infrastructure.

January 20, 2026
The Nightspire ransomware group claims to have breached TriApex US Laboratories. TriApex US Laboratories is a Philadelphia-based bioanalytical facility and...

January 20, 2026
The Qilin ransomware group, a sophisticated Ransomware-as-a-Service (RaaS) operation known for its aggressive data exfiltration tactics, has claimed to have...

January 20, 2026
The The Gentlemen group, a sophisticated ransomware operation known for its rapid expansion and dual-extortion tactics, has added three international...

January 20, 2026
The Everest Group extortion group, a known cybercriminal entity specializing in data exfiltration and access brokering, claims to have breached...

January 20, 2026
MecMatica (MecMatica S.r.l.), an Italian software company specializing in industrial monitoring and manufacturing automation, has reportedly been compromised by the...

January 19, 2026
The Qilin ransomware group claims to have breached multiple organizations. The latest list of alleged victims posted by the group...

January 19, 2026
The Tengu ransomware group claims to have compromised two new organizations. The latest list of alleged victims posted by the...

January 16, 2026
The DragonForce ransomware group claims to have breached and published data from two new victims. The group, known for its...

January 15, 2026
The Sinobi ransomware group has allegedly compromised Kan & Krishme (K&K), a prominent Indian law firm specializing in intellectual property...

January 15, 2026
The INC Ransom group claims to have breached TruStar Holdings, LLC and VIST Labs, LLC, two affiliated technology firms based...

January 15, 2026
The Tengu ransomware group claims to have breached Nordstrom Rack, a prominent American off-price department store chain specializing in apparel,...

January 13, 2026
The Kazu ransomware group claims to have breached MyVete, a cloud-based veterinary software provider based in Argentina. MyVete is a...

January 12, 2026
The Oman Football Association (OFA), the governing body for football in the Sultanate of Oman, has allegedly been compromised by...

January 9, 2026
The Lynx ransomware group claims to have compromised Grupo Ruiz, a leading firm in sustainable and innovative mobility based in...

January 8, 2026
The Qilin ransomware group claims to have breached multiple organizations across Asia and Europe. The latest list of alleged victims...

January 8, 2026
The Black Shrantac ransomware group claims to have breached multiple organizations, listing them on their dark web leak site. The...

January 7, 2026
Options Community Services Society, a non-profit organization based in Surrey, British Columbia, has allegedly been compromised by the Lynx ransomware...

January 7, 2026
The Everest ransomware group claims to have breached Morgan Records Management, a company specializing in document scanning and record storage...

January 6, 2026
The Lynx ransomware group claims to have breached SW Automation, an Austrian control panel manufacturer and automation solution provider. Based...

January 5, 2026
Triad Packaging Inc., a packaging manufacturer based in Athens, Alabama, has allegedly been compromised by the Sicarii ransomware group. The...