Cyber Insights
Live Feed

Ransomware & Cyberattack Threat Intel

Real-world ransomware activity, tracked and updated continuously — presented here so the scale of the threat is something you can see, not just read about.

Viewing
Hour Day Week Month
All-Time Tracked
32,137 victims across 403 tracked groups
Last 24 Hours
33 attacks disclosed
Data refreshed hourly — last pulled Sep 28, 2026 6:33pm UTC
By Group

Top 10 ransomware groups

safepay 9
medusalocker 4
emperador 3
qilin 3
Panzer 3
play 2
akira 2
incransom 2
payload 1
interlock 1
Show full group ranking (13)
#1 safepay 9
#2 medusalocker 4
#3 emperador 3
#4 qilin 3
#5 Panzer 3
#6 play 2
#7 akira 2
#8 incransom 2
#9 payload 1
#10 interlock 1
#11 SilentRansomGroup 1
#12 pear 1
#13 N0n 1
Distribution

Group share of attacks

safepaymedusalockeremperadorqilinPanzerplayakiraincransomOther
33attacks
safepay27.3%
medusalocker12.1%
emperador9.1%
qilin9.1%
Panzer9.1%
play6.1%
akira6.1%
incransom6.1%
Other15.2%
By Sector

Top 10 sectors

Healthcare 5
Manufacturing 5
Professional Services 3
Technology 3
Not Found 3
Retail & E-Commerce 3
Other 3
Government & Defense 2
Agriculture and Food Production 2
Hospitality 2
Recent Activity

Most recently disclosed attacks in this range

Organization Sector / Country Group Discovered
Starr Whitehouse Landscape Architects Professional Services · US play Sep 28, 2026 6:33pm UTC
Ever Ready First Aid Healthcare · US play Sep 28, 2026 6:32pm UTC
PKSF — Palli Karma-Sahayak Foundation Financial Services · BD medusalocker Sep 28, 2026 6:03pm UTC
Amazon Informatica Technology · BR emperador Sep 28, 2026 5:51pm UTC
New World Diagnostics Healthcare · PH qilin Sep 28, 2026 5:00pm UTC
Netech (Neeser Technik AG) Manufacturing · CH payload Sep 28, 2026 4:59pm UTC
Juntadeandalucia Government & Defense · ES medusalocker Sep 28, 2026 4:00pm UTC
Premiumfruits Agriculture and Food Production · ES medusalocker Sep 28, 2026 4:00pm UTC
The Center for Kidney Care Healthcare · US interlock Sep 28, 2026 3:58pm UTC
S...d Not Found · SilentRansomGroup Sep 28, 2026 3:52pm UTC

This data reflects publicly disclosed ransomware activity. Cyber Insights presents it purely for public awareness — to make the scale and pace of ransomware activity tangible, not to sell any product or service.

Data source: Ransomware.live