Skip to main content
Live
Merrill Iron & Steelhit by payoutsking· todayChibitekhit by N0n· Technology· todayacmestamping.comhit by incransom· Manufacturing· todayharborpacific.comhit by incransom· Transportation· todayUnknown - Construction Company Plainville MAhit by genesis· Construction· todayAndersen Grouphit by leakeddata· todayAonhit by termite· Professional Services· todayPotomac Animal Hospitalhit by the gentlemen· todayThe Law Office of James R Walshhit by the gentlemen· todayAll Smiles Dental of Falls Churchhit by the gentlemen· todayAlcoholics Anonymoushit by the gentlemen· todayPolishing Prozhit by the gentlemen· todayRag Electrichit by the gentlemen· todayMaverick Deskhit by the gentlemen· todayAnsonia Public Schoolshit by the gentlemen· todayAll Smiles Dental of Falls Churchhit by thegentlemen· Healthcare· todayThe Law Office of James R Walshhit by thegentlemen· Legal· todayPotomac Animal Hospitalhit by thegentlemen· Healthcare· todaySantee School District Foundationhit by the gentlemen· todayPIR Saleshit by the gentlemen· todayPalmahit by the gentlemen· todayHabbas Associateshit by the gentlemen· todayMercyMed of Columbushit by the gentlemen· todayAnsonia Public Schoolshit by thegentlemen· Education· todayMaverick Deskhit by thegentlemen· Manufacturing· todayRag Electrichit by thegentlemen· Construction· todayPolishing Prozhit by thegentlemen· Construction· todayAlcoholics Anonymoushit by thegentlemen· Other· todayBNYHhit by qilin· todaySkyplan Serviceshit by the gentlemen· todayMerrill Iron & Steelhit by payoutsking· todayChibitekhit by N0n· Technology· todayacmestamping.comhit by incransom· Manufacturing· todayharborpacific.comhit by incransom· Transportation· todayUnknown - Construction Company Plainville MAhit by genesis· Construction· todayAndersen Grouphit by leakeddata· todayAonhit by termite· Professional Services· todayPotomac Animal Hospitalhit by the gentlemen· todayThe Law Office of James R Walshhit by the gentlemen· todayAll Smiles Dental of Falls Churchhit by the gentlemen· todayAlcoholics Anonymoushit by the gentlemen· todayPolishing Prozhit by the gentlemen· todayRag Electrichit by the gentlemen· todayMaverick Deskhit by the gentlemen· todayAnsonia Public Schoolshit by the gentlemen· todayAll Smiles Dental of Falls Churchhit by thegentlemen· Healthcare· todayThe Law Office of James R Walshhit by thegentlemen· Legal· todayPotomac Animal Hospitalhit by thegentlemen· Healthcare· todaySantee School District Foundationhit by the gentlemen· todayPIR Saleshit by the gentlemen· todayPalmahit by the gentlemen· todayHabbas Associateshit by the gentlemen· todayMercyMed of Columbushit by the gentlemen· todayAnsonia Public Schoolshit by thegentlemen· Education· todayMaverick Deskhit by thegentlemen· Manufacturing· todayRag Electrichit by thegentlemen· Construction· todayPolishing Prozhit by thegentlemen· Construction· todayAlcoholics Anonymoushit by thegentlemen· Other· todayBNYHhit by qilin· todaySkyplan Serviceshit by the gentlemen· today
Omaha office · 9224 S 169th St
Serving local businesses since 2016
Veteran-owned and operated
Onsite support across the metro
Live · leak-site feed

Ransomware Intelligence

Live ransomware attack intelligence dashboard. Real-time worldwide victim tracking on an attack map, the most active gangs and their profiles, and recent US businesses hit by ransomware.

10,625

US victims tracked

2,978

US victims this year

280

US victims last 30 days

276

Active groups

US victims published per month

Leak-site postings against US organizations · 3,719 in the last 12 months.

Nov 25Jan 26Mar 26May 26Jul 26Sep 260150300450600

Leak-site infrastructure status

Live · ransomlook.io

154

Gangs online now

631

Gangs tracked

3,418

Leak sites monitored

3,038

Victim posts last 90 days

Mirror tracking: 35 of 367 known dark-web addresses reachable across 182 gangs — gangs run mirrors so a single seizure doesn't take them offline.

"Online" means the gang's dark-web leak site responded to a connection check — active infrastructure, actively publishing victims.

Live Threat Intelligence

Latest feed · 250 victims · 36 countries

65UNITED STATES
Live146 victims · 36 countries
Circle size = recent leak-site victim volume · arcs trace consecutive posts by the same gang, not attacker location
HealthcareGovernmentFinancialManufacturingTechnologyEducationOther
Live feed
Merrill Iron & Steel·payoutskingChibitek·N0n🇺🇸acmestamping.com·incransom🇺🇸harborpacific.com·incransom🇺🇸architekt-vondanwitz.de·incransom🇩🇪Unknown Italian Premium Cars Company·emperador🏴Ciftay Insaat Taahhut Ve Ticaret Anonim Sirketi·Qilin🏴Unknown (company transformed to LLC in 1992, joint-stock in 1994)·safepayUnknown (agricultural/poultry farm services company)·safepayUnknown (Stücheli architectural firm)·safepayUnknown (Construction Industry Association subsidiary)·safepay🏴Unknown (Grundén fishing/apparel company)·safepayCounty Government (US)·Rhysida🏴Online Marketing Agency Berlin·Rhysida🏴Unknown Online Marketing Agency·Rhysida🏴Unknown County Government (Medical/Jail)·Rhysida🏴Unknown - Staffing Services·genesisUnknown - CPA Firm 3·genesisUnknown - Restaurant·genesisUnknown - Construction Company Plainville MA·genesis🇺🇸Unknown - Real Estate Development·genesisUnknown - IT Services Provider 2·genesisUnknown - Local Construction Company·genesisUnknown - IT Services Provider 1·genesisUnknown - CPA Firm 2·genesisUnknown - CPA Firm 1·genesisUnknown - People & Transportation Services·genesisUnknown - Healthcare Provider·genesisUnknown - Industrial Machinery & Equipment·genesisAon·termiteEPTISA·qilin🇪🇸Andersen Group·leakeddataAndersen Group·SilentRansomGroupAll Smiles Dental of Falls Church·thegentlemen🇺🇸The Law Office of James R Walsh·thegentlemen🇺🇸Potomac Animal Hospital·thegentlemen🇺🇸Majestic Holidays India Private Limited·thegentlemen🇮🇳avsa.com.ar·lockbit5🇦🇷grunenwald.com·lockbit5🇫🇷Beni Suef Technological University – BTU·umbra🇪🇬Merrill Iron & Steel·payoutskingChibitek·N0n🇺🇸acmestamping.com·incransom🇺🇸harborpacific.com·incransom🇺🇸architekt-vondanwitz.de·incransom🇩🇪Unknown Italian Premium Cars Company·emperador🏴Ciftay Insaat Taahhut Ve Ticaret Anonim Sirketi·Qilin🏴Unknown (company transformed to LLC in 1992, joint-stock in 1994)·safepayUnknown (agricultural/poultry farm services company)·safepayUnknown (Stücheli architectural firm)·safepayUnknown (Construction Industry Association subsidiary)·safepay🏴Unknown (Grundén fishing/apparel company)·safepayCounty Government (US)·Rhysida🏴Online Marketing Agency Berlin·Rhysida🏴Unknown Online Marketing Agency·Rhysida🏴Unknown County Government (Medical/Jail)·Rhysida🏴Unknown - Staffing Services·genesisUnknown - CPA Firm 3·genesisUnknown - Restaurant·genesisUnknown - Construction Company Plainville MA·genesis🇺🇸Unknown - Real Estate Development·genesisUnknown - IT Services Provider 2·genesisUnknown - Local Construction Company·genesisUnknown - IT Services Provider 1·genesisUnknown - CPA Firm 2·genesisUnknown - CPA Firm 1·genesisUnknown - People & Transportation Services·genesisUnknown - Healthcare Provider·genesisUnknown - Industrial Machinery & Equipment·genesisAon·termiteEPTISA·qilin🇪🇸Andersen Group·leakeddataAndersen Group·SilentRansomGroupAll Smiles Dental of Falls Church·thegentlemen🇺🇸The Law Office of James R Walsh·thegentlemen🇺🇸Potomac Animal Hospital·thegentlemen🇺🇸Majestic Holidays India Private Limited·thegentlemen🇮🇳avsa.com.ar·lockbit5🇦🇷grunenwald.com·lockbit5🇫🇷Beni Suef Technological University – BTU·umbra🇪🇬

Most active groups (US)

Would your business show up on a leak site?

These gangs find victims through exposed services, spoofable email, and staff passwords already sitting in breach dumps. Run a free scan and see which of those you're currently handing them.

Check My Business

What a ransom negotiation actually looks like

149 leaked negotiations · 5 gangs

Median opening demand

$550K

124 cases

Median amount settled at

$200K

63 cases

Typical discount negotiated

56%

off the opening ask

Victims who paid

20%

the rest restored or refused

Aggregated from ransom negotiation transcripts leaked from criminal extortion portals. Figures are anonymous — no victim is identified. Paying does not guarantee recovery; tested backups are the only reliable way out.

Tracked ransom paymentson-chain Bitcoin data · Ransomwhere

$1.02B

total paid (USD at payment time)

21,802

payments tracked

11,186

wallets tracked

Conti $101.6MCuba $60.2MNetwalker (Mailto) $27.5MBlackSuit $25.0MBlackCat $21.9MLocky $14.0M

Last tracked payment about 2 years ago

Latest ransomware research

Source: AlienVault OTX threat exchange

Official CISA guidance

Free US-government advisories on the gangs above — each one lists the exact tactics used and the steps to defend against them.

Sort by

Merrill Iron & Steel

payoutsking
in about 1 hour

Chibitek

managed IT services (MSP) · USA | Complete client financial records held by this managed IT provider (accounting, inventory, payroll data); Client network credentials and configuration secrets; Internal company documents | [NOT PAID — EXPOSED: leak 2026-10-11 04:43 UTC]

N0n
Technology 33 minutes ago

acmestamping.com

Acme Stamping & Wire Forming Co. specializes in metal stamping, CNC machining, precision wire forming, and tool & die services. They offer a range of capabilities including progressive blanking, deep draw, and single station compound processes. The company caters to clients requiring high-quality manufacturing solutions with advanced equipment and precision engineering. Located in Pittsburgh, PA, Acme Stamping & Wire Forming is equipped to handle various production needs. Employees: 20 Revenue: $5 Million Phone Number: (412) 771-5720

incransom
Manufacturing about 1 hour agoacmestamping.com

harborpacific.com

Harbor Pacific Contractors, Inc. specializes in Industrial, Mechanical, and Heavy Civil Construction Services in the Pacific Northwest. Their offerings include wastewater and water treatment facilities, transportation infrastructure, pump stations, and power generation facilities. The company serves clients in Washington, Oregon, and Alaska, focusing on large-scale construction projects. With a commitment to quality and efficiency, they cater to various industrial construction needs. Employees: 20 Revenue: $5 Million Phone Number: (425) 488-7131

incransom
Transportation about 1 hour agoharborpacific.com

Unknown - Construction Company Plainville MA

genesis
Construction about 4 hours ago

Andersen Group

To be announced...

leakeddata
about 5 hours ago

Aon

Aon plc is an international professional services firm. It has two divisions: Risk Capital, which provides brokerage and consulting services for risk management, insurance and reinsurance, and Human Capital, which provides services related to health insurance, retirement plans, pension plans, and talent advisory.

termite
Professional Services about 6 hours agowww.aon.com

Potomac Animal Hospital

potomacanimalhospital.com zoominfo.com/c/potomac-animal-hospital/183255483 Potomac Animal Hospital is a family-owned, full-service small animal medical and surgical facility at 10020 River Road in Potomac, Maryland, an affluent Washington, DC suburb, founded in 1973 and led since 1983 by Air Force v

the gentlemen
about 6 hours ago

The Law Office of James R Walsh

jrwalshlaw.com The Law Office of James R. Walsh is a small plaintiff-side law firm in Lynnwood, WA (north of Seattle), specializing in workers' compensation (L&I claims), personal injury, maritime, and Social Security cases. Founder James R. Walsh (admitted 1981) has practiced for 44+ years and was

the gentlemen
about 6 hours ago

All Smiles Dental of Falls Church

allsmilesnova.com zoominfo.com/c/all-smiles-dental-of-falls-church/357420653 All Smiles Dental is a family-owned dental practice at 6400 Seven Corners Pl, Suite K, Falls Church, VA (Washington DC suburbs), serving Northern Virginia for over three decades — founded in the early 1990s by Vietnamese-im

the gentlemen
about 6 hours ago

Alcoholics Anonymous

aa.org zoominfo.com/c/alcoholics-anonymous/71374 lcoholics Anonymous is a worldwide fellowship of over 2 million members recovering from alcoholism, founded on June 10, 1935, in Akron, Ohio by Bill W. and Dr. Bob, and based on the "12 Steps and 12 Traditions" outlined in its 1939 basic text, the "Bi

the gentlemen
about 6 hours ago

Polishing Proz

polishingproz.com zoominfo.com/c/polishing-proz-inc/409891680 Polishing Proz LLC is a small, family-owned marble and natural stone care company based in Centennial, Colorado (Denver metro), founded around 2008–2012 with 13+ years of experience. It generates estimated revenue of $200K–$500K/year with

the gentlemen
about 7 hours ago

Rag Electric

ragelectric.com zoominfo.com/c/rag-electric-inc/401375471 RAG Electric, Inc. is a private, family-owned electrical contractor founded in 1987 (originally as FEIZ Electric) in Los Angeles, California, incorporated in 2001 and run by founder Farshad Feizbakhsh and his son Matthew. It generates estimat

the gentlemen
about 7 hours ago

Maverick Desk

myworkstream.com maverickdesk.com Maverick Desk is a private, U.S.-based office furniture manufacturer founded in 1992 in Gardena, California, with a second production plant in Fairfield, Ohio, and estimated annual revenue of $19.1M with ~23–50 employees. It produces 9+ collections of casegoods — d

the gentlemen
about 7 hours ago

Ansonia Public Schools

ansonia.org zoominfo.com/c/ansonia-public-schools/6671532 Ansonia Public Schools is a public PK–12 school district in Ansonia, Connecticut (Naugatuck Valley), serving ~2,332–2,404 students across 4 schools with 166 teachers (14.5:1 ratio, avg salary $99K) under Superintendent Dr. Joseph DiBacco. Ann

the gentlemen
about 7 hours ago

All Smiles Dental of Falls Church

allsmilesnova.com zoominfo.com/c/all-smiles-dental-of-falls-church/357420653 All Smiles Dental is a family-owned dental practice at 6400 Seven Corners Pl, Suite K, Falls Church, VA (Washington DC suburbs), serving Northern Virginia for over three decades — founded in the early 1990s by Vietnamese-im

thegentlemen
Healthcare about 7 hours agoallsmilesnova.com

The Law Office of James R Walsh

jrwalshlaw.com The Law Office of James R. Walsh is a small plaintiff-side law firm in Lynnwood, WA (north of Seattle), specializing in workers' compensation (L&I claims), personal injury, maritime, and Social Security cases. Founder James R. Walsh (admitted 1981) has practiced for 44+ years and was

thegentlemen
Legal about 7 hours agojrwalshlaw.com

Potomac Animal Hospital

potomacanimalhospital.com zoominfo.com/c/potomac-animal-hospital/183255483 Potomac Animal Hospital is a family-owned, full-service small animal medical and surgical facility at 10020 River Road in Potomac, Maryland, an affluent Washington, DC suburb, founded in 1973 and led since 1983 by Air Force v

thegentlemen
Healthcare about 7 hours agopotomacanimalhospital.com

Santee School District Foundation

santeesd.net zoominfo.com/c/santee-school-district-foundation/153059622 Santee School District is a public K–8 school district founded in 1891 in Santee, California (San Diego County), operating 9 schools serving approximately 5,922–5,990 students (ages 2–14, including Pre-K/TK). It employs ~640–846

the gentlemen
about 7 hours ago

PIR Sales

pirsales.com zoominfo.com/c/pir-sales-inc/84001098 PIR Sales, Inc. is a private, independent manufacturers' representative firm founded in 1992 in Chandler, Arizona, serving plumbing, irrigation, waterworks, fire/life safety, and HVAC markets across Arizona, Southern Nevada, New Mexico, and El Paso

the gentlemen
about 8 hours ago

Would your business have survived one of these?

Three questions decide it. If you can't answer one confidently, that's where to start.

When did you last test a restore from backup?

An untested backup is not a backup. Most businesses find out it was broken the week they need it.

How to test yours

Is remote desktop or any admin service exposed to the internet?

Exposed remote access is still the single most common way ransomware gangs get in.

See what's exposed

Is multi-factor authentication on every email account?

A stolen password with no second factor hands an attacker your inbox, and your inbox resets everything else.

Check your password

Updated 2 minutes ago · source: ransomware.live PRO · darkfield · ransomlook · cybercrime.works · ransomwhere

Worried you're a target?

DME Computer Services provides managed cybersecurity and ransomware-ready protection for Omaha businesses.