Qilin Explodes From Zero to 19 Victims Overnight
Qilin is the defining story of the last 24 hours, surging from zero posted victims to 19 — a 1,900% spike that signals either a coordinated mass-posting event or a backlog dump following a period of silent operations…
- Codinterinsomnia · US2 hours ago
- GSW Gemeinschaftsstadtwerke GmbHqilin · DE2 hours ago
- White-Daters & Associates, Incqilin · US2 hours ago
- The University of the West Indiesqilin · TT2 hours ago
- EmpireWorksqilin2 hours ago
- Bridgeport Capital Servicesplay · US3 hours ago
- Sam Pack Auto Groupplay · US3 hours ago
- Woodhaven Associationplay · US3 hours ago
- BMW Groupxpl0itrs · DE5 hours ago
- Lansing Urgent Careincransom · US5 hours ago
Latest disclosures
View all victims →Codinter
2 hours agoInsomnia
Technology · United StatesData publishedGSW Gemeinschaftsstadtwerke GmbH
2 hours agoQilin
Energy & Utilities · GermanyData publishedWhite-Daters & Associates, Inc
2 hours agoQilinProfessional Services · United StatesData publishedThe University of the West Indies
2 hours agoQilinEducation · Trinidad & TobagoData publishedEmpireWorks
2 hours agoQilinData publishedBridgeport Capital Services
3 hours agoPlayFinancial Services · United StatesData publishedSam Pack Auto Group
3 hours agoPlayRetail & E-Commerce · United StatesData publishedWoodhaven Association
3 hours agoPlayUnited StatesData publishedBMW Group
5 hours agoXpl0ItrsManufacturing · GermanyData published
Build on the free Darkfield feed
Pull the latest ransomware disclosures into your own tools and research — an open JSON feed and free API, no signup.
Live snapshot
Darkfield currently tracks 499 ransomware operators (263 currently active) and has indexed 44,581 public victim disclosures from their leak sites. Browse the full ransomware groups catalog, the live victims feed, or drill into sector and country breakdowns.
Most active ransomware operators
Recent public victim disclosures
- Codinterinsomnia · US
- GSW Gemeinschaftsstadtwerke GmbHqilin · DE
- White-Daters & Associates, Incqilin · US
- The University of the West Indiesqilin · TT
- EmpireWorksqilin
- Bridgeport Capital Servicesplay · US
- Sam Pack Auto Groupplay · US
- Woodhaven Associationplay · US
- BMW Groupxpl0itrs · DE
- Lansing Urgent Careincransom · US
- The Rubber GroupGlobal Secret Group · US
- DL E&CPanzer · KR
Most-targeted sectors
- Business Services3,796
- Manufacturing3,692
- Technology3,572
- Healthcare2,608
- Financial Services1,194
- Education1,087
- Transportation/Logistics1,081
- Construction988
Most-affected countries
- United States14,195
- United Kingdom1,616
- Canada1,374
- Germany1,309
- France854
- Italy838
- Australia643
- India625
What we monitor
six catalogs, all browsableRansomware operators
tracked groups, mirrors crawled daily
Public disclosures
victims indexed across leak sites
Industries
distinct sectors with observed activity
Countries hit
geographies with disclosed victims
Blocklists
wallets · phishing · breaches
Active exploitation
CVE signals + triangulated clusters