DragonForce Dominates as US Absorbs Half of Daily Hits
DragonForce leads the last 24 hours with 5 confirmed victims, making it the most operationally active group right now and extending its 7-day tally to 24 — placing it third in weekly volume behind the surging Deadlock collective (66 victims over 7 days) that bears close watching as it does not yet a…
- Saint George's Schoolcmdorganization · CO1 hour ago
- International Delightsqilin · US12 hours ago
- Fidelity Services Groupransomhouse · GB13 hours ago
- PanasonicAerocoinbasecartel · JP15 hours ago
- Heritage Mechanical LLCdragonforce · US18 hours ago
- Pioneer Constructionakira19 hours ago
- Isegen South Africa (Pty) Ltddragonforce · ZA19 hours ago
- Hughes Atwood & Mullaly pllcdragonforce · US19 hours ago
- Shillen Mackall & Seldondragonforce · US19 hours ago
- Stephens Precisiondragonforce · US19 hours ago
Latest disclosures
View all victims →Saint George's School
1 hour agoCmdorganization
Education · ColombiaData publishedInternational Delights
12 hours agoQilin
Agriculture and Food Production · United StatesData publishedFidelity Services Group
13 hours agoRansomhouse
Financial Services · United KingdomData publishedPanasonicAero
15 hours agoCoinbasecartel
Manufacturing · JapanData publishedHeritage Mechanical LLC
18 hours agoDragonforceBusiness Services · United StatesData publishedPioneer Construction
19 hours agoAkiraConstructionData publishedIsegen South Africa (Pty) Ltd
19 hours agoDragonforce
Energy · South AfricaData publishedHughes Atwood & Mullaly pllc
19 hours agoDragonforceBusiness Services · United StatesData publishedShillen Mackall & Seldon
19 hours agoDragonforceBusiness Services · United StatesData published
Build on the free Darkfield feed
Pull the latest ransomware disclosures into your own tools and research — an open JSON feed and free API, no signup.
Live snapshot
Darkfield currently tracks 471 ransomware operators (237 currently active) and has indexed 43,153 public victim disclosures from their leak sites. Browse the full ransomware groups catalog, the live victims feed, or drill into sector and country breakdowns.
Most active ransomware operators
Recent public victim disclosures
- Saint George's Schoolcmdorganization · CO
- International Delightsqilin · US
- Fidelity Services Groupransomhouse · GB
- PanasonicAerocoinbasecartel · JP
- Heritage Mechanical LLCdragonforce · US
- Pioneer Constructionakira
- Isegen South Africa (Pty) Ltddragonforce · ZA
- Hughes Atwood & Mullaly pllcdragonforce · US
- Shillen Mackall & Seldondragonforce · US
- Stephens Precisiondragonforce · US
- Jani-KingBooba Project · US
- Carient Heart & Vascularpear · US
Most-targeted sectors
- Business Services3,796
- Manufacturing3,681
- Technology3,549
- Healthcare2,600
- Financial Services1,184
- Education1,082
- Transportation/Logistics1,081
- Construction988
Most-affected countries
- United States14,148
- United Kingdom1,612
- Canada1,369
- Germany1,305
- France852
- Italy838
- Australia640
- India623
What we monitor
six catalogs, all browsableRansomware operators
tracked groups, mirrors crawled daily
Public disclosures
victims indexed across leak sites
Industries
distinct sectors with observed activity
Countries hit
geographies with disclosed victims
Blocklists
wallets · phishing · breaches
Active exploitation
CVE signals + triangulated clusters
Featured this week
Most active group
LockBit
3,536 victims claimed, last seen 4 months ago. Hits Business Services hardest.
Open dossier →
Biggest recent leak
—
No sized leak in the recent set.
CVE trending in chatter
—
Loading…