TheGentlemen Erupts: 30 Victims in First 24 Hours
The dominant story this morning is the sudden activation of TheGentlemen, a group with zero recorded victims in the prior 24-hour window that posted 30 new victims in a single day — a 3,000% spike that immediately makes them the most prolific actor in the current cycle…
- SEVENOAKS s.r.o.emperador · CZ3 hours ago
- palletshopAuditTeam · RU4 hours ago
- Wise ITAuditTeam · UA4 hours ago
- bubenAuditTeam · RU4 hours ago
- dg.ac.krAuditTeam · KR4 hours ago
- gownet.netAuditTeam · KR4 hours ago
- krimax.orgAuditTeam · AR4 hours ago
- Leisure Coast Kitchenskairos · AU4 hours ago
- Reddrop Groupqilin · AU5 hours ago
- In The Company of Huskiesqilin · CA5 hours ago
Latest disclosures
View all victims →SEVENOAKS s.r.o.
3 hours agoEmperador
Czech RepublicData publishedpalletshop
4 hours agoAuditTeam
Retail & E-Commerce · RussiaData publishedWise IT
4 hours agoAuditTeam
Technology · UkraineData publishedbuben
4 hours agoAuditTeamRussiaData publisheddg.ac.kr
4 hours agoAuditTeam
Education · South KoreaData publishedgownet.net
4 hours agoAuditTeamSouth KoreaData publishedkrimax.org
4 hours agoAuditTeam
ArgentinaData publishedLeisure Coast Kitchens
4 hours agoKairos
Retail & E-Commerce · AustraliaData publishedReddrop Group
5 hours agoQilinAustraliaData published
Build on the free Darkfield feed
Pull the latest ransomware disclosures into your own tools and research — an open JSON feed and free API, no signup.
Live snapshot
Darkfield currently tracks 487 ransomware operators (112 with a disclosure in the last 60 days) and has indexed 45,972 public victim disclosures from their leak sites. Browse the full ransomware groups catalog, the live victims feed, or drill into sector and country breakdowns.
Most active ransomware operators
Recent public victim disclosures
- SEVENOAKS s.r.o.emperador · CZ
- palletshopAuditTeam · RU
- Wise ITAuditTeam · UA
- bubenAuditTeam · RU
- dg.ac.krAuditTeam · KR
- gownet.netAuditTeam · KR
- krimax.orgAuditTeam · AR
- Leisure Coast Kitchenskairos · AU
- Reddrop Groupqilin · AU
- In The Company of Huskiesqilin · CA
- Odyssey Charter School, Inc.Wallstreet · US
- Roshd SanatWallstreet · IR
Most-targeted sectors
These 8 cover 24,735 of 45,972 disclosures. A further 5,901 carry no usable sector label.
- Manufacturing5,165
- Business Services4,660
- Technology4,581
- Healthcare3,458
- Financial Services1,678
- Construction1,530
- Education1,485
- Transportation/Logistics1,181
Most-affected countries
These 8 cover 26,215 of 45,972 disclosures.
- United States17,984
- United Kingdom1,637
- Canada1,371
- Germany1,320
- France951
- Italy944
- India689
- Brazil664
What we monitor
six catalogs, all browsableRansomware operators
tracked groups, mirrors crawled daily
Public disclosures
victims indexed across leak sites
Industries
distinct sectors with observed activity
Countries hit
geographies with disclosed victims
Blocklists
wallets · phishing · breaches
Active exploitation
CVE signals + triangulated clusters