Qilin Leads 26-Victim Surge, Manufacturing in Crosshairs
Qilin posted 5 victims in the last 24 hours, making it the most active ransomware group today and reinforcing its position as a persistent top-tier threat — consistent with its 26-victim count over the past 7 days…
- CNESTENqilin · MA3 hours ago
- Friendship Christian Schoolqilin · US3 hours ago
- Company #5N0n7 hours ago
- Company #4N0n8 hours ago
- Charles E. Tabor AAL LLCrhysida · US9 hours ago
- TQC S.A.dragonforce · PE10 hours ago
- Secretaría de Modernización e Innovación del MunicipioQilin12 hours ago
- Grundenssafepay · Sweden12 hours ago
- Unknown (electrical engineering, automation)safepay · Switzerland12 hours ago
- Anne Arundel CountyRhysida · US12 hours ago
Latest disclosures
View all victims →CNESTEN
3 hours agoQilin
Government & Defense · MoroccoData publishedFriendship Christian School
3 hours agoQilin
Education · United StatesData publishedCompany #5
7 hours agoN0nData publishedCompany #4
8 hours agoN0nData publishedCharles E. Tabor AAL LLC
9 hours agoRhysidaUnited StatesData publishedTQC S.A.
10 hours agoDragonforce
Manufacturing · PeruData publishedSecretaría de Modernización e Innovación del Municipio
12 hours agoQilinClaimedGrundens
12 hours agoSafepay
Manufacturing · SwedenClaimedUnknown (electrical engineering, automation)
12 hours agoSafepay
Engineering · SwitzerlandClaimed
Build on the free Darkfield feed
Pull the latest ransomware disclosures into your own tools and research — an open JSON feed and free API, no signup.
Live snapshot
Darkfield currently tracks 499 ransomware operators (117 with a disclosure in the last 60 days) and has indexed 47,126 public victim disclosures from their leak sites. Browse the full ransomware groups catalog, the live victims feed, or drill into sector and country breakdowns.
Most active ransomware operators
Recent public victim disclosures
- CNESTENqilin · MA
- Friendship Christian Schoolqilin · US
- Company #5N0n
- Company #4N0n
- Charles E. Tabor AAL LLCrhysida · US
- TQC S.A.dragonforce · PE
- Secretaría de Modernización e Innovación del MunicipioQilin
- Grundenssafepay · Sweden
- Unknown (electrical engineering, automation)safepay · Switzerland
- Anne Arundel CountyRhysida · US
- Gress Clark Young & SchoepperRhysida · US
- Confipetrolqilin · CO
Most-targeted sectors
These 8 cover 25,183 of 47,126 disclosures. A further 5,980 carry no usable sector label.
- Manufacturing5,305
- Technology4,673
- Business Services4,662
- Healthcare3,562
- Financial Services1,725
- Construction1,548
- Education1,530
- Transportation/Logistics1,181
Most-affected countries
These 8 cover 26,600 of 47,126 disclosures.
- United States18,322
- United Kingdom1,639
- Canada1,376
- Germany1,336
- Italy960
- France951
- India693
- Brazil666
What we monitor
six catalogs, all browsableRansomware operators
tracked groups, mirrors crawled daily
Public disclosures
victims indexed across leak sites
Industries
distinct sectors with observed activity
Countries hit
geographies with disclosed victims
Blocklists
wallets · phishing · breaches
Active exploitation
CVE signals + triangulated clusters