Explorer
One scope for every chart on the page. Every chart has a table, a CSV and the API call that made it.
GET /api/v1/ransomware/stats · GET /api/v1/ransomware/countries · GET /api/v1/ransomware/sectors · free tier · CC BY
Countries by disclosures
all time · corpus-wide, 47,368United States18,421United Kingdom2,031Germany1,756Canada1,675Italy1,203France1,151Brazil850India848Spain789
APISource: Darkfield corpus · updated in 27 minutes
Sectors
all time · placeholders become unclassified, never a sectorAccessibility ServicesBusiness Servicesothers4662.00×Business Services has 4662.00 times Accessibility Services's disclosures all time. Together they are 9.8% of a corpus that is 11% Manufacturing.
Manufacturing5,320Technology4,688Business Services4,662Healthcare3,575Financial Services1,731Construction1,551Education1,532Transportation/Logistics1,181Consumer Services997Accessibility Services1
APIthese 10 cover 25,238 rows · 53% · 11,371 unclassified
Operators by disclosures
all time · aliases folded into one rowLockBit6,932activeCl0p4,125activeQilin2,399activeALPHV/BlackCat2,393dormantBlack Basta1,846dormantIncransom1,829activeAkira1,770activePlay1,410activeRansomHub1,032dormant
APIStatus: 60-day rule, same as the Wire
Share this view
The scope lives in the address: paste the link in a report or a newsroom CMS and the reader lands on the same comparison.
darkfield.orizon.one/explorer?by=sector&a=Accessibility+Services&b=Business+Services
Darkfield by Orizon · CC BY2026-10-14
Coverage, stated on every page
- Disclosures in corpus
- 47,368
- Covered by the 9 ranked countries
- 28,724 · 61%
- Covered by the 10 ranked sectors
- 25,238 · 53%
- Sector unclassified
- 11,371
- Country unresolved
- 29
- Rows with our own leak-post capture
- 108 of the latest 200