499 ransomware operators,
117 of them posting right now.

Every actor that has claimed a victim on a public leak site, with sector focus, country breakdown, and time-since-last-post. An operator counts as active while it has posted a disclosure in the last 60 days.