Dashboard · Dark web intel
Ransomware claims by country
Every ransomware victim claim we track, placed on its country and played month by month. The fill deepens with the number of claims; each new claim pulses in its severity colour as the timeline runs.
115
Claims mapped
29
Countries
58
Busiest month · Oct 2026
41%
Rated critical
All months · 115 claims · 29 countries
0
1 2–3 4–7 8–15 16+ claims to date critical high medium low new claim
Country known for 115 of 576 claims; 461 older claims predate the source and are not mapped. Claims are as posted by the actors and unverified.
Most targeted countries
| Country | Claims | Critical | Last claim | Most active actor |
|---|---|---|---|---|
| United States of America US | 39 | 24 (62%) | 12 Oct 2026 | Storm |
| France FR | 24 | 4 (17%) | 13 Oct 2026 | ZaWoo |
| Brazil BR | 5 | 2 (40%) | 9 Oct 2026 | emperador |
| Canada CA | 4 | 1 (25%) | 9 Oct 2026 | cry0 |
| Germany DE | 4 | 2 (50%) | 10 Oct 2026 | Black X |
| United Kingdom GB | 4 | 1 (25%) | 13 Oct 2026 | ransomhouse |
| Australia AU | 3 | 0 (0%) | 10 Oct 2026 | thegentlemen |
| South Africa ZA | 3 | 2 (67%) | 27 Sept 2026 | everest |
| Switzerland CH | 2 | 1 (50%) | 28 Sept 2026 | safepay |
| Egypt EG | 2 | 0 (0%) | 11 Oct 2026 | UmBra |
| Spain ES | 2 | 1 (50%) | 12 Oct 2026 | qilin |
| Indonesia ID | 2 | 0 (0%) | 12 Oct 2026 | N0n |
| Morocco MA | 2 | 1 (50%) | 11 Oct 2026 | qilin |
| Turkey TR | 2 | 1 (50%) | 5 Oct 2026 | Doommageddon |
| Trinidad and Tobago TT | 2 | 0 (0%) | 5 Oct 2026 | emperador |
Related Dashboards
Dashboard Overview
Platform KPIs & summary
CVE Trends
Vulnerability types & scores
Breach Impact
Records exposed & timeline
Activity Timeline
Daily threat monitoring
Severity Analytics
Risk distribution by level
Ransomware Map
Claims by country, month by month