Dashboard · Dark web intel
Ransomware claims by country
Every ransomware victim claim we track, placed on its country and played month by month. The fill deepens with the number of claims; each new claim pulses in its severity colour as the timeline runs.
45
Claims mapped
17
Countries
45
Busiest month · Sept 2026
47%
Rated critical
All months · 45 claims · 17 countries
0
1 2–3 4–7 8–15 16+ claims to date critical high medium low new claim
Country known for 45 of 496 claims; 451 older claims predate the source and are not mapped. Claims are as posted by the actors and unverified.
Most targeted countries
| Country | Claims | Critical | Last claim | Most active actor |
|---|---|---|---|---|
| United States of America US | 16 | 10 (63%) | 27 Sept 2026 | Storm |
| France FR | 10 | 1 (10%) | 25 Sept 2026 | ZaWoo |
| South Africa ZA | 3 | 2 (67%) | 27 Sept 2026 | everest |
| Brazil BR | 2 | 1 (50%) | 26 Sept 2026 | thegentlemen |
| Germany DE | 2 | 1 (50%) | 27 Sept 2026 | emperador |
| Canada CA | 1 | 0 (0%) | 20 Sept 2026 | arcusmedia |
| Switzerland CH | 1 | 0 (0%) | 20 Sept 2026 | qilin |
| United Kingdom GB | 1 | 0 (0%) | 27 Sept 2026 | Wallstreet |
| India IN | 1 | 0 (0%) | 22 Sept 2026 | AuditTeam |
| Kazakhstan KZ | 1 | 1 (100%) | 25 Sept 2026 | lockbit5 |
| Morocco MA | 1 | 1 (100%) | 25 Sept 2026 | incransom |
| Sweden SE | 1 | 1 (100%) | 19 Sept 2026 | N0n |
| Somalia SO | 1 | 1 (100%) | 21 Sept 2026 | lockbit5 |
| Turkey TR | 1 | 1 (100%) | 19 Sept 2026 | N0n |
| Trinidad and Tobago TT | 1 | 0 (0%) | 18 Sept 2026 | qilin |
Related Dashboards
Dashboard Overview
Platform KPIs & summary
CVE Trends
Vulnerability types & scores
Breach Impact
Records exposed & timeline
Activity Timeline
Daily threat monitoring
Severity Analytics
Risk distribution by level
Ransomware Map
Claims by country, month by month