Dashboard · Dark web intel
Ransomware claims by country
Every ransomware victim claim we track, placed on its country and played month by month. The fill deepens with the number of claims; each new claim pulses in its severity colour as the timeline runs.
246
Claims mapped
46
Countries
139
Busiest month · Oct 2026
36%
Rated critical
All months · 246 claims · 46 countries
0
1 2–3 4–7 8–15 16+ claims to date critical high medium low new claim
Country known for 246 of 721 claims; 475 older claims predate the source and are not mapped. Claims are as posted by the actors and unverified.
Most targeted countries
| Country | Claims | Critical | Last claim | Most active actor |
|---|---|---|---|---|
| United States of America US | 99 | 50 (51%) | 11 Nov 2026 | qilin |
| France FR | 38 | 4 (11%) | 10 Nov 2026 | thegentlemen |
| Germany DE | 11 | 3 (27%) | 11 Nov 2026 | payload |
| Brazil BR | 9 | 4 (44%) | 8 Nov 2026 | emperador |
| United Kingdom GB | 8 | 2 (25%) | 8 Nov 2026 | qilin |
| Canada CA | 6 | 2 (33%) | 20 Oct 2026 | qilin |
| Australia AU | 5 | 0 (0%) | 5 Nov 2026 | thegentlemen |
| Spain ES | 5 | 3 (60%) | 4 Nov 2026 | qilin |
| Italy IT | 4 | 2 (50%) | 6 Nov 2026 | N0n |
| South Africa ZA | 4 | 2 (50%) | 31 Oct 2026 | thegentlemen |
| United Arab Emirates AE | 3 | 0 (0%) | 20 Oct 2026 | qilin |
| Switzerland CH | 3 | 1 (33%) | 23 Oct 2026 | N0n |
| Colombia CO | 3 | 2 (67%) | 8 Nov 2026 | Whitearmor |
| Denmark DK | 3 | 0 (0%) | 7 Nov 2026 | Whitearmor |
| Austria AT | 2 | 0 (0%) | 29 Oct 2026 | krybit |
Related Dashboards
Dashboard Overview
Platform KPIs & summary
CVE Trends
Vulnerability types & scores
Breach Impact
Records exposed & timeline
Activity Timeline
Daily threat monitoring
Severity Analytics
Risk distribution by level
Ransomware Map
Claims by country, month by month