Dashboard · Dark web intel
Ransomware claims by country
Every ransomware victim claim we track, placed on its country and played month by month. The fill deepens with the number of claims; each new claim pulses in its severity colour as the timeline runs.
111
Claims mapped
27
Countries
57
Busiest month · Sept 2026
41%
Rated critical
All months · 111 claims · 27 countries
0
1 2–3 4–7 8–15 16+ claims to date critical high medium low new claim
Country known for 111 of 571 claims; 460 older claims predate the source and are not mapped. Claims are as posted by the actors and unverified.
Most targeted countries
| Country | Claims | Critical | Last claim | Most active actor |
|---|---|---|---|---|
| United States of America US | 39 | 24 (62%) | 12 Oct 2026 | Storm |
| France FR | 23 | 4 (17%) | 11 Oct 2026 | ZaWoo |
| Brazil BR | 5 | 2 (40%) | 9 Oct 2026 | emperador |
| Canada CA | 4 | 1 (25%) | 9 Oct 2026 | cry0 |
| Germany DE | 4 | 2 (50%) | 10 Oct 2026 | Black X |
| Australia AU | 3 | 0 (0%) | 10 Oct 2026 | thegentlemen |
| United Kingdom GB | 3 | 1 (33%) | 3 Oct 2026 | thegentlemen |
| South Africa ZA | 3 | 2 (67%) | 27 Sept 2026 | everest |
| Switzerland CH | 2 | 1 (50%) | 28 Sept 2026 | safepay |
| Egypt EG | 2 | 0 (0%) | 11 Oct 2026 | UmBra |
| Spain ES | 2 | 1 (50%) | 12 Oct 2026 | qilin |
| Indonesia ID | 2 | 0 (0%) | 12 Oct 2026 | N0n |
| Morocco MA | 2 | 1 (50%) | 11 Oct 2026 | qilin |
| Turkey TR | 2 | 1 (50%) | 5 Oct 2026 | Doommageddon |
| Trinidad and Tobago TT | 2 | 0 (0%) | 5 Oct 2026 | emperador |
Related Dashboards
Dashboard Overview
Platform KPIs & summary
CVE Trends
Vulnerability types & scores
Breach Impact
Records exposed & timeline
Activity Timeline
Daily threat monitoring
Severity Analytics
Risk distribution by level
Ransomware Map
Claims by country, month by month