New Incident Management + Host Exposure Scanning — Shipped April 12
Monitor Features overview Vendor status Uptime & synthetic checks Certificate lifecycle Protect Brand protection Digital risk protection Agentic DRP Operate Incident management Live demo
By goal Replace your stack Why ServiceAlert Alternatives By signal Reliability rankings Transparency grades SLA compliance Outage map
Services
Check & scan Phishing & reputation scan Status checker SSL grader DNS lookup Response time WHOIS lookup Threat intelligence Threat actor catalog Ransomware tracker Has my company been listed? Trending CVEs Calculators SLA calculator Downtime calculator Embed Status badges Embeddable widgets All tools →
Pricing
Developer API reference Status badges Embeddable widgets Learn Blog Outage reports FAQ Changelog
Dashboard
LIVE · Updated daily from ransomware.live

Ransomware Activity Tracker

Cross-group leak-site monitor. Live count of who is being publicly extorted, by whom, in what sector, in what country. Updated daily; historical record stored locally and growing.

--
claimed in last 24 hours
Last 30 days
--
Victims · 7 days
--
Victims · 30 days
--
Active groups · 30d
--
Countries hit · 30d

Where it's hitting last 30 days

Victims 15102050+

Most active groups last 30 days

Loading…

Sector targeting in window

Live victim feed

Loading…

Data sources: ransomware.live (free public leak-site monitor maintained by Julien Mousqueton). Subscribe via RSS.
Posts on ransomware leak sites are group claims, not always confirmed breaches. Read this page as "who is being publicly extorted" rather than a roster of confirmed incidents. Historical records are stored locally so coverage keeps growing as the source's sliding-window feed rolls past.