Email alerts

Watch up to 3 companies or domains. We'll email you when one appears in a new provider-observed ransomware claim. Free, with a confirmation step and one-click unsubscribe. Signing up needs JavaScript.

How alerts work

• We send a confirmation link first, and nothing is watched until you confirm. Confirm within 48 hours; unconfirmed sign-ups are deleted after 7 days.
• Only claims first observed after you confirm can trigger an alert. Use the vendor check to search earlier claims.
• New claims are checked every 15 minutes, using the same exact name and domain rules as the vendor check.
• Signing up again with the same address replaces your watchlist once you confirm the new link.
• Every email includes a link to unsubscribe. Alert emails are written in English.

Privacy

Your address and watchlist are stored encrypted and used only for these alerts. Unsubscribing deletes them; we keep only a one-way fingerprint and the unsubscribed status, so we don't email you again unless you sign up again. Delivery records are deleted after 60 days, or when you unsubscribe. Read the privacy notice.

Explore the tracker

• Live ransomware tracker overview
• Ransomware group directory
• Victim-claim directory
• Ransomware activity by country and sector
• Weekly ransomware signals
• Monthly State of Ransomware reports
• Latest security-threat news stories
• Data quality and screening dashboard
• Free vendor check for ransomware claims
• Free email alerts for watched companies
• Methodology and evidence model
• Glossary of tracker terms

Victim records are provider-reported allegations, not independently verified breaches. Published for research, defense, and educational use.