Monthly archive
Ransomware claims by sector, October 2026
Every public ransomware leak-site claim first observed in October 2026 (UTC), by sector label for US organizations and for all organizations, and the groups that posted the most claims.
Generated on Nov 2, 2026, 04:05 UTC, refreshed hourly
Allegation by a ransomware group, not a confirmed attackRansomware groups post these claims themselves; we count them, we do not verify them.
- All claims
- 1,946Worldwide
- US claims
- 57129.3% of all claims
- US claims with one agreed sector
- 22339.1% of US claims
- Active groups
- 118Named groups with a claim
US claims by sector
Claims against US organizations first observed in October 2026.
| Sector | Claims | Share |
|---|---|---|
| Manufacturing | 34 | 6.0% |
| Healthcare | 24 | 4.2% |
| Professional Services | 21 | 3.7% |
| Construction | 16 | 2.8% |
| Technology | 13 | 2.3% |
| Financial Services | 8 | 1.4% |
| Government & Defense | 8 | 1.4% |
| Legal | 8 | 1.4% |
| Education | 7 | 1.2% |
| Technologies | 5 | 0.9% |
| Architecture | 4 | 0.7% |
| Business Services | 4 | 0.7% |
| Attorney | 3 | 0.5% |
| Central administration and government | 3 | 0.5% |
| Government/Public Health | 3 | 0.5% |
| Other | 3 | 0.5% |
| Retail & E-Commerce | 3 | 0.5% |
| Transportation | 3 | 0.5% |
| Avionics | 2 | 0.4% |
| Education / Labor Union | 2 | 0.4% |
| Energy & Utilities | 2 | 0.4% |
| Finance | 2 | 0.4% |
| Food and drinks businesses | 2 | 0.4% |
| Health | 2 | 0.4% |
| Healthcare services | 2 | 0.4% |
| Hospitality | 2 | 0.4% |
| Industrial Technology | 2 | 0.4% |
| Insurance | 2 | 0.4% |
| Smart building & surveillance integration | 2 | 0.4% |
| Agriculture and agribusiness | 1 | 0.2% |
| Automotive Aftermarket, Auto Parts | 1 | 0.2% |
| Banking institutions | 1 | 0.2% |
| Broadcasting | 1 | 0.2% |
| Charity associations | 1 | 0.2% |
| Colleges & Universities | 1 | 0.2% |
| Construction / Defense | 1 | 0.2% |
| Construction / Flooring Installation | 1 | 0.2% |
| Construction Management | 1 | 0.2% |
| Construction/Defense | 1 | 0.2% |
| Consumer Services | 1 | 0.2% |
| Consumer Services, Retail, Manufacturing, Repair Services | 1 | 0.2% |
| Education / Publishing | 1 | 0.2% |
| Entertainment industry | 1 | 0.2% |
| Financial Services / Retirement Plan Administration | 1 | 0.2% |
| Government / Healthcare | 1 | 0.2% |
| Government and administrations | 1 | 0.2% |
| Government/Healthcare | 1 | 0.2% |
| Healthcare / Government | 1 | 0.2% |
| Healthcare/Pharmacy | 1 | 0.2% |
| Laboratory/Testing | 1 | 0.2% |
| Lodging industry | 1 | 0.2% |
| Logistics/Supply Chain | 1 | 0.2% |
| Professional Services / Property Tax Consulting | 1 | 0.2% |
| Publishing/Education | 1 | 0.2% |
| Real Estate | 1 | 0.2% |
| Real Estate/HOA Management | 1 | 0.2% |
| Retail | 1 | 0.2% |
| Retail (distribution) | 1 | 0.2% |
| Sports | 1 | 0.2% |
| Wholesale, Furniture, Home Decor, Retail, Real Estate | 1 | 0.2% |
| Unknown / not reported | 44 | 7.7% |
| Sources disagree | 304 | 53.2% |
| Total | 571 | 100% |
All claims by sector
Claims against organizations in every country first observed in October 2026.
| Sector | Claims | Share |
|---|---|---|
| Manufacturing | 103 | 5.3% |
| Healthcare | 42 | 2.2% |
| Professional Services | 34 | 1.7% |
| Construction | 32 | 1.6% |
| Technology | 32 | 1.6% |
| Financial Services | 20 | 1.0% |
| Other | 20 | 1.0% |
| Education | 18 | 0.9% |
| Government & Defense | 13 | 0.7% |
| Architecture | 11 | 0.6% |
| Information Technology | 10 | 0.5% |
| Retail & E-Commerce | 10 | 0.5% |
| Government | 9 | 0.5% |
| Hospitality | 9 | 0.5% |
| Legal | 9 | 0.5% |
| Transportation | 9 | 0.5% |
| Technologies | 8 | 0.4% |
| Energy & Utilities | 7 | 0.4% |
| Agriculture | 6 | 0.3% |
| Business Services | 6 | 0.3% |
| Finance | 5 | 0.3% |
| Healthcare services | 5 | 0.3% |
| Marketing/Advertising | 5 | 0.3% |
| Real Estate | 5 | 0.3% |
| Attorney | 4 | 0.2% |
| Automotive | 4 | 0.2% |
| Central administration and government | 4 | 0.2% |
| Information Technology / Telecommunications | 4 | 0.2% |
| Accounting & CPA | 3 | 0.2% |
| Agriculture and Food Production | 3 | 0.2% |
| Electrical Engineering / Automation | 3 | 0.2% |
| Engineering | 3 | 0.2% |
| Food and drinks businesses | 3 | 0.2% |
| Government/Public Health | 3 | 0.2% |
| Information Technologies Consulting | 3 | 0.2% |
| Pharmaceutical | 3 | 0.2% |
| Restaurants | 3 | 0.2% |
| Retail | 3 | 0.2% |
| Telecommunications | 3 | 0.2% |
| Agriculture and agribusiness | 2 | 0.1% |
| Avionics | 2 | 0.1% |
| Church | 2 | 0.1% |
| Digital securities / investment platform | 2 | 0.1% |
| Education / Labor Union | 2 | 0.1% |
| Engineering consulting | 2 | 0.1% |
| Facade engineering and construction | 2 | 0.1% |
| Government/Public Administration | 2 | 0.1% |
| Health | 2 | 0.1% |
| Industrial Technology | 2 | 0.1% |
| Industrials | 2 | 0.1% |
| Insurance | 2 | 0.1% |
| Manufacturing / Industrial | 2 | 0.1% |
| Media | 2 | 0.1% |
| Pharmaceutical manufacturing (GxP) | 2 | 0.1% |
| Port terminal operations | 2 | 0.1% |
| Retail (distribution) | 2 | 0.1% |
| Smart building & surveillance integration | 2 | 0.1% |
| Staffing | 2 | 0.1% |
| Telecommunications/IT | 2 | 0.1% |
| Transportation / Logistics | 2 | 0.1% |
| Wholesale/Retail | 2 | 0.1% |
| Academic Institutions | 1 | 0.1% |
| Accounting / Professional Services | 1 | 0.1% |
| Agriculture / Manufacturing | 1 | 0.1% |
| Agriculture/Food Production | 1 | 0.1% |
| Anaerobic Digestion & Renewable Energy Solutions | 1 | 0.1% |
| Apparel | 1 | 0.1% |
| Automotive Aftermarket, Auto Parts | 1 | 0.1% |
| Automotive Manufacturing | 1 | 0.1% |
| Aviation/Food Services | 1 | 0.1% |
| Banking institutions | 1 | 0.1% |
| Biotechnology | 1 | 0.1% |
| Broadcasting | 1 | 0.1% |
| Charity associations | 1 | 0.1% |
| Cloud infrastructure | 1 | 0.1% |
| Colleges & Universities | 1 | 0.1% |
| Construction / Defense | 1 | 0.1% |
| Construction / Flooring Installation | 1 | 0.1% |
| Construction / Real Estate / Hospitality | 1 | 0.1% |
| Construction Management | 1 | 0.1% |
| Construction/Defense | 1 | 0.1% |
| Construction/Real Estate | 1 | 0.1% |
| Consumer Services | 1 | 0.1% |
| Consumer Services, Retail, Manufacturing, Repair Services | 1 | 0.1% |
| Defense industry | 1 | 0.1% |
| Distribution | 1 | 0.1% |
| Education / Publishing | 1 | 0.1% |
| Energy | 1 | 0.1% |
| Energy & industrial distribution | 1 | 0.1% |
| Engineering Services | 1 | 0.1% |
| Engineering/Industrial | 1 | 0.1% |
| Engineering/Manufacturing | 1 | 0.1% |
| Entertainment industry | 1 | 0.1% |
| Environmental/Energy | 1 | 0.1% |
| Ferry / RoRo shipping | 1 | 0.1% |
| Financial / Accounting / Legal | 1 | 0.1% |
| Financial Services / Retirement Plan Administration | 1 | 0.1% |
| Fire Suppression / Safety | 1 | 0.1% |
| Food & Beverage | 1 | 0.1% |
| Freight & Logistics Services, Transportation | 1 | 0.1% |
| Freight / Logistics | 1 | 0.1% |
| Gas | 1 | 0.1% |
| Government / Healthcare | 1 | 0.1% |
| Government / Tax Authority | 1 | 0.1% |
| Government and administrations | 1 | 0.1% |
| Government/Healthcare | 1 | 0.1% |
| HVAC / Distribution | 1 | 0.1% |
| Healthcare / Government | 1 | 0.1% |
| Healthcare / Medical Devices | 1 | 0.1% |
| Healthcare/Dental | 1 | 0.1% |
| Healthcare/Dentistry | 1 | 0.1% |
| Healthcare/Pharmacy | 1 | 0.1% |
| Heavy industries | 1 | 0.1% |
| Home Essentials Retail & Financial Services | 1 | 0.1% |
| Hospitality/Travel | 1 | 0.1% |
| Hospitals & Clinics | 1 | 0.1% |
| Hosting | 1 | 0.1% |
| Hotel | 1 | 0.1% |
| Human Resources | 1 | 0.1% |
| IT Services and IT Consulting | 1 | 0.1% |
| IT Services/Consulting | 1 | 0.1% |
| Insurance/Financial Services | 1 | 0.1% |
| Laboratory/Testing | 1 | 0.1% |
| Legal / Accounting / Professional Services | 1 | 0.1% |
| Local administrations | 1 | 0.1% |
| Lodging industry | 1 | 0.1% |
| Logistics & Transportation | 1 | 0.1% |
| Logistics / Customs Brokerage | 1 | 0.1% |
| Logistics / Transportation | 1 | 0.1% |
| Logistics / Transportation Management Software | 1 | 0.1% |
| Logistics/Supply Chain | 1 | 0.1% |
| Luxury Goods / Retail | 1 | 0.1% |
| Manufacturing / Apparel | 1 | 0.1% |
| Manufacturing, Electronics | 1 | 0.1% |
| Manufacturing/Industrial | 1 | 0.1% |
| Marketing | 1 | 0.1% |
| Non-Governmental Organizations (NGOs) | 1 | 0.1% |
| Non-Profit | 1 | 0.1% |
| Online gambling / betting | 1 | 0.1% |
| Pharmaceutical Manufacturing & Disinfection Products | 1 | 0.1% |
| Pharmaceuticals | 1 | 0.1% |
| Port logistics operations | 1 | 0.1% |
| Port terminal operations / maritime logistics | 1 | 0.1% |
| Printing & Packaging | 1 | 0.1% |
| Printing & Publishing | 1 | 0.1% |
| Printing / Publishing | 1 | 0.1% |
| Professional Services / Accounting | 1 | 0.1% |
| Professional Services / Audit & Tax | 1 | 0.1% |
| Professional Services / Property Tax Consulting | 1 | 0.1% |
| Property Management | 1 | 0.1% |
| Publishing/Education | 1 | 0.1% |
| Rail transport | 1 | 0.1% |
| Real Estate / Construction | 1 | 0.1% |
| Real Estate/HOA Management | 1 | 0.1% |
| Recruitment/Staffing | 1 | 0.1% |
| Retail software / IT services | 1 | 0.1% |
| Retail/Distribution | 1 | 0.1% |
| Retail/Luxury Watches | 1 | 0.1% |
| Retail/Textiles | 1 | 0.1% |
| Road transport | 1 | 0.1% |
| SaaS/Property Management | 1 | 0.1% |
| Services | 1 | 0.1% |
| Sports | 1 | 0.1% |
| Staffing & Recruitment | 1 | 0.1% |
| Staffing/Human Resources | 1 | 0.1% |
| Staffing/Recruitment | 1 | 0.1% |
| Technology/SaaS | 1 | 0.1% |
| Transportation & Logistics | 1 | 0.1% |
| Universities | 1 | 0.1% |
| Wholesale and Retail Trade | 1 | 0.1% |
| Wholesale, Furniture, Home Decor, Retail, Real Estate | 1 | 0.1% |
| Unknown / not reported | 571 | 29.3% |
| Sources disagree | 744 | 38.2% |
| Total | 1,946 | 100% |
Most active groups
All claims in October 2026, worldwide, by the group that posted them. 118 named groups posted at least one claim.
| Rank | Group | Claims | Share |
|---|---|---|---|
| 1 | qilin | 182 | 9.4% |
| 2 | n0n | 175 | 9.0% |
| 3 | the gentlemen | 145 | 7.5% |
| 4 | apt73 | 91 | 4.7% |
| 5 | safepay | 85 | 4.4% |
| 6 | nightspire | 59 | 3.0% |
| 7 | genesis | 53 | 2.7% |
| 8 | emperador | 44 | 2.3% |
| 9 | SilentRansomGroup | 44 | 2.3% |
| 10 | akira | 43 | 2.2% |
| 11 | rhysida | 41 | 2.1% |
| 12 | Bavacai | 38 | 2.0% |
| 13 | Booba Project | 36 | 1.8% |
| 14 | AuditTeam | 35 | 1.8% |
| 15 | Orova | 32 | 1.6% |
| All other groups (103 groups) | 843 | 43.3% | |
| Total | 1,946 | 100% |
Method
- Sources. Claims come from public ransomware leak sites as recorded by 9 monitoring providers, 8 of them independent sources. Mirrors and alternate feeds of a provider count as that provider, and reports of the same claim from several providers are merged into one claim. Includes data from RansomLook (CC BY 4.0), RansomFeed.it (CC BY 4.0) and Darkfield by Orizon (Free to use with attribution), credited as their licences require.
- Month. A claim belongs to the UTC calendar month in which a tracked source first observed it, not the date the group gives for the attack, except for a source that gives no observation time: its claim then belongs to the month of the date that source gives for the claim, which can be the attack date. Only complete months are published. A month is complete once the data holds a provider record observed after it, so a month that has just ended appears when the first provider record of the next month is in, not at midnight.
- Sector. The sector is the free-text label a source gives the claim, counted exactly as written: labels that differ only in spelling or case are separate rows, and no label is grouped into a broad industry. When the sources of one claim give different labels, the claim counts as "Sources disagree", never under either label. When they agree, or only one of them gives a label, that label counts, whichever source gave it. A claim counts as "Unknown / not reported" when none of its sources gives a label other than "Unknown" or text that is no label (markup, chat markers or "not found" answers); such a source takes no part. "Other" is a label like any other. No claim is dropped, so each table adds up to its total.
- US claims. The claim's sources must report the organization's country as the United States, and none of them, nor the claim's own evidence (the organization's web domain, legal name or description), may point to another country; those claims count as contested. The same rule as the US state pages. Claims under editorial dispute or removed after review are left out.
- Groups. Claims are counted by the group's display name. The 15 most active groups are listed and the rest are summed.
- Counting. Every claim counts once: postings of the same organization by the same group, each within 7 days of the previous one, are one claim, counted on the UTC day a tracked source first observed it or, for a source that gives no observation time, on the UTC day of the date that source gives for the claim; a posting more than 7 days after the previous one is a new claim, counted in its own month the same way. Records an editor has reviewed are never merged. The monthly report and the US state pages count the same way, so the totals can be compared with both.
- Generated. Generated on Nov 2, 2026, 04:05 UTC; refreshed hourly. Late reports can still add claims to recent months.
Read the methodology for how claims are collected, corroborated and corrected.