Vendor check

Paste up to 10 suppliers, partners or customers and see whether any of them appears in a provider-observed ransomware leak-site claim. Free, exact matching, no sign-up. The checker needs JavaScript; your list is checked once and never stored, logged, or added to the page address.

How matching works

• Names match exactly, ignoring letter case, punctuation, accents, a leading "The" and legal suffixes such as Inc, Ltd or GmbH. Similar names do not match.
• Domains match a claim's website or domain-style name, including its subdomains.
• Shared-platform domains, such as social networks, website builders and hosting services, are skipped.

What "no claim found" means

We can only search claims that ransomware groups post on leak sites and that our providers record. Many incidents are never posted, some are posted under another name, and matching is exact, so a result without a claim does not mean an organization has had no incident. A claim that is found is an unverified allegation posted by a ransomware group, not a confirmed breach.

Keep watching

Get an email when up to 3 companies or domains appear in a new claim: set up email alerts. Checking more vendors? Dragons Eye Lookup checks up to 25 domains per request through an API, with an MCP server for AI agents.

Explore the tracker

• Live ransomware tracker overview
• Ransomware group directory
• Victim-claim directory
• Ransomware activity by country and sector
• Weekly ransomware signals
• Monthly State of Ransomware reports
• Latest security-threat news stories
• Data quality and screening dashboard
• Free vendor check for ransomware claims
• Free email alerts for watched companies
• Methodology and evidence model
• Glossary of tracker terms

Victim records are provider-reported allegations, not independently verified breaches. Published for research, defense, and educational use.