Skip to content

Ransomware Group Tracker

Active ransomware operations monitored by Threxar. Claims are logged as reported and may be unverified. All data is for research purposes.

Victim Entity ↕Syndicate ↕Sector ↕Country ↕Date Claimed ↓Exfil Size ↕Status ↕
Meridian Health SystemsNocturnLockHealthcareUnited States2026-09-2314 GBLeaked
Fenwick Municipal CouncilGhostSiloGovernmentUnited Kingdom2026-09-21240 GBDeadline Expired
Castlegate UniversityIronVeilEducationCanada2026-09-191.1 TBNegotiating
Hargreave Shipping LtdVortexRansomLogisticsNetherlands2026-09-17520 GBLeaked
Nordvik Energy GroupSilentPressEnergyNorway2026-09-15850 GBDeadline Expired
Pinnacle Financial ServicesCryptHoundFinanceAustralia2026-09-123.4 TBDumped
AeroTech ManufacturingNullForgeManufacturingGermany2026-09-081.8 TBNegotiating
StellarBridge RetailEclipseRansomRetailUnited States2026-09-05410 GBLeaked
Tokyo BioPharma InstituteCryptHoundHealthcareJapan2026-09-032.2 TBLeaked
Bharat Steel WorksNullForgeManufacturingIndia2026-08-31760 GBDeadline Expired
Banco Sul AmericanoBlackByteFinanceBrazil2026-08-281.5 TBDumped
Lumière Aerospace SystemsVortexRansomManufacturingFrance2026-08-25920 GBNegotiating
Victim EntityMeridian Health Systems
SyndicateNocturnLock
StatusLeaked
SectorHealthcare
CountryUnited States
Exfil Size14 GB
Date Claimed2026-09-23
Victim EntityFenwick Municipal Council
SyndicateGhostSilo
StatusDeadline Expired
SectorGovernment
CountryUnited Kingdom
Exfil Size240 GB
Date Claimed2026-09-21
Victim EntityCastlegate University
SyndicateIronVeil
StatusNegotiating
SectorEducation
CountryCanada
Exfil Size1.1 TB
Date Claimed2026-09-19
Victim EntityHargreave Shipping Ltd
SyndicateVortexRansom
StatusLeaked
SectorLogistics
CountryNetherlands
Exfil Size520 GB
Date Claimed2026-09-17
Victim EntityNordvik Energy Group
SyndicateSilentPress
StatusDeadline Expired
SectorEnergy
CountryNorway
Exfil Size850 GB
Date Claimed2026-09-15
Victim EntityPinnacle Financial Services
SyndicateCryptHound
StatusDumped
SectorFinance
CountryAustralia
Exfil Size3.4 TB
Date Claimed2026-09-12
Victim EntityAeroTech Manufacturing
SyndicateNullForge
StatusNegotiating
SectorManufacturing
CountryGermany
Exfil Size1.8 TB
Date Claimed2026-09-08
Victim EntityStellarBridge Retail
SyndicateEclipseRansom
StatusLeaked
SectorRetail
CountryUnited States
Exfil Size410 GB
Date Claimed2026-09-05
Victim EntityTokyo BioPharma Institute
SyndicateCryptHound
StatusLeaked
SectorHealthcare
CountryJapan
Exfil Size2.2 TB
Date Claimed2026-09-03
Victim EntityBharat Steel Works
SyndicateNullForge
StatusDeadline Expired
SectorManufacturing
CountryIndia
Exfil Size760 GB
Date Claimed2026-08-31
Victim EntityBanco Sul Americano
SyndicateBlackByte
StatusDumped
SectorFinance
CountryBrazil
Exfil Size1.5 TB
Date Claimed2026-08-28
Victim EntityLumière Aerospace Systems
SyndicateVortexRansom
StatusNegotiating
SectorManufacturing
CountryFrance
Exfil Size920 GB
Date Claimed2026-08-25

Disclaimer: All group names, victim names, and claim details are fictional and used for demonstration purposes only. Threxar does not facilitate access to compromised systems or data. Research use only.

Ransomware Ecosystem Report: Q3 2026

Full analysis of group activity, victim sector distribution, average dwell times, and emerging double-extortion tactics.

View Research →