Ransomware groups
The groups behind the claim counts in 2026, with the months they were active. Counts only. Period: January to October 2026.
60 most active of 155 groups in 2026
| Group | Claims in 2026 | Months with claims | First claim in 2026 | Latest claim |
|---|---|---|---|---|
| qilin | 1089 | 10 | January 2026 | October 2026 |
| thegentlemen | 922 | 10 | January 2026 | October 2026 |
| akira | 414 | 10 | January 2026 | October 2026 |
| incransom | 378 | 10 | January 2026 | October 2026 |
| dragonforce | 329 | 10 | January 2026 | October 2026 |
| lockbit5 | 273 | 10 | January 2026 | October 2026 |
| nightspire | 260 | 10 | January 2026 | October 2026 |
| play | 221 | 10 | January 2026 | October 2026 |
| clop | 177 | 7 | January 2026 | September 2026 |
| safepay | 172 | 10 | January 2026 | October 2026 |
| krybit | 162 | 7 | April 2026 | October 2026 |
| coinbasecartel | 145 | 8 | January 2026 | August 2026 |
| everest | 118 | 8 | January 2026 | October 2026 |
| N0n | 116 | 2 | September 2026 | October 2026 |
| shinyhunters | 116 | 9 | January 2026 | September 2026 |
| Deadlock | 107 | 4 | June 2026 | October 2026 |
| genesis | 97 | 10 | January 2026 | October 2026 |
| nova | 96 | 7 | January 2026 | July 2026 |
| settra | 94 | 5 | June 2026 | October 2026 |
| sinobi | 87 | 4 | January 2026 | May 2026 |
| Storm | 86 | 3 | August 2026 | October 2026 |
| SilentRansomGroup | 82 | 8 | February 2026 | October 2026 |
| apt73 | 80 | 4 | April 2026 | July 2026 |
| direwolf | 78 | 5 | January 2026 | October 2026 |
| payload | 76 | 9 | February 2026 | October 2026 |
| pear | 76 | 10 | January 2026 | October 2026 |
| anubis | 73 | 10 | January 2026 | October 2026 |
| payoutsking | 71 | 8 | January 2026 | October 2026 |
| chaos | 65 | 10 | January 2026 | October 2026 |
| lynx | 61 | 7 | January 2026 | August 2026 |
| worldleaks | 61 | 7 | January 2026 | July 2026 |
| handala | 57 | 4 | January 2026 | April 2026 |
| AuditTeam | 56 | 6 | April 2026 | October 2026 |
| spacebears | 55 | 9 | February 2026 | October 2026 |
| Orova | 54 | 3 | August 2026 | October 2026 |
| insomnia | 53 | 8 | February 2026 | October 2026 |
| interlock | 52 | 10 | January 2026 | October 2026 |
| medusalocker | 52 | 5 | May 2026 | October 2026 |
| AiLock | 51 | 6 | March 2026 | August 2026 |
| Global Secret Group | 49 | 4 | July 2026 | October 2026 |
| lamashtu | 48 | 5 | April 2026 | October 2026 |
| BrainCipher | 46 | 6 | May 2026 | October 2026 |
| aurora | 46 | 7 | April 2026 | October 2026 |
| m3rx | 44 | 6 | April 2026 | September 2026 |
| Panzer | 43 | 3 | August 2026 | October 2026 |
| Wallstreet | 43 | 5 | June 2026 | October 2026 |
| cmdorganization | 43 | 3 | May 2026 | July 2026 |
| emperador | 43 | 3 | August 2026 | October 2026 |
| rhysida | 43 | 9 | January 2026 | October 2026 |
| ransomhouse | 41 | 10 | January 2026 | October 2026 |
| tengu | 40 | 3 | January 2026 | March 2026 |
| CRPxO | 37 | 2 | July 2026 | August 2026 |
| threeam | 36 | 6 | May 2026 | October 2026 |
| gunra | 34 | 6 | April 2026 | September 2026 |
| kairos | 34 | 9 | February 2026 | October 2026 |
| Dark Project | 33 | 3 | August 2026 | October 2026 |
| devman | 32 | 2 | January 2026 | February 2026 |
| Booba Project | 31 | 4 | July 2026 | October 2026 |
| bravox | 31 | 9 | February 2026 | October 2026 |
| L Group | 28 | 1 | August 2026 | August 2026 |