Skip to content

Search Ransomware Intelligence

Jump to a group, country, industry or search victims.

US · #1 of 183 countriesWatch United States

Ransomware Attacks In United States.

As of Oct 19, 2026, 13,550 organisations in United States have been listed as ransomware victims on leak sites, 42.0% of all confirmed victims and rank 1 of 183 countries. The most active group here is Qilin.

Updated continuously · figures as of Oct 19, 2026
Confirmed victims
13,550
Share of all victims
42.0%
Rank
#1 of 183
Most active group
Qilin
Most hit sector
Consulting

Victims Posted Per Month.

Confirmed ransomware victims in United States per month
MonthConfirmed victims
November 2025352
December 2025364
January 2026333
February 2026362
March 2026414
April 2026357
May 2026318
June 2026264
July 2026344
August 2026444
September 2026334
October 2026 (month in progress)248
Latest confirmed ransomware leak-site victims in United States
VictimClaimed byCountryIndustryData claimedPosted
PingCAP / TiDB Cloud
pingcap.com
FulcrumsecUSUnited StatesTechnologyNot stated
Latham & Watkins
lw.com
LeakeddataUSUnited StatesLegal ServicesNot stated
The Akeeli Group
theakeeligroup.com
N0nUSUnited StatesEducation and ResearchNot stated
Baltimore Tank Lines
baltimoretanklines.com
StormUSUnited StatesTransportation and LogisticsNot stated
Merit Financial Group
meritfinancialadvisors.com
StormUSUnited StatesFinancial ServicesNot stated
Patriot Maritime
patriotships.com
StormUSUnited StatesTransportation and LogisticsNot stated
American Campus
americancampus.com
HelixUSUnited StatesConstructionNot stated
Finzly Corp
finzly.com
N0nUSUnited StatesFinancial ServicesNot stated

Know When A Company In United States, Or One Of Your Suppliers, Is Posted.

Brandefense alerts on leak-site posts for your brands and third parties, with the group's profile and IOC feeds.

Figures as of Oct 19, 2026. Confirmed leak-site claims collected by Brandefense technologies and validated by Brandefense analysts.

Listed on a leak site means a ransomware group has claimed the company; it is not a confirmed breach. To request a correction or removal, contact Brandefense.