Search Ransomware Intelligence
Jump to a group, country, industry or search victims.
Conti
As of Oct 19, 2026, Conti has listed 343 confirmed victims on its leak site since Jul 11, 2025, 1.1% of all victims tracked by Brandefense. Its most targeted country is United States (4.4% of its victims) and its most targeted sector is Food and Beverage.
Conti is an extremely damaging ransomware due to the speed with which it encrypts data and spreads to other systems. It was first observed in 2020 and it is thought to be led by a Russia-based cybercrime group that goes under the Wizard Spider pseudonym. In early May 2022, the US government announced a reward of up to $10 million for information on the Conti ransomware gang.
Follow and IOC feeds are part of the Brandefense platform.
- Confirmed Victims
- 343
- Rank By Victims
- #20
- Last Leak-Site Post
- Jul 11, 2025
- Top Country
- United States
- Top Sector
- Food and Beverage
Victims Posted Per Month.
| Month | Confirmed victims |
|---|---|
| May 2026 | 0 |
| June 2026 | 0 |
| July 2026 | 0 |
| August 2026 | 0 |
| September 2026 | 0 |
| October 2026 (month in progress) | 0 |
| Month | Confirmed victims |
|---|---|
| November 2025 | 0 |
| December 2025 | 0 |
| January 2026 | 0 |
| February 2026 | 0 |
| March 2026 | 0 |
| April 2026 | 0 |
| May 2026 | 0 |
| June 2026 | 0 |
| July 2026 | 0 |
| August 2026 | 0 |
| September 2026 | 0 |
| October 2026 (month in progress) | 0 |
| Month | Confirmed victims |
|---|---|
| July 2025 | 343 |
| August 2025 | 0 |
| September 2025 | 0 |
| October 2025 | 0 |
| November 2025 | 0 |
| December 2025 | 0 |
| January 2026 | 0 |
| February 2026 | 0 |
| March 2026 | 0 |
| April 2026 | 0 |
| May 2026 | 0 |
| June 2026 | 0 |
| July 2026 | 0 |
| August 2026 | 0 |
| September 2026 | 0 |
| October 2026 (month in progress) | 0 |
Latest Conti Victims.
Search all 343 →| Victim | Country | Industry | Data claimed | Posted |
|---|---|---|---|---|
| Schaumburg Park District parkfun.com | USUnited States | Hospitality and Tourism | Not stated | |
| Agile Sourcing Partners agilesourcingpartners.com | USUnited States | Unknown | Not stated | |
| Midea Carrier mideacarrier.com.br | BRBrazil | Retail | Not stated | |
| Alimentos y Frutos minutoverde.cl | CLChile | Food and Beverage | Not stated | |
| Worksoft worksoft.com | USUnited States | Technology | Not stated | |
| Alliance Steel allianceokc.com | USUnited States | Unknown | Not stated |
How They Operate.
Conti's threat actor profile lists 29 ATT&CK techniques, 6 exploited CVEs, 26 malware and tools, with its targets and related actors.
TTPs, CVEs and malware →Who Conti Targets.
History.
First seen in Brandefense data
Busiest month on record: 343 confirmed victims
First confirmed victim listed on its leak site
Most recent leak-site post
Get Real-Time Alerts, IOC Feeds And Takedowns.
The Brandefense platform watches every leak site for your company, vendors and executives, and acts on what it finds.