Search Ransomware Intelligence
Jump to a group, country, industry or search victims.
#19 of 28 industriesWatch Insurance
Insurance: Who Is Hitting It.
As of Oct 19, 2026, 172 Insurance organisations have been listed as ransomware victims on leak sites, 0.5% of all confirmed victims (about 1 in 200). The most active group in this sector is Clop.
Updated continuously · figures as of Oct 19, 2026- Confirmed victims
- 172
- Share of all victims
- 0.5%
- Rank
- #19 of 28 sectors
- Most active group
- Clop
- Most hit country
- United States
Victims Posted Per Month.
0
0
5
3
8
14
4
6
6
4
5
2
| Month | Confirmed victims |
|---|---|
| November 2025 | 0 |
| December 2025 | 0 |
| January 2026 | 5 |
| February 2026 | 3 |
| March 2026 | 8 |
| April 2026 | 14 |
| May 2026 | 4 |
| June 2026 | 6 |
| July 2026 | 6 |
| August 2026 | 4 |
| September 2026 | 5 |
| October 2026 (month in progress) | 2 |
Most Active Groups Here
Most Hit Countries In This Industry
Latest Victims.
All 172 Insurance victims →| Victim | Claimed by | Country | Industry | Data claimed | Posted |
|---|---|---|---|---|---|
| alera aleragroup.com | Iah6477 | USUnited States | Insurance | 2.6 TB | |
| Interseguro interseguro.pe | DireWolf | PEPeru | Insurance | 2.5 TB | |
| PALIG.COM palig.com | Clop | USUnited States | Insurance | Not stated | |
| taspenlife.com taspenlife.com | LockBit 5.0 | IDIndonesia | Insurance | Not stated | |
| B... berkshirehathaway.com | Leakeddata | USUnited States | Insurance | Not stated | |
| B... berkshirehathaway.com | Silent Ransom Group | USUnited States | Insurance | Not stated | |
| Somit somit.com | The Gentlemen | GTGuatemala | Insurance | Not stated | |
| Tower Insurance tower.co.nz | Coinbase Cartel | NZNew Zealand | Insurance | Not stated |
Sector Briefings For Insurance, Every Week.
The Brandefense platform sends a weekly ransomware brief for your sector and region: new groups, new victims among your peers and suppliers.