
September: 956 listings, 79 groups. One group redacted its victims' names — and its own later posts gave 14 of them away. Plus Clop's 25-organisation set.
Read Briefing1,223 leak-site listings across 82 ransomware groups in August 2026. Qilin and The Gentlemen finished two posts apart, five crews accounted for 42% of the month, and three of the numbers people expect from a monthly index are missing on purpose.
Read Briefing
Ransomware groups publish victims on leak sites days before the press reports them. Here is how leak site monitoring works, what it catches, and why the gap is the most useful thing about it.
Read Briefing
Initial access brokers auction VPN, RDP and domain admin access to ransomware crews. See how IAB listings work, what they cost in 2026, and how to detect exposure early.
Read Briefing