• Office Hours: 6:30 AM – 6:30 PM
about Dashboard

About the Ransomware Intelligence Database

The Ransomware Intelligence Database is a continuously updated, publicly accessible repository of global ransomware activity. Maintained by the Ransomware.live project and integrated into the We Can Change IT dashboard, this dataset is designed to support threat monitoring, research, and organizational risk assessment.

Purpose

The database serves as a tool for security teams, researchers, and decision-makers to:

— Track ransomware incidents and trends over time
— Identify the most active groups and their tactics
— Assess risks by industry sector and country
— Support informed decisions in cybersecurity strategy and resilience

What It Contains

Each record in the Ransomware Intelligence Database includes:

— Victim Organization
— Ransomware Group
— Industry Sector
— Country of Impact
— Discovery or Attack Date
— Negotiation and Payment Details (when available)
— Source Link for reference

The database spans multiple industries including healthcare, finance, education, government, and more, providing insights into both the operational and economic impact of ransomware worldwide.

Data Sources

Records are compiled from reliable intelligence feeds and open-source reporting, including:

— Ransomware leak sites
— Public negotiation chats
— Security research publications
— Verified news and industry reports