Free threat data for reporters and researchers

Ransomware listings, incidents and threat actors, searchable in one place.

What you can check in a minute

• Who has this group hit?Leak-site listings we collect ourselves, by group, sector and country.
• What is the full story?One page per incident, with every source, a timeline and the attack path.
• Who is behind it?Profiles of threat actors, malware and CVEs, linked to the coverage.
• Can I pull the data myself?Yes. Access includes the API and IOC feed.

Leak-site listings are claims made by the groups, not confirmed breaches. We publish our corrections.

Get free access

Working on a ransomware or breach story? Email us and we will set up your account, API included.