Ransomware 2026-09-29

Ransomware activity digest — 2026-09-29

44 organizations were newly listed on ransomware leak sites, with the most active groups being safepay, threeam, qilin. Figures are aggregated from public leak-site metadata.

Most active groups

safepay (9) threeam (7) qilin (4) medusalocker (4) incransom (3) emperador (3)

Most affected sectors

Manufacturing (9) Healthcare (6) Not Found (5) Technology (5) Retail & E-Commerce (4) Other (3)

Source: Ransomware.live