Across 2025, 7,918 victim postings were observed on ransomware group data-leak sites (DLS) across 129 distinct threat actors sourced from ransomware.

The number of victims listed on data leak sites (DLS) reached 2,302 in Q1 2025. This count represented the highest single quarter count observed since tracking of these sites began in 2020.