thegentlemen
ELEVATED7
Victims disclosed (30d)
27 total Canada victims
Manufacturing, Professional Services, Education
Snapshot • Oct 14, 2026
Live Intelligence
Fresh intelligence sourced from ransomware.live, prioritising Canadian disclosures and extortion campaigns.
Last refresh: Oct 28, 2026
Canadian Threat Pulse
Powered by ransomware.live Pro. We prioritise Ontario, GTA, British Columbia, and Quebec victims to drive rapid outreach across our Canadian client base.
Last refresh
Oct 28, 2026
Live polling active
Ransomware IOC
26
Victims disclosed in the past 30 days
+4% MoMCloud Drift
0
Misconfiguration paths blocked this week
0% WoWIdentity Attacks
0
Credential-stuffing bursts contained
0% WoW7
Victims disclosed (30d)
27 total Canada victims
Manufacturing, Professional Services, Education
Snapshot • Oct 14, 2026
3
Victims disclosed (30d)
3 total Canada victims
Education, Healthcare
Snapshot • Oct 27, 2026
3
Victims disclosed (30d)
3 total Canada victims
Financial Services, Not Found
Snapshot • Oct 11, 2026
Canadian victims
26
Canadian disclosures in the past 30 days.
Global spotlight
100
Victims tracked worldwide in the rolling archive.
Active crews
25
Top 20 ransomware crews ranked by victim disclosures in this archive.
thegentlemen: 7 logged
Canada, the United States, and Mexico weighted by confirmed disclosures across the rolling ransomware archive.
Victim geography & supply-chain exposure
Whitearmor
Published Oct 27, 2026
play
Published Oct 27, 2026
play
Published Oct 27, 2026
play
Published Oct 27, 2026
play
Published Oct 27, 2026
play
Published Oct 27, 2026
Ontario, GTA, British Columbia, and Quebec accounts comprise the majority of Canadian disclosures today. We surface the most recent activity in each market.
GTA and Ottawa focus
Toronto metro
Lower Mainland & Island
Montréal & provincial
Most active crews observed by TAG over the last quarter with last-seen timestamps.
01. rhysida
23 victims logged · Last seen Oct 28, 2026
02. N0n
11 victims logged · Last seen Oct 28, 2026
03. Whitearmor
11 victims logged · Last seen Oct 28, 2026
04. akira
86 victims logged · Last seen Oct 28, 2026
05. play
105 victims logged · Last seen Oct 27, 2026
06. Booba Project
13 victims logged · Last seen Oct 27, 2026
07. everest
15 victims logged · Last seen Oct 27, 2026
08. qilin
137 victims logged · Last seen Oct 27, 2026
09. dragonforce
23 victims logged · Last seen Oct 26, 2026
10. incransom
52 victims logged · Last seen Oct 21, 2026
11. thegentlemen
27 victims logged · Last seen Oct 14, 2026
12. safepay
32 victims logged · Last seen Sep 8, 2026
Country distribution for victims captured within the combined archive.
Victim geography & supply-chain exposure
| Rank | Country/Region | Victims |
|---|---|---|
| 1 | Canada | 1,127 |
| 2 | United States | 36 |
| 3 | Germany | 8 |
| 4 | United Kingdom | 4 |
| 5 | Malaysia | 3 |
| 6 | Italy | 3 |
| 7 | Denmark | 2 |
| 8 | Belgium | 2 |
| 9 | Mexico | 2 |
| 10 | Spain | 2 |
| 11 | Pakistan | 1 |
| 12 | United Arab Emirates | 1 |
Curated advisories surfaced alongside ransomware activity.
Canadian Centre for Cyber Security
The Cyber Centre observed coordinated credential-stuffing attempts preceding LockBit compromises in Ontario.
Ransomware.live
Ransomware.live telemetry shows healthcare victim listings rising 18% week-over-week.
Comparative look at ransomware disclosures versus phishing, smishing, vishing, and business email compromise (BEC) reports across Canada.
Broaden coverage with phishing, vulnerability, and IoC sources wired into the backend.
Phishing & Malware
Official bulletins covering critical vulnerabilities, phishing campaigns, and ransomware guidance tailored to Canadian operators.
Vulnerability Intelligence
Authoritative catalogue of vulnerabilities actively exploited in the wild with remediation deadlines to drive patch prioritisation.
IoC Feeds
Community-driven repository of fresh indicators of compromise spanning malware, C2 infrastructure, and phishing kits.
Phishing Intelligence
Continuously updated feed of verified phishing URLs suitable for mail and web gateway enforcement.
Malware & Botnet Activity
Global sensor telemetry on malware callbacks, exposed services, and botnet drones to support containment playbooks.
Tracking leagues sourced from ransomware.live and Cybersystem telemetry.
| Threat Group | Victim | Date Published |
|---|---|---|
| Barracuda | Femern Link Contractors | Oct 28, 2026 |
| rhysida | Broadstreet HEOR | Oct 28, 2026 |
| N0n | Company #112 | Oct 28, 2026 |
| Whitearmor | Echo.com | Oct 28, 2026 |
| Whitearmor | wagyu.xyz unfairness | Oct 28, 2026 |
| akira | Trulife | Oct 28, 2026 |
| akira | Roberts Consulting Services | Oct 28, 2026 |
| aurora | EWM Group | Oct 28, 2026 |
| akira | Insurance Services | Oct 28, 2026 |
| aurora | Meleghy Automotive & Cie. GmbH | Oct 28, 2026 |
| Whitearmor | Ryder | Oct 27, 2026 |
| rhysida | Machelen (Belgium) | Oct 27, 2026 |
| Whitearmor | https://t.me/whitearmorxd | Oct 27, 2026 |
| emperador | TWICE SRL | Oct 27, 2026 |
| play | Tailormade Logistics | Oct 27, 2026 |
| play | Coast 2 Coast | Oct 27, 2026 |
| play | VPC Builders | Oct 27, 2026 |
| play | Hygiena | Oct 27, 2026 |
| play | Money Concepts Capital | Oct 27, 2026 |
| play | MicroSearch | Oct 27, 2026 |
| play | QLC | Oct 27, 2026 |
| Whitearmor | wagyu.xyz | Oct 27, 2026 |
| Booba Project | Horizon Eye Specialists & LASIK Center | Oct 27, 2026 |
| direwolf | GRUPO PETROIL | Oct 27, 2026 |
| Booba Project | Hudson River Museum | Oct 27, 2026 |
| Booba Project | BASS Medical Group | Oct 27, 2026 |
| Booba Project | Kerckstede vzw | Oct 27, 2026 |
| Booba Project | RCOA- Regent Christian Online Academy | Oct 27, 2026 |
| Booba Project | Regent Christian Online Academy | Oct 27, 2026 |
| Booba Project | Charter Township of Commerce | Oct 27, 2026 |
| Booba Project | KING FAMILY MEDICAL | Oct 27, 2026 |
| Booba Project | City of Big Spring | Oct 27, 2026 |
| Booba Project | Aesthetic Specialty Centre | Oct 27, 2026 |
| Wallstreet | Bristol City Council | Oct 27, 2026 |
| N0n | Company #111 | Oct 27, 2026 |
| everest | OR Technology | Oct 27, 2026 |
| crypto24 | DATEM, Inc. | Oct 27, 2026 |
| everest | Burris & MacOmber | Oct 27, 2026 |
| everest | Energy Storage Terminal in Singapore | Oct 27, 2026 |
| everest | Point Robotics | Oct 27, 2026 |