Unknown / Unattributed
THREAT ACTOR NOT IDENTIFIED
Incidents where no threat actor has been publicly identified. Includes insider threats, opportunistic attacks, and cases still under investigation.
330
Threat actor leaderboard — 65 identified
🥇
Human Error
15
3.0%
🥈
CL0P
10
2.0%
🥉
Qilin
8
1.6%
#4
Medusa
8
1.6%
#5
RansomHub
8
1.6%
#6
Inside Threat
8
1.6%
#7
SafePay
6
1.2%
#8
Insider Threat
5
1.0%
#9
INC Ransom
5
1.0%
#10
Lynx
5
1.0%
#11
Akira
5
1.0%
#12
DragonForce
4
0.8%
#13
LockBit
4
0.8%
#14
KillSec
4
0.8%
#15
Sarcoma
4
0.8%
#16
ALPHV / BlackCat
4
0.8%
#17
Technical Issue
4
0.8%
#18
ShinyHunters
3
0.6%
#19
Kairos
3
0.6%
#20
Space Bears
3
0.6%
#21
Unknown (Accidental)
2
0.4%
#22
Unknown (Misconfigured DB)
2
0.4%
#23
RipperSec
2
0.4%
#24
Rhysida
2
0.4%
#25
Hunters International
2
0.4%
#26
REvil
2
0.4%
#27
Maze
2
0.4%
#28
Unknown (IoT botnet)
1
0.2%
#29
CMD Organization
1
0.2%
#30
Scattered Spider
1
0.2%
#31
Unknown (Supply Chain)
1
0.2%
#32
FulcrumSec
1
0.2%
#33
Interlock
1
0.2%
#34
Dire Wolf
1
0.2%
#35
CL0P (via Cleo exploit)
1
0.2%
#36
Unknown (Credential Stuffing)
1
0.2%
#37
Termite
1
0.2%
#38
Morpheus
1
0.2%
#39
Everest
1
0.2%
#40
Fog
1
0.2%
#41
NoName
1
0.2%
#42
SN_BLACKMETA
1
0.2%
#43
Fortibitch
1
0.2%
#44
BianLian
1
0.2%
#45
APT29
1
0.2%
#46
Menelik
1
0.2%
#47
Embargo
1
0.2%
#48
R00TK1T
1
0.2%
#49
Black Basta
1
0.2%
#50
Internal Error
1
0.2%