Slice by source, severity, sector, threat actor, compliance window — every panel pivots back to the underlying records.
Scopes on this page: filings, run-rate, sectors and the state map cover the last 90 days across regulator sources only · the evidence mix and world map add unverified leak-site claims and press over the same window · distinct incidents is corpus-wide and unwindowed.
Weekly bins (ISO Monday, UTC), 90-day window. Stacked by 7 active regulator sources; leak-site claims and press are excluded here. Recent weeks are undercounts — filings for a given week keep arriving for weeks afterwards.
Records by country, 90-day window — regulator filings plus unverified leak-site claims. Darker countries carry more records.
US state-AG filing volume in the window.
Actor types, motives, action varieties, and named malware families.
Severity, sectors, verticals, and SEC / HIPAA / GDPR timing.
2,181 rows · 90-day window·7 sources·Includes backfilled data
All records incl. leak-site claims and press, 90-day window, grouped by evidence rung.
How the window's assessable notice clocks resolved — within statute, indeterminate, or flagged late.
Also active, not shown at this map scale: Singapore (40) · Hong Kong SAR China (19) · Malta (2) · Mauritius (2) · Andorra (1) · Anguilla (1) · Bahrain (1) · St. Lucia (1) +7 more
124 countries active in this window
This week (so far): 243 records · 52 countries
New in this window: Belize · Trinidad & Tobago · Samoa
4,807 of 5,186 records in this window carry a geography·Includes unverified leak-site claims·Source: Ransomware.live (https://www.ransomware.live)
Also active, not shown at this map scale: Delaware (15) · SG (6) · Rhode Island (4)
top filers: ma · nh · tx · vt
Filings by NAICS sector — the industries carrying the most disclosure volume this window.
Manufacturing filings down 53% vs. the prior 90-day window (119 → 56).
2,181 rows · 90-day window
Sector risk matrix incl. ransomware claims, repeat offenders, records-affected bands.