Customers
Threat Actors
Ransomware Claims
Sectors Affected
Get the full report
The report distinguishes between observed activity, exposed data, public claims, and confirmed compromise. A threat actor’s public claim does not by itself confirm that an intrusion occurred. Where a finding relies on an unverified claim, this is stated, and no compromise is attributed without corroborating evidence.