LockBit
ELEVATED2
Victims disclosed (30d)
Public Administration, Healthcare
Snapshot • Jan 19, 2025
Live Intelligence
Ransomware Tracker
Fresh intelligence sourced from ransomware.live, prioritising Canadian disclosures and extortion campaigns.
Last refresh: Jan 19, 2025 • Serving last successful capture while upstream recovers
Canadian Threat Pulse
🇨🇦 Live ransomware intelligence feed.
Powered by ransomware.live Pro. We prioritise Ontario, GTA, British Columbia, and Quebec victims to drive rapid outreach across our Canadian client base.
Last refresh: Awaiting feed
Awaiting live update
Cached snapshot displayed
Live ransomware feed unavailable. Showing latest cached snapshot.
Ransomware IOC
0
Victims disclosed in the past 30 days
0% MoMCloud Drift
0
Misconfiguration paths blocked this week
0% WoWIdentity Attacks
0
Credential-stuffing bursts contained
0% WoWMedusa
ELEVATED2
Victims disclosed (30d)
Transportation
Snapshot • Jan 17, 2025
Play
ELEVATED2
Victims disclosed (30d)
Education
Snapshot • Jan 15, 2025
Canadian victims
9
Unique Canadian disclosures preserved in the archive.
Displayed with sample data while the live feed is offline.
Global spotlight
2
Victims tracked worldwide in the rolling archive.
Demo global feed surfaced while live polling catches up.
Active crews
8
Top 20 ransomware crews ranked by victim disclosures in this archive.
LockBit: 2 logged
North America Heat Map
Canada, the United States, and Mexico weighted by confirmed disclosures across the rolling ransomware archive.
Global Extortion Surface
Victim geography & supply-chain exposure
Hover bubbles for detail
- City of TorontoCanada
LockBit
Published Jan 19, 2025
- GTA DiagnosticsCanada
ALPHV
Published Jan 18, 2025
- Vancouver Coastal LogisticsCanada
Medusa
Published Jan 17, 2025
- Québec Nord ManufacturingCanada
Black Basta
Published Jan 16, 2025
- Fraser Valley Charter SchoolsCanada
Play
Published Jan 15, 2025
- Delta UtilitiesUnited States
Play
Published Jan 14, 2025
Regional Spotlight
Ontario, GTA, British Columbia, and Quebec accounts comprise the majority of Canadian disclosures today. We surface the most recent activity in each market.
GTA and Ottawa focus
Ontario
- City of TorontoLockBitJan 19, 2025
- GTA DiagnosticsALPHVJan 18, 2025
- Ottawa Legal PartnersRansomHouseJan 14, 2025
Toronto metro
GTA
- City of TorontoLockBitJan 19, 2025
- GTA DiagnosticsALPHVJan 18, 2025
Lower Mainland & Island
British Columbia
- Vancouver Coastal LogisticsMedusaJan 17, 2025
- Fraser Valley Charter SchoolsPlayJan 15, 2025
- Surrey Auto ComponentsAkiraJan 12, 2025
Montréal & provincial
Quebec
- Québec Nord ManufacturingBlack BastaJan 16, 2025
- Montréal Clinical ResearchLockBitJan 13, 2025
- Quebec Fintech CooperativeRoyalJan 11, 2025
Most Active Ransomware Crews (90 days)
TAG momentum report
Most active crews observed by TAG over the last quarter with last-seen timestamps.
- TAG
01. LockBit
2 victims logged · Last seen Jan 19, 2025
- TAG
02. ALPHV
1 victims logged · Last seen Jan 18, 2025
- TAG
03. Medusa
2 victims logged · Last seen Jan 17, 2025
- TAG
04. Black Basta
1 victims logged · Last seen Jan 16, 2025
- TAG
05. Play
2 victims logged · Last seen Jan 15, 2025
- TAG
06. RansomHouse
1 victims logged · Last seen Jan 14, 2025
- TAG
07. Akira
1 victims logged · Last seen Jan 12, 2025
- TAG
08. Royal
1 victims logged · Last seen Jan 11, 2025
Global exposure
Country distribution for victims captured within the combined archive.
Live global telemetry unavailable or not fresh.
We only display verified, recent data. Please check back shortly.
No global telemetry captured yet.
Intelligence headlines
Curated advisories surfaced alongside ransomware activity.
- Open source · cyber.gc.ca ↗CCCS warns of increased ransomware targeting Canadian municipalitiesJan 15, 2025
Canadian Centre for Cyber Security
The Cyber Centre observed coordinated credential-stuffing attempts preceding LockBit compromises in Ontario.
- Open source · ransomware.live ↗Healthcare sector sees spike in extortion incidentsJan 12, 2025
Ransomware.live
Ransomware.live telemetry shows healthcare victim listings rising 18% week-over-week.
Five-Year Canadian Threat Trend
Comparative look at ransomware disclosures versus phishing, smishing, vishing, and business email compromise (BEC) reports across Canada.
Next data feeds
Broaden coverage with phishing, vulnerability, and IoC sources wired into the backend.
Phishing & Malware
Canadian Centre for Cyber Security Advisories
Official bulletins covering critical vulnerabilities, phishing campaigns, and ransomware guidance tailored to Canadian operators.
/api/threats/cyber-centreDocumentation ↗Vulnerability Intelligence
CISA Known Exploited Vulnerabilities (KEV)
Authoritative catalogue of vulnerabilities actively exploited in the wild with remediation deadlines to drive patch prioritisation.
/api/threats/kevDocumentation ↗IoC Feeds
Abuse.ch ThreatFox
Community-driven repository of fresh indicators of compromise spanning malware, C2 infrastructure, and phishing kits.
/api/threats/threatfoxDocumentation ↗Phishing Intelligence
OpenPhish Commercial API
Continuously updated feed of verified phishing URLs suitable for mail and web gateway enforcement.
/api/threats/phishingDocumentation ↗Malware & Botnet Activity
Shadowserver Daily Reports
Global sensor telemetry on malware callbacks, exposed services, and botnet drones to support containment playbooks.
/api/threats/shadowserverDocumentation ↗
Live Ransomware Disclosures
Tracking leagues sourced from ransomware.live and Solutioners telemetry.
| Threat Group | Victim | Date Published |
|---|---|---|
| LockBit | City of Toronto | Jan 19, 2025 |
| ALPHV | GTA Diagnostics | Jan 18, 2025 |
| Medusa | Vancouver Coastal Logistics | Jan 17, 2025 |
| Black Basta | Québec Nord Manufacturing | Jan 16, 2025 |
| Medusa | Europa Bank | Jan 16, 2025 |
| Play | Fraser Valley Charter Schools | Jan 15, 2025 |
| RansomHouse | Ottawa Legal Partners | Jan 14, 2025 |
| Play | Delta Utilities | Jan 14, 2025 |
| LockBit | Montréal Clinical Research | Jan 13, 2025 |
| Akira | Surrey Auto Components | Jan 12, 2025 |
| Royal | Quebec Fintech Cooperative | Jan 11, 2025 |