Disclaimer
Table of Contents
Privacy
RedSheep Security does not collect sensitive information about its visitors. This site runs no third-party analytics or tracking scripts. All information presented on the platform is derived from publicly available data. While efforts are made to ensure accuracy, it is possible for mistakes or errors to occur. If you come across any incorrect information or a violation of your privacy, please contact me so that necessary updates can be made.
Disclaimer
RedSheep Security (redsheepsec.com) is a personal project that I have developed independently and outside of my working hours. This project is not affiliated with, endorsed by, or representative of my employer. All content is solely RedSheep Security and does not reflect the views or positions of my employer.
Content on this site is provided for informational and educational purposes only. It is aggregated and generated automatically from public sources in near-real-time and has not been independently verified. While sanitization efforts are made, by viewing or accessing this site you acknowledge you are doing so at your own risk.
The Ransomware Tracker is an inventory of claims made by criminal groups. Those claims are the sole responsibility of their authors, and their presence here does not constitute confirmation or validation of their allegations. It has been established that some claims are abusive. Any victim claim made by cybercriminals should be approached with caution and not considered verified without independent confirmation.
No files or stolen information are exfiltrated, downloaded, hosted, or disclosed by RedSheep Security. This site does not link to, mirror, or distribute leaked data of any kind. Any legal issues relating to the content of stolen files should be directed at the attackers, not at RedSheep Security or its upstream data sources. This site simply reports that an organization has been claimed as a victim of a ransomware attack.
Data Sources & Attribution
I hate taking credit for work that isn't mine. The trackers on this site are built on top of excellent public resources:
- Ransomware Tracker — victim and group data is pulled twice daily from ransomware.live, one of the best ransomware attack knowledge sites on the Internet, maintained by Julien Mousqueton. Data is retrieved on a best-effort basis and may lag behind the source.
- CVE Tracker — vulnerability data from the NIST National Vulnerability Database, known-exploited status from the CISA KEV catalog, and exploit probability from FIRST EPSS.
- Threat Actor Tracker — group profiles enriched from MITRE ATT&CK® STIX data, CISA advisories, and other public reporting.
Original analysis, reports, and tooling published here are my own work unless otherwise attributed.
Legal Notice
Effective as of 08/10/2026
By accessing and browsing redsheepsec.com (the "Site"), users fully and unreservedly accept this legal notice.
Site Publisher. The publication and editorial responsibility for the Site is assumed by Steven Stone (RedSheep Security). Contact: contact@redsheepsec.com.
Site Access. The Site is normally accessible to users at any time. However, the publisher may suspend, limit, or interrupt access to the Site at any time for updates or modifications, and cannot be held liable for any consequences resulting from unavailability.
No Warranty. All content is provided "as is" without warranty of any kind, express or implied, including but not limited to accuracy, completeness, or fitness for a particular purpose. Nothing on this Site constitutes legal, financial, or professional security advice.
Commercial Use. Any commercial use of all or part of the Site without the express permission of the publisher is prohibited and may result in legal action as provided by applicable law.
Contact. By email: contact@redsheepsec.com.