Record Numbers of Ransomware Victims Named on Leak Sites

The number of victims named on ransomware leak sites reached “unprecedented levels” in the four months from March to June 2023, according to Secureworks’ 2023 State of the Threat report.

At current levels, 2023 is on course to be the biggest year on record for victim naming on so-called ‘name and shame’ sites since this practice began in 2019. It is expected the 10,000th victim name was posted to leak sites in late summer 2023, but this has not yet been confirmed by Secureworks.

The report, which presented insights from July 2022 to June 2023, revealed that one-off mass exploitations of specific vulnerabilities was the main factor for the record numbers of named victims in the latter four months of the period:

• March – Fortra GoAnywhere, exploited by Clop
• May – Zimbra mail server, exploited by MalasLocker
• June – MOVEit Transfer, exploited by Clop