Ransomware Attack Tracker

1. Purpose: This tool searches a public database of ransomware victim disclosures (ransomware.live) for the company or domain you specify.

2. Data Collection: Your search query is transmitted to ransomware.live for lookup. If lead capture is enabled, your search may be logged locally for analytics. Your IP address is recorded alongside it and used for rate limiting and abuse prevention.

3. Third-Party Service: Results are sourced from ransomware.live, an external service that aggregates publicly available leak sites and ransomware group disclosures.

4. No Warranty: Results reflect data ransomware.live has aggregated. Absence does not guarantee an organization has never been targeted; presence does not imply current compromise.

5. Acceptable Use: This tool is provided for security research, due diligence, and threat awareness. Do not use it for harassment, doxxing, or any unlawful purpose.

6. Data Retention & Privacy: Locally stored data is retained for a limited period and automatically purged. Ransomware monitoring and newsletter subscriptions are kept until you unsubscribe. We do not sell or share search data with unrelated third parties.

7. Ransomware Monitoring (optional): You can ask to be warned when a name or domain appears in a new post on a ransomware leak site, up to 5 per email address. The address that receives the alerts has to be one you manage, confirmed with a 6-digit code we send to it. We store it with the names you watch and email you only about new posts. Turning on monitoring also subscribes you to our newsletter; unsubscribing from any of our emails stops all of it, and each alert has a link to stop watching a single name. To watch your whole supply chain, contact us.

8. Changes: These terms may be updated at any time. Continued use constitutes acceptance.